Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json)
Hash identifier: tT34/iN1wJyKhkFUxkTXX7L6wbwpfGKTpi2mgi+RAwE=
Subject key identifier: 85:F0:E6:8F:45:F8:0D:1E:BB:DD:16:D7:E3:46:21:37:B0:82:77:F1
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial: 019A71B824B80F0A0DA511B47AD9EB8B4FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
Manifest number: 0D0D
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: XH5JWapsWqTQac9412ibU4wBh33QpMEAJHZBe2UN+M8=)
2: 6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa (hash: wbgE92t6bLMyfvwqmBJusUZf/7LqDlcOflMgewrcKFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:24:b8:0f:0a:0d:a5:11:b4:7a:d9:eb:8b:4f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=85f0e68f45f80d1ebbdd16d7e3462137b08277f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:55:c0:fb:a2:53:d2:16:94:e0:31:03:1c:
83:57:0d:e3:db:f2:cd:5d:95:8b:af:d8:e8:fe:cb:
04:2f:1b:0c:38:41:fa:dd:47:88:b0:20:88:61:75:
92:ec:c1:fb:62:3b:cb:fa:40:dc:32:0b:1a:bd:fe:
56:3f:b2:2d:03:72:f6:e0:61:59:23:6d:50:ab:e9:
91:53:24:99:d7:ef:14:aa:a9:46:e0:83:67:e1:c6:
95:71:20:11:d8:39:2a:29:ba:e5:54:58:0b:6e:6a:
f8:01:f2:be:35:8d:e2:80:5a:86:f7:93:20:26:0d:
3d:44:af:33:f0:b2:0d:2f:72:02:a6:39:af:e7:2c:
9f:1e:86:10:de:73:20:91:95:4e:8f:0d:35:cc:33:
ca:29:16:7f:a8:50:f6:ba:66:05:d4:13:32:df:4a:
f7:b5:39:10:0a:18:14:88:cc:ba:ae:38:c2:f3:90:
14:e2:ae:d9:94:63:8e:10:07:a9:23:4d:59:a3:c0:
80:2b:89:12:7a:bf:8e:73:21:06:65:fc:f0:32:b0:
d6:8d:b9:c6:f6:38:38:02:d8:94:aa:86:3b:8d:ed:
f8:11:6b:55:e2:08:a1:b7:f6:db:30:09:54:7e:34:
ea:cb:c7:90:4c:eb:f9:87:b9:2e:6c:82:ad:10:57:
29:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:E6:8F:45:F8:0D:1E:BB:DD:16:D7:E3:46:21:37:B0:82:77:F1
X509v3 Authority Key Identifier:
keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7b:16:45:70:c8:03:18:e9:10:69:6e:44:24:1a:9e:bf:e5:
44:18:57:b9:dd:15:1d:ca:57:d0:b3:01:3a:0e:ba:e3:67:e9:
83:64:2c:4e:27:3b:01:83:8e:cb:51:ce:15:bb:67:73:12:00:
3e:c3:6c:5b:45:42:a0:dd:e0:d9:96:76:76:e9:ea:2d:2f:51:
0d:5f:3e:c4:05:81:b6:e9:7f:21:9d:85:6d:e5:40:f5:b6:9c:
55:25:16:82:b6:23:05:48:3b:6c:2e:b1:38:44:b9:29:7a:49:
63:a6:e7:c9:e8:0c:79:47:b6:de:e1:5d:1e:69:a8:11:5d:92:
57:ac:33:5d:7b:93:c4:4e:55:d8:4c:57:26:23:2c:b7:40:be:
d1:12:ae:b1:a9:30:f7:b5:31:fe:8f:0e:b0:1e:ab:07:3b:27:
9b:0c:6e:7e:d5:8f:16:c1:17:09:49:f3:eb:41:5d:7d:b0:1e:
1b:86:8c:65:20:73:bb:dc:29:c4:07:2b:99:d8:ea:9f:aa:f3:
8c:e1:c8:44:a9:1f:32:91:b0:98:eb:e4:1c:4b:18:8f:8b:15:
2c:10:d8:85:88:80:77:6f:09:26:a7:c0:95:30:77:03:bf:da:
5b:24:c1:0a:34:a6:69:51:73:16:25:fc:e4:3d:cb:3f:4c:f5:
68:f2:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:19 2025 by rpki-client