Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File: 5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier: olp/D4J7xnNx3slbEDRWPygmZAJ/i0515gjiCepQ064=
Subject key identifier: B7:C1:B0:13:7F:95:83:30:64:57:40:6C:B0:F0:7C:A2:D9:0B:9E:54
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer: /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial: 019A71B85EE58B52D064A62FA32A0C1DD22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number: 16AD
Signing time: Tue 11 Nov 2025 07:01:39 +0000
Manifest this update: Tue 11 Nov 2025 07:01:39 +0000
Manifest next update: Wed 12 Nov 2025 07:01:39 +0000
Files and hashes: 1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: tVftSDiGN35iD15RhgUG21hqsF7tWCTkfAl9AjkIXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5e:e5:8b:52:d0:64:a6:2f:a3:2a:0c:1d:d2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Validity
Not Before: Nov 11 07:01:39 2025 GMT
Not After : Nov 12 07:01:39 2025 GMT
Subject: CN=b7c1b0137f9583306457406cb0f07ca2d90b9e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:17:ff:17:18:6e:44:b3:1b:a8:7f:fd:c0:
17:b4:18:6f:0c:6d:34:33:45:53:e7:8f:d5:95:8d:
bc:1f:fc:c5:a0:fc:dd:1d:fb:16:d2:96:37:4c:19:
05:e3:5d:1f:6f:13:b1:e4:bd:7c:12:e8:52:51:07:
33:20:84:81:1b:16:82:8a:9e:94:8b:96:0b:4c:9d:
d8:4b:2e:a2:b1:0b:fb:74:f0:9e:e1:da:19:8e:c7:
2f:ef:77:83:70:20:2b:ee:5c:cd:55:43:5c:45:67:
a1:eb:50:2a:f7:1a:d1:4f:17:7a:a4:88:d7:f8:0e:
d7:9c:9d:cd:98:60:a2:39:29:f0:9a:46:49:32:66:
2e:dc:bf:eb:3d:3c:f3:25:18:03:01:25:43:5d:fc:
12:24:97:8b:12:b0:69:08:04:23:c1:8d:7b:72:35:
50:f7:de:4f:6e:f4:ff:ec:67:b5:47:79:ea:ef:e0:
f7:ad:87:74:93:82:01:e8:cb:52:a7:4b:84:87:bf:
d0:2e:31:9d:96:c3:5d:b1:78:af:61:7a:2f:58:24:
24:a6:f1:4a:c8:e7:29:de:c9:42:2a:60:2c:d8:a9:
24:ed:3d:80:9f:c0:68:b1:9d:c6:d7:25:23:09:be:
d9:fe:6e:76:b5:c2:62:73:c3:0e:5e:0b:f5:2a:27:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C1:B0:13:7F:95:83:30:64:57:40:6C:B0:F0:7C:A2:D9:0B:9E:54
X509v3 Authority Key Identifier:
keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4f:eb:24:12:48:19:d3:e6:f5:ea:99:e6:6b:09:48:a8:b5:
d9:26:d2:68:44:f5:1a:32:2d:59:af:6b:ce:d2:13:f0:3d:82:
e8:80:43:e6:8a:f6:70:03:42:52:95:05:78:bb:a7:48:11:d3:
a8:67:25:c7:4a:9c:08:c2:1d:ef:8c:a6:09:9d:99:e0:f6:e0:
db:b2:6a:c3:8b:6e:f2:49:6f:dc:9a:73:a3:75:c9:65:a2:44:
c4:70:7e:1f:ee:e2:7d:d1:d6:99:cb:b4:70:19:d8:4a:4e:da:
f5:bc:c8:b8:61:d5:18:80:49:8e:98:ba:d7:60:4a:b7:b1:d2:
54:5e:84:7d:01:5e:fc:6f:15:91:d7:bb:54:4d:bb:39:e1:44:
17:b5:97:9f:91:85:25:78:27:ce:a5:ff:2b:93:ab:22:44:99:
12:35:7f:e7:e9:f1:0e:6a:b9:50:40:6d:a3:ea:dc:7e:1f:3b:
7e:af:72:5c:4f:43:53:d3:a9:78:cc:78:44:e8:f1:32:ed:5d:
5e:3f:78:83:12:cc:51:8b:27:ce:83:a0:ca:78:fe:bc:7f:e9:
18:9b:af:44:ec:68:c1:e1:79:01:b6:87:f0:86:ea:36:f3:9e:
7b:65:42:24:e3:c2:bc:f5:d8:73:90:30:61:86:cf:9b:fd:9b:
36:42:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:38 2025 by rpki-client