Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: iMPZLaTTYZLcST72h26HatwZaCOjWPV02Y8y6Bm8lSU=
Subject key identifier: 73:91:47:1C:A9:FC:3B:65:55:72:F0:02:2C:2A:FD:C5:C8:41:95:67
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 019A71B9502F568367C4DB98DB9B7856E1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:02:41 +0000
Manifest this update: Tue 11 Nov 2025 07:02:41 +0000
Manifest next update: Wed 12 Nov 2025 07:02:41 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: XEZ6IncHHKAX0Axb7OsDbq9UzVBql7p9BgJknYyZ5oQ=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:50:2f:56:83:67:c4:db:98:db:9b:78:56:e1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Nov 11 07:02:41 2025 GMT
Not After : Nov 12 07:02:41 2025 GMT
Subject: CN=7391471ca9fc3b655572f0022c2afdc5c8419567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:35:e5:91:84:9a:1e:42:c2:20:e1:0c:f8:
9c:44:9d:e9:b5:97:a4:bd:1b:5c:2e:ce:86:35:53:
6d:f1:4c:69:1b:4b:22:20:aa:b9:01:40:e1:9c:06:
92:4c:b3:40:aa:a0:b1:e4:21:0b:3d:93:47:74:b1:
9b:30:5f:3e:c1:48:0f:4f:12:d9:49:34:13:7a:d3:
b8:af:87:a9:23:ff:15:61:9e:e5:fb:8a:8b:87:dd:
68:f8:b9:e7:c9:0c:bb:c8:92:74:1d:22:e9:41:cc:
15:c4:98:ee:f2:0f:44:86:00:b4:bf:2f:d4:93:d6:
a1:9e:ae:e5:b8:83:b6:5c:5a:a0:a4:8d:28:30:8a:
fb:26:ff:ea:2a:c6:f5:9d:18:06:63:9c:54:50:43:
5b:94:1a:9d:f7:ee:b1:44:57:d8:26:f9:3a:3c:4c:
13:5b:ac:b2:b1:3c:56:2d:a8:62:74:27:e6:1c:dc:
aa:88:f2:f9:27:00:07:37:39:97:7c:e3:6e:9a:2f:
79:69:7f:19:ba:9c:aa:36:ce:02:b6:48:0c:eb:f2:
b1:fb:d0:35:9b:b7:3f:95:c6:cd:b6:f8:ab:4a:04:
54:51:ef:b1:14:cf:65:15:1f:d0:0d:44:28:51:90:
2b:6a:20:fa:d5:1d:e0:df:ce:b0:87:6c:6d:f9:03:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:47:1C:A9:FC:3B:65:55:72:F0:02:2C:2A:FD:C5:C8:41:95:67
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7e:4b:10:36:02:63:f0:c8:5a:17:5e:3c:a8:d9:ed:75:77:
9a:be:77:d3:ff:82:43:07:7c:d8:30:3e:ed:e9:2c:b2:4d:37:
f6:bb:8a:9d:1e:da:45:8d:79:22:b5:f1:d6:de:d2:f3:ff:53:
72:4a:85:74:b1:72:1b:fe:09:1f:cb:d8:d1:5a:2a:ee:1c:6e:
61:3b:c1:70:de:e5:a6:41:96:9d:35:ee:c1:ef:63:70:43:1f:
38:86:a9:77:e8:ff:00:78:b1:62:33:4c:9c:11:87:6f:5f:cf:
32:75:a5:aa:3f:3b:8b:52:46:91:59:0c:f2:55:f5:ff:f6:66:
5c:a2:b0:f9:6a:b0:6b:9b:34:07:78:e1:ce:34:ab:2f:59:8d:
af:99:83:2b:ed:7e:67:89:61:de:a5:bb:fb:f1:74:77:92:af:
43:dd:85:5d:b7:a7:46:b6:ec:67:d1:2b:dc:f7:ed:36:e5:24:
45:c3:88:66:a1:fd:c8:f9:51:bc:d8:0d:cb:3e:9f:23:fd:f3:
36:4d:ef:e5:78:4c:8a:f9:3d:58:92:95:b8:03:9a:62:d1:20:
5d:a3:5a:39:3b:c7:01:d9:99:87:10:2b:4c:93:10:6e:8d:00:
1d:b0:d9:30:56:8c:f6:a0:9b:28:a6:38:59:37:ec:1c:ef:84:
6c:fa:1e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:45 2025 by rpki-client