Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: znEbIIudrhpQ85YJNrNa6mTY0kBUQBc3DqlfqfhBCd8=
Subject key identifier: 21:2C:B8:79:96:B5:24:EA:E6:5A:53:15:3C:85:87:0A:63:F1:84:8B
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 019A706E5B1F8C6F48BA26F5F6CDCF9168B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 01:01:11 +0000
Manifest this update: Tue 11 Nov 2025 01:01:11 +0000
Manifest next update: Wed 12 Nov 2025 01:01:11 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: 6FyTuqaODTz891BfFg/6X15Avx5LxWYbK6FC+Nh4YTs=)
2: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (hash: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:5b:1f:8c:6f:48:ba:26:f5:f6:cd:cf:91:68:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Nov 11 01:01:11 2025 GMT
Not After : Nov 12 01:01:11 2025 GMT
Subject: CN=212cb87996b524eae65a53153c85870a63f1848b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:77:9a:85:23:5d:2c:a6:bc:35:69:09:c2:
00:49:ad:18:7e:e1:85:81:f4:47:77:85:51:e0:87:
00:23:c1:3a:a3:b7:14:e4:b5:0f:8d:a0:b3:3d:ab:
ac:99:62:4f:03:a6:a0:cd:71:de:42:53:70:d5:41:
f3:2d:20:9b:bf:c4:59:41:5c:74:30:d5:45:d6:cd:
d6:03:c8:fb:7b:06:eb:44:57:06:3a:b9:12:d8:de:
ec:cb:cf:fa:a7:c1:83:0a:fe:44:24:a7:e1:a6:4e:
b4:84:cc:de:87:fd:3b:e5:22:c6:1e:e5:6b:94:f9:
0b:87:8a:30:f9:3c:89:3d:12:c8:2a:de:6a:98:ed:
6e:12:af:57:00:e9:27:fc:99:9b:b6:e5:46:e4:75:
cd:4d:96:d0:62:3d:6a:21:8a:65:6f:3f:fe:a6:75:
2e:1a:0d:ae:a3:de:7c:98:7f:72:30:53:29:94:c7:
0b:2e:dc:73:60:cf:00:cd:5b:c6:de:5b:5e:89:bb:
a5:92:54:91:2e:92:47:21:62:fd:b6:a0:75:5a:39:
35:72:47:ae:68:88:ee:04:e3:a2:91:a1:79:c7:99:
60:8a:19:80:ed:51:da:94:c5:91:71:98:06:ef:0e:
d4:ce:72:89:4f:2d:95:20:f7:3e:47:ad:97:ab:2e:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2C:B8:79:96:B5:24:EA:E6:5A:53:15:3C:85:87:0A:63:F1:84:8B
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1c:4d:98:59:68:1b:a6:78:99:07:1e:38:6d:97:17:51:5f:
54:31:28:1f:a4:61:d4:37:d9:f2:53:99:a8:5b:dc:84:b4:e3:
6b:48:71:f4:d1:df:21:d5:42:83:38:a9:46:66:b8:67:a6:3f:
a5:3a:27:c5:91:f4:9f:f8:e9:33:39:d7:44:cd:aa:a5:a0:c2:
e0:d3:27:f7:01:86:2b:c6:a3:94:41:3a:2c:a2:8e:c9:7c:1d:
a6:5b:d3:16:f3:b7:25:8f:62:56:99:b2:f9:19:cf:8a:d2:3e:
0a:11:07:b9:0c:93:c9:cc:a2:c2:9e:23:ea:19:f0:bb:10:db:
83:c5:bc:4e:9b:85:d7:54:c2:84:d3:18:3d:a8:9d:8b:83:c1:
85:1e:f6:7c:d5:0f:4a:6e:ab:b3:32:5d:14:ec:4b:46:e6:dc:
36:da:2a:83:18:94:0d:be:ef:6c:22:ff:f8:1e:ac:df:18:cf:
b1:b8:61:8c:45:a7:03:e4:50:f8:49:54:69:84:e7:85:e6:20:
f8:ec:06:b0:23:f1:a4:a9:91:e3:4b:10:1e:54:d7:61:9c:c1:
8f:7c:a2:b9:de:1b:f0:61:f3:e9:c2:bf:e6:8a:9a:16:82:8c:
97:0c:3a:2d:96:c9:96:7d:bf:c0:5d:b4:c2:b4:1b:c7:87:93:
13:8b:45:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:00 2025 by rpki-client