Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier: 8NiJDY6R4enmi1ZstJuKEffRSNHl8lpRUGnme2FWX/w=
Subject key identifier: DD:01:4D:A2:20:05:F8:80:34:62:48:50:85:E1:9E:7A:73:99:39:3A
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial: 019A71B906D39A534805C66B802081F46090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: EkuzouWgJewRkOlrXc9WSydXidPXkf6oUAs2U+jOmtM=)
2: wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa (hash: xFYT+gV/6zuB8l9NaQR5EmwHFpWdWodzHhC57qH0qF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:06:d3:9a:53:48:05:c6:6b:80:20:81:f4:60:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=dd014da22005f8803462485085e19e7a7399393a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:51:26:8f:9f:13:df:47:b0:6e:85:cb:3f:
43:ca:b5:9a:f9:7f:ae:03:cb:c1:c4:a0:1d:47:95:
41:d4:37:e6:d3:bd:22:73:63:7a:20:0e:a4:f1:74:
46:3f:de:d6:36:88:6f:1c:c9:9a:49:39:7c:4e:11:
16:99:cf:14:96:6c:6d:1d:20:1f:31:98:87:8d:43:
e1:e0:fa:80:c5:63:c6:a1:32:6c:a8:c5:d5:19:a6:
8a:ef:c9:7c:db:8c:3e:ef:f2:37:59:4d:b5:31:8f:
c4:10:60:5d:90:ed:9f:e6:2c:ed:12:db:d7:37:92:
11:eb:df:f9:0d:b5:b2:d9:6e:16:58:45:60:63:1c:
85:f5:1a:64:fc:1f:c5:76:28:fe:48:c5:c5:bb:5f:
46:11:f1:30:f5:64:3f:cb:3e:e3:1e:47:70:0d:8e:
1b:9a:cb:d4:b8:a4:a3:27:a6:7a:93:8d:05:78:63:
69:49:82:5d:88:cc:de:0f:ed:33:90:2c:64:52:8e:
70:9f:67:b6:4f:b4:32:4c:71:36:52:89:77:5d:9f:
69:15:d2:81:07:ec:2d:bc:a4:ac:ba:34:0c:24:d5:
c3:e3:cf:01:f5:33:b9:d8:5c:d7:cb:6e:85:cb:11:
84:49:0a:0f:82:2c:80:a1:e6:f8:2e:5a:63:84:1e:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:01:4D:A2:20:05:F8:80:34:62:48:50:85:E1:9E:7A:73:99:39:3A
X509v3 Authority Key Identifier:
keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a4:57:9b:a0:e1:a5:52:b8:8c:ee:3c:32:aa:e1:6b:58:07:
3a:3f:c4:8f:70:59:5b:c6:f8:e6:9c:2d:80:12:27:5c:f9:58:
8a:19:03:5f:54:1d:34:df:51:4d:73:17:50:d8:7b:40:02:9a:
e6:18:48:dc:65:8d:c2:68:54:50:67:53:27:ee:87:54:7d:83:
b3:44:ef:c4:07:d4:60:0f:25:dc:8a:2a:a7:ad:7d:d0:4d:05:
24:4b:e5:ee:51:89:61:c7:8f:db:55:f5:ba:ec:0b:9b:d6:0e:
38:b4:13:32:67:c6:c2:3b:d2:c2:00:36:85:dd:2b:00:43:c1:
57:7e:2c:21:67:9b:cf:d5:a3:65:f5:d1:5a:9c:4d:f1:fd:dc:
68:2d:27:47:c9:08:74:57:f6:4e:64:1e:f3:d0:7c:de:22:f3:
e4:28:6e:51:a6:9d:ae:ae:b2:9e:a2:dd:5e:65:ee:9d:3f:48:
80:5f:4e:40:a4:b8:e6:0f:6e:3f:b2:52:8c:d1:9c:6f:f5:36:
2c:2d:6a:7d:4c:f4:aa:36:67:52:bf:cc:f3:83:75:41:fc:33:
21:18:05:1d:83:74:bc:09:9b:7b:14:c4:07:71:53:7f:16:a5:
d8:52:0b:4c:33:10:3d:f1:8d:5e:14:14:4a:93:e4:a1:e8:32:
a8:4c:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:44 2025 by rpki-client