Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: 0fI2R9Sv0M6pEgsVRmU6yTCnKTXQwgXBZMgPUXrXL+k=
Subject key identifier: 0D:C9:E5:47:B7:86:C7:2E:A6:EB:2D:17:76:34:0E:01:C5:BA:58:B0
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 019A5B66C5E77BC3847A6342C32260F62F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0D1A
Signing time: Thu 06 Nov 2025 23:00:53 +0000
Manifest this update: Thu 06 Nov 2025 23:00:53 +0000
Manifest next update: Fri 07 Nov 2025 23:00:53 +0000
Files and hashes: 1: 5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa (hash: kqtxwSPKoLsi1ph5t4VnO3iKewevISmebmIE1RpFWLg=)
2: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: 0L5NY2Rw6oxw4cDkXS+YHjRh3FTKrhwbtrEkicUCsyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 20:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5b:66:c5:e7:7b:c3:84:7a:63:42:c3:22:60:f6:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Nov 6 23:00:53 2025 GMT
Not After : Nov 7 23:00:53 2025 GMT
Subject: CN=0dc9e547b786c72ea6eb2d1776340e01c5ba58b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:52:e2:3e:8d:04:5b:6c:9b:24:be:9e:38:
47:9d:52:a1:4f:05:07:1d:df:40:31:aa:dc:69:81:
bd:06:98:c5:e7:ae:f6:ea:8b:aa:80:40:79:74:a1:
9e:06:16:30:e5:e6:5d:66:3f:b2:60:a9:5c:96:37:
4b:e7:2b:07:63:4f:9a:11:76:cd:f2:36:e3:be:cf:
9c:91:1b:72:82:ff:6a:78:08:9a:37:15:cc:3a:d9:
07:6b:55:de:b4:f9:96:6f:40:c0:25:ba:2f:d4:ff:
b7:9c:7b:41:77:f2:ab:e6:aa:7f:b4:9e:b5:dd:a1:
f6:2d:74:aa:ff:5b:bc:80:93:a6:e7:f7:e7:5e:2f:
64:60:1f:b0:95:e7:52:20:23:64:c5:58:fd:3c:d9:
f8:db:2c:da:71:d7:74:dd:6d:28:0c:ff:6d:58:0e:
3a:3f:d8:6b:46:40:90:b9:95:4e:94:bb:88:1c:6f:
55:9b:c6:83:41:e2:da:cb:9d:93:ac:29:95:1f:79:
63:37:c1:9d:85:14:7f:27:5b:50:7d:bc:10:5b:6a:
eb:ea:aa:6b:2d:3d:1f:69:50:77:96:58:74:eb:d5:
8c:35:4c:1b:20:9c:03:91:ec:8b:7c:96:bc:9c:30:
af:1f:6f:b4:f3:a3:c2:7f:34:81:1f:2c:3f:57:70:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C9:E5:47:B7:86:C7:2E:A6:EB:2D:17:76:34:0E:01:C5:BA:58:B0
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8a:69:3a:f2:42:b6:f0:8c:ab:61:e4:ae:a8:02:5d:e2:ca:
41:f6:59:6e:4d:94:a0:74:93:75:44:90:a0:f5:47:a9:f4:bb:
f7:5c:e8:d0:e7:69:18:11:67:b6:a9:59:99:d8:56:50:34:c3:
74:2e:a6:a1:82:42:50:06:f4:f7:95:3b:f2:34:7f:4f:c1:24:
17:e7:74:fe:3a:ff:04:61:4e:97:cd:68:c4:63:d4:23:4f:c0:
60:75:29:8f:a9:97:01:f9:02:cf:1e:c7:93:99:9c:fa:b9:e1:
1a:29:bb:ee:d3:ae:f2:a8:f2:8b:27:0c:81:6d:03:0e:db:c0:
9e:74:48:41:63:4e:4b:53:57:62:1f:69:63:72:47:c8:98:c1:
d3:33:90:19:ab:34:e3:56:ed:fb:1b:ea:b7:f3:4e:d1:66:53:
41:8f:13:03:02:88:c8:f5:d0:67:fc:8c:91:32:e4:88:05:03:
e4:5e:e7:be:e0:df:67:52:ae:43:04:38:15:40:56:20:16:54:
e8:7d:25:30:19:a3:e6:46:2e:32:74:9e:e7:e7:a8:65:d4:ce:
f9:20:1f:2a:9d:80:82:69:76:ca:95:7c:7e:75:fd:fc:4f:ab:
97:5e:c6:2e:80:57:bb:b6:58:2f:d2:fa:8f:30:e7:45:1b:26:
21:d4:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 01:06:28 2025 by rpki-client