Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier: os2rC8n7vX+CBlHpJc4LDOpmXwrcToTCFi0vaYmTrog=
Subject key identifier: 1B:AF:82:AF:88:63:AD:DF:9E:C6:94:C7:CA:A6:51:DE:D9:27:C9:56
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial: 019A72CA69CF5DB80C2A40E611BF8BCC1AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number: 0DFF
Signing time: Tue 11 Nov 2025 12:00:59 +0000
Manifest this update: Tue 11 Nov 2025 12:00:59 +0000
Manifest next update: Wed 12 Nov 2025 12:00:59 +0000
Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: NUSordY29FuP4qNQfBPk+KlVCPzyB0BtzUtmZf/9KV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:69:cf:5d:b8:0c:2a:40:e6:11:bf:8b:cc:1a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Validity
Not Before: Nov 11 12:00:59 2025 GMT
Not After : Nov 12 12:00:59 2025 GMT
Subject: CN=1baf82af8863addf9ec694c7caa651ded927c956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:51:54:06:59:62:8b:4a:e5:e7:07:bd:fe:2f:
c1:24:1f:1d:7c:ab:5a:7f:e7:b9:43:5f:43:e1:b2:
c6:ba:3b:3a:55:43:1f:84:32:4a:ba:c6:a8:d9:1b:
74:10:b1:49:11:1d:d5:b0:24:18:ed:aa:9c:5a:9a:
e3:d5:01:6b:a1:cd:39:f3:9e:7e:42:01:05:41:cd:
a0:ef:8f:dc:46:65:74:e9:ac:7f:08:59:b6:f3:d8:
ff:89:c7:45:07:4d:28:6f:27:c6:66:31:33:e2:2b:
c2:bf:70:7f:b2:32:55:c3:8e:48:b5:4e:54:14:a9:
a9:af:f0:17:35:ae:8f:62:de:33:cc:ef:b4:7f:fd:
0a:33:64:6b:75:7f:d4:f0:28:37:a4:88:d5:94:14:
c1:99:f6:52:e2:05:05:be:18:2d:99:f6:fe:b2:7e:
50:61:ea:5e:53:1b:c0:1a:8d:ed:20:2a:11:26:4b:
4d:47:e6:79:1b:18:6d:1b:a0:a0:1b:86:f3:7f:0c:
80:52:27:b6:d3:05:e8:a4:86:88:73:81:0e:17:fc:
c3:ec:1a:3e:93:48:a6:b0:77:37:c5:34:5e:45:2f:
e3:04:51:6e:7a:eb:dc:e6:a5:3d:a1:09:ea:36:ea:
ef:59:a2:fb:54:6e:fb:4d:13:cd:83:fa:25:13:68:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AF:82:AF:88:63:AD:DF:9E:C6:94:C7:CA:A6:51:DE:D9:27:C9:56
X509v3 Authority Key Identifier:
keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:15:bd:86:b6:87:5e:71:9f:55:c4:61:d9:e2:b4:66:46:d8:
11:a3:3f:45:78:27:18:fc:44:c7:4a:39:c0:5a:9e:4f:0e:79:
d8:79:46:af:84:48:47:31:20:20:09:1d:7f:7c:9c:4f:df:4d:
0a:5f:5a:32:95:5c:c0:91:83:b0:30:c4:cc:df:ef:74:3b:ef:
63:79:03:d4:1e:e3:92:90:7f:36:11:0a:b6:74:a6:e6:02:f6:
a5:e4:54:46:89:47:a8:18:b6:72:da:07:54:ec:cb:af:7d:8a:
cf:32:8b:55:8e:11:e8:44:6d:56:88:10:9c:57:53:35:b8:44:
65:58:4b:33:d8:93:cd:cc:3d:00:70:9c:72:3c:04:5a:8e:f3:
b3:31:84:cb:f4:d7:a2:24:7d:c5:de:e1:bb:21:b3:ab:56:c2:
34:88:0f:96:4b:0c:31:84:93:a4:3a:75:76:cb:e1:ce:1d:e1:
5b:cc:ee:e2:98:88:37:76:2d:c5:5a:be:b0:11:cf:75:77:a4:
06:7f:86:e2:8b:81:84:4f:3e:7a:ae:d7:33:16:8f:2a:03:ae:
a1:26:64:86:2d:e1:10:18:e4:94:06:e2:b0:17:2b:c6:42:5a:
69:a5:87:eb:a7:58:e1:30:0c:29:95:fc:51:50:75:69:ea:96:
28:1b:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:14 2025 by rpki-client