Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: QAHSgo/ipJvuSWLYb4iO0y8qYMO6EE5E3Xh5BVx1f0Q=
Subject key identifier: 17:34:65:80:D3:7C:78:9E:13:F3:B4:64:E8:62:15:4A:09:78:FE:47
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 019A71B76E56554FFECBFF4DDD0AECFDD4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:37 +0000
Manifest this update: Tue 11 Nov 2025 07:00:37 +0000
Manifest next update: Wed 12 Nov 2025 07:00:37 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: cjefbODNuR5pC/NN2yn2mymkpJBClRgcylQjS17biF8=)
2: uu25l9W5gSZu_tAy5o8jy6VhkvE.roa (hash: Mo0sHJu2Fpws6Go/Wkd7BWgvp/SCXCkUPd0a54ZzbWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6e:56:55:4f:fe:cb:ff:4d:dd:0a:ec:fd:d4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Nov 11 07:00:37 2025 GMT
Not After : Nov 12 07:00:37 2025 GMT
Subject: CN=17346580d37c789e13f3b464e862154a0978fe47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ad:c2:9b:92:85:cb:45:f0:29:73:22:0f:e9:
bf:1f:88:a3:ed:62:2e:28:6e:57:4a:e7:b8:48:7f:
2f:c1:4e:e3:13:24:09:65:12:32:87:64:cf:62:26:
79:46:09:34:73:d0:d0:22:26:a9:a8:3c:73:76:13:
03:99:09:84:8e:75:bb:ed:e6:24:4f:08:40:a7:17:
5b:0c:65:4c:2c:10:e2:f9:52:f2:ed:cf:91:8e:a2:
7d:e3:05:17:ca:2f:4a:75:a2:52:e1:24:57:de:d6:
89:99:42:0a:03:f3:60:cd:31:69:8e:2b:98:e9:23:
6c:9e:eb:7f:f7:c2:04:cd:db:23:2b:e7:3e:e6:f5:
46:52:f8:6a:ea:60:e7:55:72:73:f5:17:3c:6d:a5:
16:70:2f:d3:4e:09:16:11:7d:ad:df:e5:aa:9d:68:
0b:80:d8:47:2d:e1:c3:47:18:10:78:27:5d:da:16:
4e:56:1b:c4:e2:94:fc:eb:c9:2b:fd:7d:b0:7c:38:
b1:68:fe:4e:32:e2:ba:0b:85:05:12:3e:7d:1a:f6:
2a:b3:38:e0:42:ee:8e:9a:4d:ec:b9:4a:86:70:b6:
4f:c8:00:68:56:c8:ed:54:34:6d:64:fb:44:7f:c6:
08:fd:83:10:af:d8:f8:86:11:b5:dd:94:15:82:e1:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:65:80:D3:7C:78:9E:13:F3:B4:64:E8:62:15:4A:09:78:FE:47
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:21:b4:b0:12:0b:4f:d2:fc:a6:3b:20:30:f4:f2:a6:6c:9c:
6a:3b:e7:d0:9f:5a:9a:5f:0c:f4:2e:af:c1:1c:ec:b0:30:e3:
8c:1a:52:c4:f2:b7:2b:e0:df:6d:1d:71:15:ec:81:0f:bd:f2:
1f:bd:f5:f2:ca:9c:18:da:83:96:7a:14:75:13:d1:26:5a:66:
04:52:c1:8d:f3:76:15:47:b4:01:5b:11:cf:2c:32:a7:2d:73:
38:ec:a7:85:9a:e3:04:99:55:36:9d:dd:b7:4e:f2:8c:c1:d6:
01:89:96:c2:e4:76:dd:84:c7:0b:1d:a2:fe:36:1f:f0:90:bf:
26:f5:02:e8:82:12:4e:4d:a8:fd:0c:30:be:c6:07:41:54:6e:
b5:55:94:a7:ce:6b:47:e2:5b:f5:eb:44:09:04:4b:7e:04:bd:
4a:40:a6:4a:a2:6c:ce:6d:49:b0:93:3d:5f:97:68:e4:0a:fd:
a9:7b:44:93:dc:50:c6:6f:00:a9:6e:f4:17:45:14:13:c1:a7:
10:f4:4f:2b:99:0d:84:fe:30:52:15:4f:56:c7:e6:49:ff:35:
a7:2b:5b:4d:2b:98:01:12:cc:ff:ee:e6:27:7c:e3:e7:3c:e4:
ef:68:63:26:05:9f:87:0a:10:1d:2f:40:60:ca:a3:9d:ef:ea:
c9:8b:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:16 2025 by rpki-client