Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: mbVwmmIRcQVZQoz/5EkADIykzXuYD8Y71DFK8W3GULM=
Subject key identifier: 18:09:0B:90:D1:E9:53:7B:40:21:2C:FE:D1:D6:55:CE:A2:AA:07:74
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019A725CF2BBCF29689256F3DBBB02898B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 1479
Signing time: Tue 11 Nov 2025 10:01:25 +0000
Manifest this update: Tue 11 Nov 2025 10:01:25 +0000
Manifest next update: Wed 12 Nov 2025 10:01:25 +0000
Files and hashes: 1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=)
2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: w0oou4lfCRZwVvKpYyZK1TjH1VhlaUmxBnuC+gq+qPY=)
3: 9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa (hash: zTkYPMu8h5Z/txGXaV3nKQYC/0+0sqJF536VnkSLAUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f2:bb:cf:29:68:92:56:f3:db:bb:02:89:8b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Nov 11 10:01:25 2025 GMT
Not After : Nov 12 10:01:25 2025 GMT
Subject: CN=18090b90d1e9537b40212cfed1d655cea2aa0774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:4e:66:f6:5d:a8:2e:b8:40:28:d1:30:68:
58:dc:e5:7f:35:43:b5:44:1c:d5:62:7f:01:cc:83:
ee:3a:09:06:90:2e:f5:e8:64:b7:9a:f4:f5:99:9a:
ab:75:f4:ca:9f:5c:61:f1:81:a6:1a:0a:f4:14:81:
ac:c5:77:19:69:4e:5a:6c:3e:25:71:3c:4c:0e:62:
16:00:57:4a:35:5e:3f:6e:9e:03:83:2b:62:c5:7b:
ab:22:55:bf:00:2a:15:78:fc:bd:11:34:83:53:d7:
d9:42:55:62:37:15:d6:4d:9c:4a:95:a9:05:ce:ab:
85:af:7b:3e:76:c9:bf:99:ae:03:86:35:48:60:3d:
53:e2:8b:c0:83:4c:04:27:83:cf:ce:f6:d3:a4:ab:
f7:33:ae:27:61:a9:73:f1:1e:00:4e:d8:07:95:ea:
ce:0d:d1:0d:b0:3f:e7:17:0f:31:ff:3d:1d:11:89:
4c:47:e3:9a:31:7b:ca:a9:ac:9c:be:8b:cc:46:eb:
d3:2b:15:0e:88:82:de:4d:8c:d3:cf:30:8f:31:cb:
66:69:57:14:30:70:04:d0:b6:38:31:c2:ed:42:db:
3f:02:a8:b5:e8:57:2e:b4:d0:55:fa:02:8a:22:57:
0c:10:cb:31:a9:dc:ff:ad:8c:c5:06:f0:e6:6e:7e:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:09:0B:90:D1:E9:53:7B:40:21:2C:FE:D1:D6:55:CE:A2:AA:07:74
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e6:ca:dc:45:03:60:04:41:6b:4f:50:d2:44:90:80:7a:a2:
8a:14:70:38:50:96:41:18:65:cd:30:2e:8e:72:96:f8:3f:c6:
65:67:e3:7d:bd:27:9a:60:c3:2c:7f:e2:04:a6:ab:ba:42:7e:
21:63:ba:7d:73:42:d2:07:bb:93:7d:95:0d:13:8a:80:e7:1b:
0f:62:05:0b:6f:d9:35:e1:16:ac:61:dc:e1:0c:52:51:c7:c5:
d5:c5:9a:f3:eb:44:61:90:e0:6b:37:06:c8:8b:fb:6c:1e:15:
10:56:79:f7:83:0e:7c:92:20:86:c1:f4:3d:58:c7:ac:4a:18:
18:e8:e5:51:14:d3:93:03:77:01:c9:c6:ef:59:19:35:e3:d2:
81:8a:89:fe:38:24:26:ff:96:12:c5:3b:ad:6d:5a:21:0f:fc:
9c:0b:e2:6f:0c:e2:1b:b0:2c:ee:17:bc:08:a4:94:4b:04:ff:
ad:83:05:d7:8e:e1:9e:f1:a3:18:3d:dd:dd:07:ae:ec:e6:ce:
b9:d7:12:a4:1a:a6:a9:37:ed:5a:96:13:1e:71:8a:4f:43:14:
46:20:5e:b5:72:24:76:03:d5:a2:43:89:65:06:1c:7d:86:a3:
60:61:03:8e:4c:55:9b:54:da:b4:2f:09:00:03:4d:31:11:d8:
88:c3:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:25 2025 by rpki-client