Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: uRMK+vMzH4u5hodxLK3VIfJKRaPhTROGpJSOOkH3sMw=
Subject key identifier: FD:FA:60:F9:4D:81:03:FC:24:9D:B1:A3:53:9D:E2:69:0B:B2:BA:50
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 019A71B9468F4D746B603C92F2EA9149BCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 10F2
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: 5YdZNSdV0fPfr3j1JEOQtBu8eW/h9uCbWi7lvn2+4rk=)
2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:46:8f:4d:74:6b:60:3c:92:f2:ea:91:49:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=fdfa60f94d8103fc249db1a3539de2690bb2ba50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:4e:eb:7d:e6:18:9e:07:f7:5d:64:55:9e:
47:f4:6f:ff:80:21:dc:72:cc:67:dc:e7:e9:0c:6c:
86:3d:19:72:d4:68:18:70:41:76:f2:8f:26:17:59:
72:ad:e1:b5:5c:c6:6f:02:f3:d0:cd:5a:03:94:91:
37:79:2d:e7:ec:9c:b3:7b:16:e4:00:fb:3e:bc:d1:
ae:2f:d8:ce:f3:7b:be:c7:1e:0e:88:00:cf:7b:c9:
b2:88:92:64:3c:4b:32:6a:2d:86:1b:a7:83:58:a0:
04:99:b1:d2:55:ff:b2:10:6d:6d:5d:65:79:6d:5b:
b7:a1:2f:fc:f7:36:a6:70:27:23:49:30:87:e0:67:
ed:e0:60:7d:7d:7a:6a:68:94:b2:ac:13:6e:4e:b5:
39:12:90:13:1d:59:ef:21:68:03:cc:9b:9a:7d:ee:
be:03:e7:0e:4f:e7:d2:85:24:d3:a6:52:81:97:ab:
d1:49:db:7a:07:0a:44:68:7f:83:51:13:6b:ff:01:
53:29:3d:c6:ba:90:12:84:cf:79:17:92:25:62:94:
e0:f2:ba:66:7d:a7:4e:de:58:d1:70:8e:0a:d4:8c:
4d:b8:61:81:cf:69:d4:43:af:9d:b4:2b:65:d9:1f:
26:ad:85:d2:e1:79:d9:e2:3a:df:43:42:f6:ae:af:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FA:60:F9:4D:81:03:FC:24:9D:B1:A3:53:9D:E2:69:0B:B2:BA:50
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:09:02:e0:59:69:8f:3d:e4:8e:f5:de:3f:02:19:b3:fe:29:
fc:ad:30:f5:6e:da:ec:f7:a5:a0:90:2b:7c:cc:ba:95:81:d2:
04:0b:13:6a:b0:01:91:23:b7:70:82:40:2a:07:2c:ce:2d:50:
d8:c5:6e:76:32:6a:6b:7a:15:da:5c:b2:7f:73:11:00:0e:8d:
41:00:c0:70:ae:3e:b2:3f:f8:03:6b:01:45:36:2b:6e:79:57:
78:f6:a7:b2:59:79:40:ba:dd:30:7c:2f:74:82:fa:e3:6d:8b:
2f:2c:77:d7:7c:db:b2:c4:9c:41:7e:61:74:3a:e4:97:d7:22:
1b:8a:5b:ed:b0:5c:e6:53:b2:f3:ea:de:2e:72:2f:bb:50:9a:
01:f5:ef:c3:2a:9d:3a:cc:37:f4:03:b7:81:bf:69:9f:b4:ab:
a1:83:b0:0a:1c:67:27:8e:27:61:4b:10:98:d7:c9:5b:5c:e9:
eb:b0:9b:57:77:a6:5a:5f:3d:52:fa:9d:f9:8f:ec:fb:35:43:
d3:9e:76:99:22:fa:b3:f6:fc:c8:8a:f3:0b:34:5d:74:24:9e:
de:9c:6b:74:b0:63:53:aa:d9:14:c3:dd:2a:a0:27:69:97:46:
f4:bd:e5:d9:40:b3:9e:bf:8f:34:e5:f5:d1:5b:01:04:53:95:
fc:91:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:39 2025 by rpki-client