Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier: gVDoR7UPdRsP00WOpipLqU/xCNOm/P5BxjRAIeXFXYo=
Subject key identifier: 88:85:1A:B0:AD:64:F0:FC:C2:1C:72:53:28:61:F5:44:7B:F6:9B:75
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial: 019A71B93F4EC9931D7C22E3D6D7C87AE008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:36 +0000
Manifest this update: Tue 11 Nov 2025 07:02:36 +0000
Manifest next update: Wed 12 Nov 2025 07:02:36 +0000
Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: 5ZjR3cAE38Ul31nJGomxbSzMwrDcMSJ+O6y3K2SQw7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:3f:4e:c9:93:1d:7c:22:e3:d6:d7:c8:7a:e0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
Validity
Not Before: Nov 11 07:02:36 2025 GMT
Not After : Nov 12 07:02:36 2025 GMT
Subject: CN=88851ab0ad64f0fcc21c72532861f5447bf69b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:52:91:0e:01:ce:5d:27:7e:2c:c5:ae:77:
62:cd:c1:f5:29:b8:02:09:c2:3e:0b:03:83:9d:b9:
71:79:34:b9:21:db:19:08:de:bf:75:d6:b9:2d:e0:
9c:a6:f5:34:20:69:99:af:db:32:9d:62:08:c5:87:
d6:84:55:d3:b3:6d:23:32:c1:dc:3a:6a:10:41:d8:
6f:6b:48:91:c3:f0:6a:4f:8a:7e:1f:b4:63:43:b7:
0c:0e:53:68:29:c5:94:0c:a1:ae:ab:0d:e4:0a:5b:
14:37:23:51:80:5f:9c:3f:f4:61:17:76:1d:5c:9f:
f5:6a:79:d1:fb:dd:07:b9:31:b2:dc:c9:ac:db:95:
2a:70:d8:65:79:9f:ce:18:95:f5:0c:7b:bc:34:03:
cb:36:68:8f:9d:ad:7b:7d:27:e7:ff:f9:95:2a:82:
62:af:6c:d6:cf:31:ab:29:bc:1d:24:94:8c:70:ff:
43:2f:da:f9:af:dc:97:e4:16:fe:85:fe:4e:18:57:
8b:76:0b:2f:9f:fe:03:bb:f6:da:b0:90:b4:3c:f1:
32:14:6e:21:b0:23:03:1f:dc:e0:1d:87:cc:7f:37:
a8:7e:56:ab:7a:5f:3f:ee:48:bd:10:b2:9c:a4:14:
85:24:a8:1f:55:2a:53:10:68:e4:1c:8b:99:9c:66:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:85:1A:B0:AD:64:F0:FC:C2:1C:72:53:28:61:F5:44:7B:F6:9B:75
X509v3 Authority Key Identifier:
keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:89:d9:af:b3:bf:27:bf:6f:6c:ac:7a:b3:fd:48:a0:a3:be:
66:db:b4:63:92:37:cf:f1:a9:e5:ce:d1:30:99:5c:72:38:6f:
91:64:1e:14:78:85:b1:84:b3:e9:25:2f:c6:80:a7:6a:db:c9:
9f:78:50:7f:c3:e2:10:e9:c2:e1:1f:66:5e:53:54:58:45:8f:
cc:02:71:39:d2:6d:c6:5b:43:95:af:dd:3c:78:0e:a9:78:0d:
9c:58:38:f0:df:12:a3:d7:fa:26:6f:ad:25:60:7f:6b:b6:b8:
f5:ba:92:51:23:6e:8b:c8:a9:40:71:55:6a:74:03:31:e0:f7:
4c:97:83:48:20:7e:8f:91:c0:77:b2:06:bc:79:ee:5e:5b:f6:
72:8e:e5:67:fc:42:9f:76:e7:83:2a:79:a9:31:87:dd:96:1d:
43:41:68:6d:8d:38:5f:32:fe:bb:ac:16:88:57:65:c2:90:cf:
1b:cf:50:bb:1d:8c:01:3f:99:99:97:c1:11:fc:7f:28:8d:29:
b3:7e:d6:c9:ac:ec:fe:06:e2:b9:2e:ae:aa:e1:62:4b:48:d2:
6e:4d:4d:b3:65:89:99:75:90:a9:2a:2b:75:87:43:ab:fb:a2:
25:64:76:2d:33:d4:83:b0:ab:07:ac:15:9b:2f:15:5e:fd:7f:
e9:a8:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:49 2025 by rpki-client