Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File: 5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier: JzVhb/i7V5M5zEf0AFIIK+6BGd0kXVcjfsFTc4TxDfM=
Subject key identifier: 3C:1F:74:CE:01:04:B7:B2:2E:C7:79:2A:B6:5C:A4:83:2C:BD:CE:66
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial: 019A71B8FFF0702D9BA60DA67FF4C8B525F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: lcUYLrCuJZ0WFoOkfiHBWoBxKsiqa2FDwv25fqigP8Q=)
2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ff:f0:70:2d:9b:a6:0d:a6:7f:f4:c8:b5:25:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=3c1f74ce0104b7b22ec7792ab65ca4832cbdce66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:4d:fc:59:0c:f1:29:bf:c0:75:ed:6d:b6:
7a:fa:ad:4a:52:32:26:6a:a8:9d:12:13:76:ca:a1:
2f:a4:49:54:c9:88:d2:b9:ae:33:50:42:94:f2:5a:
e5:b7:59:11:24:87:0e:ee:e0:f3:eb:9e:e6:a1:c7:
ee:79:11:ba:e2:ca:ec:05:13:ad:28:84:dc:82:18:
c3:15:c2:8d:c9:88:ad:69:89:fd:e7:a1:9d:71:6a:
0e:6e:16:5a:94:e7:20:73:07:bd:14:de:7e:e2:72:
6e:5b:ef:e8:e5:40:ed:61:82:79:d2:ce:0f:3b:62:
f4:0a:c5:f6:4b:a3:c2:17:1d:36:f6:9e:71:c6:c8:
73:14:a9:15:13:c6:fc:f5:a3:d0:b4:9e:83:45:58:
98:e0:83:92:e8:89:a3:77:bd:74:1a:88:3a:b8:2e:
e7:aa:ee:59:ae:5c:eb:e3:b5:0b:84:11:af:e4:89:
58:b0:6f:07:9f:4c:7e:2a:09:cb:da:ce:7a:33:4d:
2c:26:c2:ef:f9:f9:e1:5d:9b:3a:06:94:f1:f4:26:
68:92:b3:60:b6:64:61:a3:0a:d3:13:02:24:27:e1:
82:da:39:08:f0:ba:3c:8f:5a:ab:5a:fe:77:de:24:
12:32:e3:a2:d2:95:0b:36:3f:a8:34:58:12:0a:8e:
bf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1F:74:CE:01:04:B7:B2:2E:C7:79:2A:B6:5C:A4:83:2C:BD:CE:66
X509v3 Authority Key Identifier:
keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:26:af:e6:21:b8:45:6f:ff:4d:da:99:e0:10:08:ff:f9:a8:
45:a8:e7:cc:01:ae:62:71:6a:42:5b:c2:2b:07:e7:91:18:e5:
fd:02:db:bb:b5:ff:82:8d:60:6d:e9:d2:96:5a:89:d9:dd:ae:
0a:bc:50:ec:bf:f3:9f:02:ab:f1:e2:1d:51:fd:d6:10:7a:8f:
93:a5:3d:41:e4:44:cd:5e:fb:c7:cc:62:37:a2:43:6a:cf:35:
6d:81:77:ac:07:40:a0:cb:0e:c1:97:a4:93:95:97:60:a2:ba:
c8:43:6b:d2:65:c1:39:4a:bf:ac:ac:57:b3:2c:9d:23:c1:3b:
07:b9:cd:9c:16:d4:ec:54:47:cf:8d:79:f7:49:e5:37:22:1e:
5b:18:72:e6:40:b0:7a:c7:8d:00:d6:c9:57:2b:49:c9:dd:22:
44:ab:e9:f5:1f:6d:dc:67:8e:6a:4c:66:4a:84:43:98:6e:1c:
36:13:9d:f4:13:ec:7c:b9:2c:84:79:82:f4:1e:2c:94:56:7d:
e2:2a:f1:8e:e7:23:e3:cd:17:a3:dc:22:5e:75:a0:2c:a3:17:
37:b9:cd:d4:43:b1:ae:74:8b:8e:3b:31:32:0b:1f:e0:81:51:
c5:6e:52:17:b0:73:44:2c:3e:da:35:74:62:b3:b5:ad:f7:a4:
3c:78:96:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuP/wcC2bpg2mf/TItSX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZGFlM2VmZTBhMzY3OTdkYTQzY2JkNThmNmRmZjk5YzNi
YmRkOGQwHhcNMjUxMTExMDcwMjIwWhcNMjUxMTEyMDcwMjIwWjAzMTEwLwYDVQQD
EygzYzFmNzRjZTAxMDRiN2IyMmVjNzc5MmFiNjVjYTQ4MzJjYmRjZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApatN/FkM8Sm/wHXtbbZ6+q1KUjIm
aqidEhN2yqEvpElUyYjSua4zUEKU8lrlt1kRJIcO7uDz657mocfueRG64srsBROt
KITcghjDFcKNyYitaYn956GdcWoObhZalOcgcwe9FN5+4nJuW+/o5UDtYYJ50s4P
O2L0CsX2S6PCFx029p5xxshzFKkVE8b89aPQtJ6DRViY4IOS6Imjd710Gog6uC7n
qu5Zrlzr47ULhBGv5IlYsG8Hn0x+KgnL2s56M00sJsLv+fnhXZs6BpTx9CZokrNg
tmRhowrTEwIkJ+GC2jkI8Lo8j1qrWv533iQSMuOi0pULNj+oNFgSCo6/SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwfdM4BBLeyLsd5KrZcpIMsvc5mMB8GA1UdIwQY
MBaAFOba4+/go2eX2kPL1Y9t/5nDu92NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQt
NmMyZmZiNGI2MWU2LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQtNmMyZmZiNGI2MWU2
LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSav5iG4
RW//TdqZ4BAI//moRajnzAGuYnFqQlvCKwfnkRjl/QLbu7X/go1gbenSllqJ2d2u
CrxQ7L/znwKr8eIdUf3WEHqPk6U9QeREzV77x8xiN6JDas81bYF3rAdAoMsOwZek
k5WXYKK6yENr0mXBOUq/rKxXsyydI8E7B7nNnBbU7FRHz41590nlNyIeWxhy5kCw
eseNANbJVytJyd0iRKvp9R9t3GeOakxmSoRDmG4cNhOd9BPsfLkshHmC9B4slFZ9
4irxjucj480Xo9wiXnWgLKMXN7nN1EOxrnSLjjsxMgsf4IFRxW5SF7BzRCw+2jV0
YrO1rfekPHiWaA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:54 2025 by rpki-client