Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: dBBnYaaqccTixmjV0hm+rY90s0ma63UgCmOjAF1T7dc=
Subject key identifier: 15:9F:92:FC:ED:23:A3:94:E8:21:21:55:11:1B:02:98:A9:62:A5:C4
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 019A7225A59ACF34E40085C7C3CF1A5D23E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: FEok26xBbY1z3SPcBm+upeYmqLFyW6a8E7fpiz/4V2U=)
2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a5:9a:cf:34:e4:00:85:c7:c3:cf:1a:5d:23:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=159f92fced23a394e8212155111b0298a962a5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:72:61:11:5e:e6:fe:d8:e0:89:f3:2c:94:
94:d6:85:62:9a:bd:d8:ee:f4:80:dc:58:b1:b1:d3:
85:cc:92:d3:7a:fc:8c:1d:4b:cc:c3:57:aa:18:f3:
57:88:7a:6f:91:b1:aa:08:50:e7:c8:a7:0e:7d:8d:
03:50:16:0e:c1:56:f5:73:a8:67:ae:2a:4a:52:59:
2f:f6:68:9d:65:36:b1:f1:a2:f3:0a:8d:d6:34:a0:
fd:26:46:09:a6:8b:0b:c3:4c:55:b1:a2:49:26:61:
eb:75:ed:0e:d0:0e:39:68:73:02:7c:dd:f7:db:13:
dc:34:77:4d:43:f0:69:22:c6:ac:19:f0:8a:e4:91:
ca:c0:f2:91:9f:c1:ec:9b:af:78:f1:83:74:9a:06:
57:2d:76:7f:79:45:9c:ea:f5:94:84:6c:46:72:c9:
41:e2:bc:98:c0:5b:e9:2b:46:7e:ae:a9:29:e6:eb:
07:73:b1:17:76:4b:f7:cc:9b:9a:cc:1a:a4:58:10:
34:67:3b:c1:a9:58:a7:19:a9:43:bf:70:df:ae:9c:
fd:23:fb:c8:f8:a9:8f:ca:ec:09:f8:8a:4e:fc:95:
d4:32:12:52:c3:78:46:40:a8:7d:81:88:d7:75:3b:
df:0c:87:4e:db:0b:0a:2a:d6:8d:be:66:0e:ca:97:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9F:92:FC:ED:23:A3:94:E8:21:21:55:11:1B:02:98:A9:62:A5:C4
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:6a:0e:b0:2b:e4:86:19:c7:f0:b5:ad:dd:47:11:76:a4:
44:31:58:5e:bb:2b:77:a0:81:32:94:d6:e8:5f:e7:ad:32:96:
d5:f8:e8:53:47:bd:39:18:19:cc:bd:71:9c:d1:f1:01:b0:04:
09:71:2f:d8:fc:f0:46:5e:70:89:9b:27:26:ec:dc:17:fe:1d:
d4:b4:af:3a:bb:5d:cf:02:4f:04:6c:6b:f9:08:d8:12:73:41:
be:6e:b6:29:d8:05:59:42:7c:58:9e:28:bc:ab:e4:fc:bd:30:
ae:91:45:2f:86:1a:20:5e:12:44:9f:f1:a4:39:94:ad:f5:f6:
aa:6b:4b:7b:18:73:10:bd:89:90:10:5d:51:53:0d:33:de:28:
6e:94:36:8a:bc:88:3f:12:0f:cd:c4:e4:36:79:09:08:e2:6f:
6d:e2:93:d8:45:8b:ea:74:d7:85:8c:fd:c3:0b:fe:25:d8:c3:
a3:e2:ca:03:9f:6d:92:ef:f6:fb:2d:43:7d:60:f8:44:aa:82:
5a:c2:3f:25:27:0a:6f:c8:9b:28:50:e5:bb:69:96:d4:d7:d3:
dd:80:cc:2a:fd:a2:96:be:95:d5:6c:3c:cb:1b:09:ed:68:39:
b7:2d:79:d5:73:f7:83:2e:6f:12:ed:65:de:67:ae:24:a4:07:
3a:53:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:55 2025 by rpki-client