Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
File: 5ADgGnlalXLPsazYWWya0zxhJlk.mft (raw, json)
Hash identifier: wIuAAq9/HDydWRUr54UiGzIyHsnh3qszdh5Yit0FeQg=
Subject key identifier: 6F:9B:1D:ED:3A:50:50:55:57:50:0C:C8:39:A8:C0:0B:61:EF:04:0A
Authority key identifier: E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
Certificate issuer: /CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Certificate serial: 019A71EE84B2BB87655F18CF6BD6C4AF5C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
Manifest number: B2
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: 5ADgGnlalXLPsazYWWya0zxhJlk.crl (hash: yiPA2tPiCNoPfoLnUo0Jh5LlFL2kfaT5lvim3zLB6Xk=)
2: qkvMUmepPhpdWAB6-kEpJtY3NgA.roa (hash: qaU4Jh390H+MIqIOppGDPnJrwDH9PpOIvAh+NgpJEXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:84:b2:bb:87:65:5f:18:cf:6b:d6:c4:af:5c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=6f9b1ded3a50505557500cc839a8c00b61ef040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:2e:18:ac:e0:87:d8:43:d5:f5:ab:7e:ab:
37:b5:e5:ed:d3:f1:17:5a:37:48:65:93:f0:61:59:
62:e9:4a:a8:a5:aa:2a:2b:e2:1f:4b:83:ba:ac:3e:
b9:87:f5:c1:04:65:99:81:77:72:e3:20:9c:bc:02:
72:f8:c5:f5:58:79:88:0d:49:e4:35:67:df:bf:c2:
d7:2f:33:bb:0b:3e:f9:69:db:55:36:52:fe:88:cf:
12:27:05:44:df:0c:fa:7b:b1:de:04:98:22:22:f9:
9f:3c:93:49:b5:c3:60:43:aa:41:47:ae:01:f8:35:
96:44:84:18:ae:53:3c:2e:87:14:14:0d:9f:fb:fb:
55:a6:bb:13:f6:83:ca:99:cf:f4:39:68:02:d2:a3:
26:6d:b5:42:0a:26:cc:03:43:af:56:f7:d6:39:cd:
f4:a1:df:e4:5c:63:98:c5:f5:aa:9e:66:18:51:e6:
e9:6d:e4:64:f6:ed:64:85:5f:2c:c0:fd:f2:eb:67:
17:99:9a:18:05:64:93:e9:a1:85:20:a6:76:40:83:
22:49:89:59:d8:30:29:46:7c:a5:aa:e9:a9:aa:6b:
f2:2a:ce:6d:7d:65:cf:96:15:d7:9a:2e:e9:71:f5:
0a:16:7f:ab:e1:bc:46:32:cb:ff:4b:e5:52:40:b1:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:1D:ED:3A:50:50:55:57:50:0C:C8:39:A8:C0:0B:61:EF:04:0A
X509v3 Authority Key Identifier:
keyid:E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4c:32:a2:16:5f:0c:81:27:94:10:43:14:de:93:31:88:0b:
7c:20:d5:44:32:b7:0b:92:9d:5c:0c:eb:da:31:21:9f:85:db:
6a:34:cb:b9:64:19:b5:47:78:9d:b7:92:93:1b:6e:f3:6d:37:
93:f6:60:c9:54:53:30:b6:bf:3b:54:67:e7:34:ef:04:c9:fe:
74:bd:9f:95:37:6b:f5:b0:0f:b5:fc:6c:f7:a2:cb:3b:57:54:
2d:fb:f2:04:b9:65:ae:37:36:21:45:ab:e2:1e:c2:30:52:58:
10:59:ef:7b:d2:aa:4d:12:81:ba:64:ba:c4:61:bf:6d:f7:95:
bf:7f:e5:2f:3d:38:65:41:94:0c:4a:d5:8b:c0:e7:5a:5c:ab:
59:42:04:5e:33:d0:c5:ac:72:4d:be:56:e2:f0:40:fd:07:ab:
3a:60:ff:83:41:7d:ac:6a:76:bd:ba:cd:07:26:68:bb:a3:ca:
dc:ff:1a:4a:e1:73:57:3b:18:f9:a4:3f:36:b5:ae:55:b0:96:
0f:a8:54:e7:d8:2d:33:43:c7:1f:d0:ad:1d:ec:5e:5c:3a:71:
2d:7b:5d:ca:e5:c0:41:17:90:4c:1c:ec:78:ad:fb:d2:2c:c8:
07:68:4e:62:42:38:f6:c9:00:78:73:0c:68:3c:bd:84:e7:96:
9f:a0:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:48 2025 by rpki-client