Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier: 2+63My7vBAvghFwXLFimjW4JRjunRWaA1QRsvUoQ1hQ=
Subject key identifier: 76:E4:F5:08:C2:C3:FF:5C:C8:1E:66:A6:09:69:E1:D7:1C:70:0E:6C
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 019A71B79BFD9F453D6A3844B3C5330AB9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number: 04AA
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: 3cGSK8NVA9eNtztBrAr51UavoEk.roa (hash: pMEP1TJfXu1V+w800yX1v0YDExi+6bPx0cct+Fh5aw4=)
2: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: RsSX5AHBxPHecZ0q83z9STuN7baKuDZqFCC1v/uiQNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9b:fd:9f:45:3d:6a:38:44:b3:c5:33:0a:b9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=76e4f508c2c3ff5cc81e66a60969e1d71c700e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:94:d3:5b:4a:a0:27:cc:2b:ac:7d:cd:c6:
2c:16:ef:cb:b5:ee:81:d8:79:65:04:ae:39:8e:79:
17:1a:00:2f:06:13:59:cf:cb:cd:53:28:98:3b:62:
28:61:a6:16:19:45:86:58:2c:2f:21:7c:cf:ce:80:
78:34:ea:6f:21:d5:cb:d6:2d:4a:93:cb:6e:8f:18:
77:0e:da:e1:7f:22:13:cb:c1:79:85:94:90:a1:b3:
1a:ef:8d:a2:d7:0d:2c:ce:27:29:c2:61:4c:26:bf:
86:30:30:1c:cd:3a:79:6d:86:7c:1d:ef:b6:0e:86:
15:5f:a8:fc:7c:6e:3f:39:56:24:15:7b:14:89:aa:
fc:30:16:42:2c:0d:a0:51:76:95:0d:f0:49:60:73:
c9:6d:b0:3c:7e:c5:0a:a8:ef:d4:37:9e:b1:6e:a8:
46:5f:b1:d7:10:47:82:41:4e:ee:a6:d5:c1:50:51:
e1:60:49:64:8b:55:f8:10:ac:f6:29:16:3c:2d:18:
0c:af:49:1f:c5:98:cd:77:42:1b:cb:60:8b:6a:1b:
54:a6:75:16:eb:b7:76:ea:57:24:4f:4b:c4:b0:03:
bd:8b:63:92:72:8c:2a:60:eb:e3:52:db:3c:1e:63:
dc:31:ac:bb:95:ea:b6:0b:32:fa:3d:3c:e4:37:46:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E4:F5:08:C2:C3:FF:5C:C8:1E:66:A6:09:69:E1:D7:1C:70:0E:6C
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:99:2b:22:c6:5d:6e:25:38:3e:fe:d1:44:e8:e0:4b:07:9f:
65:70:3d:ac:b4:f4:5d:7b:79:ca:a2:61:de:ad:8b:53:c5:e2:
ec:e5:b3:c2:6f:a1:d0:dc:fe:b9:3d:a7:b2:5b:39:b6:fc:cf:
70:7a:0c:93:59:03:d8:3b:ed:b1:a3:71:2a:ee:4c:d7:e8:2a:
13:92:92:20:57:46:f7:da:89:46:bd:96:7f:ab:d5:ef:00:7f:
f5:01:e4:4a:ac:0f:3a:1a:c2:38:b4:6b:93:29:b5:b3:39:bc:
ce:7c:76:2d:ec:d2:f1:d8:b8:ae:e6:0b:b9:05:91:03:6f:55:
20:1b:61:46:45:c9:7c:6b:e1:a9:76:8e:d2:91:b5:68:91:ec:
3f:a7:40:ec:c1:ea:f3:79:03:2e:af:96:f9:4e:0d:ff:27:84:
bf:41:a1:ae:5c:1b:44:c8:8c:44:74:45:93:d0:43:bf:47:98:
4b:0f:10:8c:b0:33:a3:e3:4a:ea:07:74:a1:7e:3a:0c:61:de:
71:d9:b0:a0:4e:08:bf:70:4a:ec:9a:ec:00:18:f1:81:53:a6:
fe:28:78:ae:f9:72:25:d7:8b:a7:35:77:7e:db:9f:23:5a:be:
c8:f8:28:8c:30:d7:25:c2:d8:49:f8:83:14:57:32:a6:59:f5:
1e:a2:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:25 2025 by rpki-client