Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: TlMfbeROueXwZdMRGR88Ne8cf6dLUiukHNZcgcQupR4=
Subject key identifier: 97:93:E7:E2:76:6C:0F:D6:81:3B:01:F4:FA:99:71:A6:FD:96:E7:C3
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 019A71B8378444436B03FA150D7506C82B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 02F0
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: IaMW5SQJV0EuKv6wUkSxNNJK0Tamf1Qz9rJb2f3rLhg=)
2: nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa (hash: toI1tT2hR8zRYJnuO8W3FR+ZELFSDV5ej6CQ6AsxKnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:37:84:44:43:6b:03:fa:15:0d:75:06:c8:2b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=9793e7e2766c0fd6813b01f4fa9971a6fd96e7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:9f:6d:48:33:fc:9b:37:43:e0:8a:e7:d9:
50:db:74:48:f3:54:88:2c:61:dd:11:a7:04:c6:46:
82:43:35:ef:99:c3:72:bf:c4:ff:03:43:6d:7b:44:
ee:61:7e:6a:1a:77:11:9a:74:1e:08:ae:be:cf:70:
e8:84:6a:0b:b1:d9:ab:37:50:af:ed:de:af:08:db:
86:9d:70:e8:26:8f:c8:6b:49:1c:f6:d5:0d:1b:0b:
c6:6d:b1:da:0d:9b:91:f0:73:e4:59:8e:e7:aa:6c:
3f:a0:36:d4:5b:0b:78:53:14:ca:55:b7:c6:9e:e7:
1e:53:1c:52:6c:4b:7d:34:a5:57:da:91:77:32:65:
a1:2b:d5:ae:15:5a:30:88:86:e0:a1:72:29:c5:fb:
11:71:98:9a:4b:55:35:f7:31:be:5c:01:59:23:b4:
07:ec:5e:4f:2a:ba:81:39:fd:dc:34:62:00:38:ff:
a8:e2:55:64:3b:0e:b4:4f:51:6e:41:27:9a:03:c2:
73:c8:92:78:bb:03:cc:f0:f8:ab:06:a5:4d:a3:93:
f3:a9:01:f6:44:d9:47:17:9c:82:78:e0:f8:f1:db:
d3:75:7f:e3:0b:17:98:49:e4:2e:92:23:5b:cf:22:
31:88:96:c6:35:fb:15:43:0c:97:74:30:f4:f9:d2:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:93:E7:E2:76:6C:0F:D6:81:3B:01:F4:FA:99:71:A6:FD:96:E7:C3
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e5:0c:d0:67:cb:4f:5a:60:97:94:eb:46:2c:56:a6:3a:ba:
1d:15:93:e9:2e:fc:9a:57:d3:36:b5:13:c1:08:ad:c1:b2:ee:
9b:71:cf:f3:c3:f3:33:14:1d:b7:4b:d6:27:30:d5:39:de:85:
e1:20:8b:1d:a0:6a:7f:97:f7:c5:72:6a:f2:fc:cf:c4:0e:15:
5b:db:e2:c8:2a:af:70:18:f5:d3:69:77:7f:09:80:37:7d:f0:
ef:d8:3d:0d:1f:31:a4:25:49:be:b7:a7:1d:73:a4:da:38:fd:
ac:12:09:f0:d3:a2:39:37:20:2d:e8:b1:fb:6c:e2:73:07:d1:
f9:f0:ec:fa:c5:ae:13:c7:58:86:9b:14:60:1c:84:3e:2b:5b:
f8:7a:d0:7c:7b:8c:53:30:e7:7f:96:6c:97:24:aa:e8:ae:26:
c9:68:07:9a:ff:4e:41:9d:13:8d:d6:c4:20:fe:61:37:10:a0:
11:59:e9:3d:28:e9:b5:91:57:34:ec:87:99:5f:41:ef:40:07:
fb:50:79:06:8c:01:56:ad:90:30:05:5e:73:e6:03:eb:fd:26:
df:ae:4f:35:2a:24:6d:47:11:e7:dd:e8:03:bb:cb:98:95:2e:
7e:b5:14:8a:63:f6:a0:f8:c2:b7:b2:9a:7a:30:ae:93:fa:50:
02:4a:8b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:35 2025 by rpki-client