Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: 0hrPfC5PmxMxrUJqzZsmdIOhZqHGWy3rSDTu7Ha/A3w=
Subject key identifier: DE:61:60:93:F3:39:62:26:0C:E0:3E:1C:E1:F0:1A:5A:88:CB:DE:95
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 019A70A4D5742E78BADE0D89CA1C1ADF6A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 0ED1
Signing time: Tue 11 Nov 2025 02:00:41 +0000
Manifest this update: Tue 11 Nov 2025 02:00:41 +0000
Manifest next update: Wed 12 Nov 2025 02:00:41 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: lSKGmNX3zUCVSWC/5uIWf8Yt20IqrBZUBypexrSij6c=)
2: SOdbfA4k2rHns_9FeEf2o6kdRPA.roa (hash: UCxkRGVqhqrA5LNMsKBYYs+r3jtWXwOD0Dbnu0MtoW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d5:74:2e:78:ba:de:0d:89:ca:1c:1a:df:6a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Nov 11 02:00:41 2025 GMT
Not After : Nov 12 02:00:41 2025 GMT
Subject: CN=de616093f33962260ce03e1ce1f01a5a88cbde95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:fd:15:7f:d8:ce:45:70:45:de:db:2f:b8:
cd:e7:d7:1a:df:07:c8:b9:e1:33:6d:38:b3:36:62:
fd:14:15:b3:5b:cc:1d:61:0d:62:aa:0d:c3:a3:ed:
b9:ae:b8:ff:87:af:e9:62:3d:6e:0b:50:d4:9a:a7:
2d:86:2f:82:d1:c4:d0:c4:73:4f:c7:c2:d6:3e:7f:
cb:0a:4c:36:ad:79:24:29:6e:5b:1a:eb:60:6a:58:
dc:aa:3f:86:5e:70:c2:29:e9:4f:c0:bd:6b:e8:30:
70:d3:cc:c5:de:57:a5:fa:2a:e0:45:bc:d2:1f:99:
08:bf:71:20:38:84:be:e9:84:89:10:f3:f4:2a:e3:
f5:39:e1:17:d2:85:4e:fe:97:64:b0:ce:13:34:4c:
a7:e3:e7:28:27:26:d7:42:44:da:1f:c9:04:4c:65:
f4:65:a4:62:24:d4:f4:73:ff:f7:51:e8:c8:41:f8:
f3:75:4a:c5:ce:fb:77:0c:94:7c:d2:cc:30:54:cb:
d4:6e:87:91:9e:0e:08:86:04:86:b6:c6:80:b5:95:
6e:ed:2a:09:b0:a5:bd:51:27:f2:e2:5d:16:0c:af:
bb:a5:a1:10:1b:21:8d:82:43:d0:29:93:9b:c0:ed:
95:71:ea:a1:1c:03:71:32:f2:8e:f7:c6:0e:47:10:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:61:60:93:F3:39:62:26:0C:E0:3E:1C:E1:F0:1A:5A:88:CB:DE:95
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:4a:d1:e0:62:74:92:d0:36:fe:10:bc:ed:7f:dc:8f:a7:51:
b6:d9:ea:ff:e1:eb:d7:fe:cc:cc:71:b4:3a:7d:fa:5a:d7:a4:
d7:e4:f9:ae:d6:28:a4:3b:0b:32:5b:d3:0d:ab:38:0c:14:9f:
aa:99:45:f7:b2:ee:94:71:41:9a:9b:0a:c7:d7:3a:fc:0e:c3:
ff:60:7d:60:35:17:bf:a9:4b:b5:59:e4:83:e0:22:a3:00:76:
6f:1f:ad:37:1a:ae:03:dd:20:03:ec:a3:a5:6d:48:d1:99:f4:
21:3c:68:2c:24:78:64:65:fa:56:4a:e5:b4:87:fd:c4:a0:f6:
ae:1e:76:90:23:9a:8e:e2:a6:85:92:ea:50:b9:53:1a:08:11:
7a:e0:89:27:35:d7:ea:d9:b5:a0:1b:6e:b4:85:62:58:4a:bf:
17:7d:5e:7b:48:a0:63:6b:f5:33:ca:2f:29:ce:12:f6:78:70:
c4:a5:0e:e6:2a:2a:20:9b:6b:b7:87:e0:81:c6:45:ec:86:04:
6a:d5:03:fb:25:0b:38:91:9f:68:c9:c6:b2:28:9f:8f:a8:01:
e0:ec:62:3a:e8:a6:bd:75:07:91:7c:9b:91:ce:da:dd:5b:87:
72:2e:66:66:18:61:49:7e:a8:95:fc:b2:c6:0a:7e:4b:66:18:
d5:a7:cb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:56:07 2025 by rpki-client