Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: ksN0iAUJRGrK2qNzPTfVTXykUFMrtvTCdwqjeqTIg0c=
Subject key identifier: A5:7E:0A:1E:45:06:3B:20:B4:FA:5C:7D:90:E5:3A:75:47:FD:79:5B
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 019A71EE88BAD064FB304BB8E81DB56E738F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 0D76
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=)
2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: KFye8HpQPshkwtyiTMKAwT+dBGzW+AhlSy4JIAwecI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:88:ba:d0:64:fb:30:4b:b8:e8:1d:b5:6e:73:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=a57e0a1e45063b20b4fa5c7d90e53a7547fd795b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:50:17:e8:b0:c7:c7:a0:2a:1e:7f:5a:f5:
c2:eb:e1:05:fd:77:85:32:c8:5a:74:47:9f:82:dc:
cc:75:6c:27:3d:3d:4d:4d:19:ec:76:0d:67:6b:aa:
29:77:93:61:b7:57:f0:be:8a:68:4c:e4:2b:c1:6b:
b0:9f:75:71:a9:25:ab:bb:76:f7:f2:5a:22:94:ff:
0e:58:95:27:42:0b:2a:53:e5:7a:8d:de:9f:87:76:
32:db:87:a6:66:43:01:1b:ba:5f:bc:db:e5:67:c5:
a1:89:5f:be:74:10:d5:02:2d:76:a4:97:47:4f:15:
cf:7d:a7:95:0a:54:0a:e0:35:6a:e8:f1:7a:c4:fa:
8a:ec:63:29:0e:12:a8:db:dc:74:b6:b1:33:f3:c2:
75:84:36:85:16:96:b8:97:46:53:09:83:a0:dc:97:
e6:f5:02:f4:68:a4:17:0f:43:7a:45:8e:8d:81:f3:
3f:9e:f8:5e:36:46:f0:57:1b:4c:92:42:56:03:75:
77:50:68:45:ff:ad:94:5a:ba:47:23:2a:b2:56:92:
f7:36:9b:be:38:74:0b:20:fa:d2:87:af:51:f0:fb:
73:95:7b:38:9f:73:27:76:f2:13:d9:83:3f:70:08:
69:52:16:fe:66:fe:52:0a:21:94:00:62:7d:32:be:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7E:0A:1E:45:06:3B:20:B4:FA:5C:7D:90:E5:3A:75:47:FD:79:5B
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8b:ab:a2:3c:84:2d:3e:53:d3:8c:78:34:aa:0d:99:3e:89:
4f:56:c5:a7:2d:2a:e5:91:16:54:33:70:f6:d8:aa:4d:bd:74:
2e:7b:f0:fa:67:a4:e6:f0:c8:3f:4e:c3:22:65:6e:a0:5e:6c:
ff:b9:03:b4:da:a9:29:82:13:23:b2:fc:f4:b2:90:a6:74:ba:
94:df:4f:6c:c7:ad:a1:42:d7:72:40:1a:b0:1d:fe:e4:03:b8:
b3:46:15:62:7c:db:e8:0b:0e:fb:7e:e3:27:57:e0:40:74:cd:
d9:e3:c9:df:ae:d8:19:ed:9e:15:70:de:cb:cc:1c:46:ea:5a:
75:88:de:04:c1:92:79:9f:39:02:33:a2:34:fc:5e:fd:6e:d2:
1d:cc:6b:21:69:71:69:fc:f5:0b:80:29:4b:91:19:3c:69:67:
dd:c4:bc:28:8d:9b:82:cf:74:56:20:bb:97:b2:7d:bc:24:a9:
32:cd:35:40:09:d2:8d:1d:96:3f:42:d1:40:0b:20:59:71:5a:
8a:f9:0c:d0:7f:cb:f6:ec:dd:9b:2a:bb:7f:05:11:a7:a3:bb:
a2:54:08:32:ec:e6:55:4f:2a:45:94:22:ed:5b:21:60:3f:46:
ce:08:50:a0:98:a4:e6:36:ea:f3:ed:3e:78:c3:f6:e8:ed:22:
be:01:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:11:18 2025 by rpki-client