Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier: HN/0dg6kHMzHVMWUQMx8XmRa84Pbhf2ZPqLR6VNeVRg=
Subject key identifier: E1:2E:A4:C4:F3:92:51:8C:E2:0A:B0:D2:41:2C:CE:BA:10:89:BF:4B
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 019A73014C927131DFE55820B5CB3175E301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:00:56 +0000
Manifest this update: Tue 11 Nov 2025 13:00:56 +0000
Manifest next update: Wed 12 Nov 2025 13:00:56 +0000
Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: +2m5xzugtdab8Cqz7WMqixSy4riMKurZqoFuqp12TMs=)
2: XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa (hash: JXjpjJMP71nmxtEw4MnCOZWcY+ewObU/MkJxejPuf3g=)
3: ZU5mIuhec-w4R0nc_UEougNeTzM.roa (hash: Ryu8faEPK4CmfRJ6AZyYHPiiRBpNAisMzS6dIeA5uz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:4c:92:71:31:df:e5:58:20:b5:cb:31:75:e3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Nov 11 13:00:56 2025 GMT
Not After : Nov 12 13:00:56 2025 GMT
Subject: CN=e12ea4c4f392518ce20ab0d2412cceba1089bf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:ae:8d:8f:48:af:16:db:a1:ac:14:2e:48:
be:4f:42:d2:4c:17:71:57:fe:63:db:c4:df:c8:a3:
be:c5:71:51:69:fe:ed:71:b4:27:07:57:92:8f:14:
53:8e:0f:32:8e:ea:d6:41:5f:4d:87:de:ea:a2:6d:
bb:a6:a2:d9:c7:68:83:e1:dc:bd:12:58:17:0f:1e:
d7:a7:b9:62:15:65:b7:79:68:e0:a1:53:f6:2a:43:
d7:5c:30:37:42:d3:78:3a:80:b5:e4:8c:2d:9a:cd:
68:b4:db:db:7a:43:85:6a:c0:e7:b2:55:65:28:3c:
c1:bf:2d:38:ca:e1:6d:e9:7d:25:10:40:d0:56:fb:
43:2e:43:ff:84:08:7e:1c:3d:c5:76:94:e3:13:50:
e8:8f:c3:1f:3e:f5:ec:50:19:10:c5:aa:6f:d0:04:
11:6e:39:cb:26:11:d8:cb:e0:88:53:1f:ca:11:9b:
10:dc:38:10:48:98:78:e4:15:a1:35:6f:fc:2f:5b:
cc:1f:d1:45:ca:31:7e:80:c2:9d:01:83:bf:20:25:
09:33:de:c1:64:8d:22:4d:22:50:8b:df:ff:da:52:
3e:6f:17:70:72:e3:d9:c5:d0:f4:f3:02:a6:9d:e5:
96:4d:94:2d:2c:fb:48:55:67:68:11:15:af:8f:bd:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2E:A4:C4:F3:92:51:8C:E2:0A:B0:D2:41:2C:CE:BA:10:89:BF:4B
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:18:30:b2:3c:ca:4b:95:8f:17:21:cb:20:fb:87:cd:ac:
91:c0:76:65:20:81:7b:f9:6d:db:74:cc:22:b3:2a:73:d7:41:
12:3b:27:75:24:01:2f:25:58:33:b1:b9:b4:7b:f1:45:58:ea:
d7:6d:26:7c:f0:6b:a8:0f:ba:00:71:33:01:a5:52:0d:74:10:
d7:d0:af:9a:98:53:ff:4c:6d:0f:13:d7:21:36:dc:b3:4b:49:
3d:e5:84:91:e6:18:c8:60:1c:de:d0:d7:2b:b7:d9:0e:55:43:
88:78:47:a8:d2:88:61:f0:c6:56:fc:21:41:82:02:4a:f9:55:
48:80:fb:ba:e5:5a:e4:7e:0f:c3:b0:3d:5d:97:25:16:0c:7c:
a9:24:fe:b4:c0:03:f0:71:55:b6:5b:20:64:62:85:f5:9d:3c:
23:3e:d8:ad:ac:f8:28:ad:5e:f3:ba:4c:52:c6:fa:5d:9e:7d:
e2:33:1c:4c:ee:72:4d:b1:23:20:e4:1f:a5:9e:f3:89:75:68:
a8:69:f1:06:ad:10:66:d7:b6:bf:ac:a5:4d:37:97:54:35:54:
ef:a3:2e:5b:6f:0a:80:76:b2:b8:11:db:5e:61:91:28:1d:5f:
6f:79:cf:f3:44:f5:06:aa:fa:c3:53:4d:1b:a1:66:b5:de:85:
e6:62:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:32 2025 by rpki-client