Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: b4OWFNtLTh1u751KYEm4y5VkWpvzaSP6QsoT/pYSBM8=
Subject key identifier: E4:BB:3C:68:98:E3:DB:33:97:C2:02:E0:07:BB:A0:E1:8E:30:A6:40
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 019A72263206D9D8B15ECE6313D4207E7B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: nybXqTmMkQBRwIX9V5cwTNd53dgCh5sy74zAMVy9n1E=)
2: uY1QhTOWxV4UKC9D82RM9yb0zNE.roa (hash: Bvx8t4Oi0CQUF3Zey6rE/7ccr+hwq753xh5wAVW5P6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:32:06:d9:d8:b1:5e:ce:63:13:d4:20:7e:7b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=e4bb3c6898e3db3397c202e007bba0e18e30a640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:25:2c:dd:25:18:c7:56:84:7b:4d:06:4a:
58:8f:8e:f9:c1:6d:d3:b1:0c:64:ff:21:8b:06:7c:
67:33:d1:bd:34:7b:24:73:67:83:3e:fe:ee:83:47:
22:d5:e7:ae:4c:bc:7f:1f:34:e0:83:ac:f2:51:1e:
e4:06:2d:24:31:b5:85:63:d1:d8:83:b9:7e:b7:f5:
48:e2:36:bf:67:15:0b:e0:ce:f4:48:d7:5b:4c:2a:
95:69:85:ea:5b:0b:c1:4c:02:1c:05:77:65:05:13:
2c:50:9e:e9:ea:f9:07:35:9e:4c:e0:ea:36:85:5e:
10:ea:d7:67:f4:49:b9:aa:6a:29:46:76:e3:ed:42:
eb:04:7e:e4:ad:b5:48:4e:07:a3:ec:b7:d7:24:60:
95:a3:95:81:7d:41:b5:77:55:e0:9d:49:e5:5f:96:
21:24:94:d7:64:72:01:ea:84:f9:b8:42:40:11:12:
5a:54:b6:b8:82:ea:e6:e8:e9:fa:4d:c7:fc:5a:a2:
3a:68:a3:f0:d4:1c:0f:41:9a:5b:2f:19:2b:7a:35:
42:ef:b8:08:46:7c:bf:55:e0:13:d6:eb:24:65:ea:
c0:e3:22:ee:47:25:e4:f3:de:9b:54:9f:03:7a:99:
2c:d9:70:51:51:c5:f2:5f:69:7d:6b:08:eb:89:c5:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BB:3C:68:98:E3:DB:33:97:C2:02:E0:07:BB:A0:E1:8E:30:A6:40
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d1:b2:15:5f:47:cc:fa:55:ff:c5:ba:4f:e5:7d:f7:50:cc:
94:b9:8a:12:6a:65:f6:9c:c4:da:8a:ba:7f:8d:e3:3a:13:db:
8a:12:fd:f1:b7:86:e4:dc:cf:ff:2d:79:a4:19:0d:66:b0:b2:
7b:ca:7e:1c:c5:9d:df:c1:64:2f:bc:6f:30:54:d6:37:ad:92:
28:24:e9:6b:fc:b5:20:dc:4a:ba:6c:ea:9a:c5:bb:b2:46:cf:
c1:16:f3:74:78:17:36:52:b0:ae:eb:25:2e:11:15:20:3a:33:
67:43:44:74:25:a4:2b:9e:eb:2e:83:58:93:33:db:8f:14:22:
03:2c:98:10:c7:93:12:9a:0d:c2:10:b2:b2:11:47:ad:58:83:
9b:18:05:e4:24:3e:96:37:d4:54:b3:4d:eb:00:9d:c5:f1:d2:
1b:9e:bd:37:6c:27:34:e3:60:2f:79:87:16:52:f8:9e:67:88:
f7:85:6d:10:e1:91:88:c5:6b:43:95:d6:90:0d:e8:23:38:a7:
20:f0:38:fc:3d:90:af:1e:51:86:2a:c9:e7:5b:ad:06:1c:50:
df:f9:ac:45:e3:01:72:33:ff:d8:b9:de:c8:b9:76:84:68:f0:
75:1b:f9:5e:00:1d:f1:75:8e:7e:16:8b:73:ec:2b:f3:b2:a6:
70:c2:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:12 2025 by rpki-client