Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File: 5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier: m8XidY4BF9GgRiHW7xrym0PUjJWuRbFX1nZLSi/pisc=
Subject key identifier: 46:BD:1E:5E:18:21:98:51:F7:61:8F:81:03:74:F3:8D:53:BE:45:4B
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 019A7293D9ACE457F38EE1B6350CF33AD645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number: 06F9
Signing time: Tue 11 Nov 2025 11:01:23 +0000
Manifest this update: Tue 11 Nov 2025 11:01:23 +0000
Manifest next update: Wed 12 Nov 2025 11:01:23 +0000
Files and hashes: 1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: ykwXihq8uQbDhskseMJU6dHctuRQ/uvxeS+zewG0ySs=)
2: DhNK6wzjByDnasFkDiVozXApAMA.roa (hash: axPPgHJK+DsZDTes1Z8jvmiFkJ86vZLUMhnI7D0ebHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d9:ac:e4:57:f3:8e:e1:b6:35:0c:f3:3a:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Nov 11 11:01:23 2025 GMT
Not After : Nov 12 11:01:23 2025 GMT
Subject: CN=46bd1e5e18219851f7618f810374f38d53be454b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:fa:02:5d:d2:e1:07:d3:6e:14:71:ec:3d:
d0:52:a9:ed:e7:51:2f:96:c9:6b:7e:09:d1:7e:23:
db:f0:ac:4d:2a:49:0f:cd:88:e1:8b:39:a0:e5:e3:
16:52:f4:b9:44:96:da:a1:a7:73:99:62:d5:bd:b6:
1f:83:5d:9c:28:51:8c:1b:a7:30:7c:4a:db:43:1f:
2f:21:94:b4:39:4e:d5:56:d3:4c:70:c0:45:a7:c4:
12:23:74:53:3f:26:7c:47:ca:13:d3:b3:0e:1a:d0:
a6:90:d1:37:0d:84:bb:bf:0b:cd:c0:b9:34:b8:e3:
2e:a1:f8:11:5e:b6:58:e7:5b:a7:5b:a5:03:b6:1c:
d5:f6:c3:09:38:8f:10:b7:ad:a3:80:48:a5:a4:b9:
d5:01:42:3b:4a:7c:ee:a2:37:e9:c5:e2:e6:c2:05:
a4:cc:fd:92:dc:8d:4c:64:98:21:bd:14:ab:7c:2e:
75:45:3a:3f:03:17:f8:2b:f4:aa:52:5a:b8:62:1f:
af:e8:ab:e1:77:0c:ee:af:34:35:27:25:49:de:aa:
d1:5d:5b:d6:c8:aa:d6:ac:88:fa:6f:54:71:bb:2d:
f5:60:21:86:79:7b:97:bf:8a:ae:cc:25:1d:7d:ab:
33:c2:32:9d:2d:c3:e3:c8:d8:b2:7c:16:4c:02:22:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:1E:5E:18:21:98:51:F7:61:8F:81:03:74:F3:8D:53:BE:45:4B
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:85:c2:e6:ca:f7:c6:28:2f:3a:ea:07:a6:bc:ef:21:5c:a7:
53:2d:dc:09:37:8b:24:f0:df:d2:0d:51:17:1c:96:b0:2d:d4:
b2:ad:94:cd:b2:c3:44:81:ac:c1:ba:ee:5c:5d:14:5d:8c:04:
2c:19:aa:ae:6a:64:0d:91:a0:ce:0d:35:2e:ad:94:c6:6c:5c:
d1:ea:7b:0b:ab:2d:ce:49:ee:3d:ff:6e:6d:3d:fc:f0:6f:cf:
c6:9e:d8:38:dd:fd:77:82:07:2d:7c:be:72:a1:91:b5:ec:4e:
93:26:b0:69:25:91:71:38:cd:b7:93:e3:c8:46:bd:be:b5:19:
a2:ef:83:19:2b:a8:80:38:d7:24:84:63:72:f7:d5:b4:5f:f9:
e6:1c:f5:42:60:54:ac:8d:1d:a8:ed:06:a4:04:cd:b0:17:59:
13:3b:27:83:5d:16:76:21:29:94:09:28:ed:ae:84:83:99:96:
e1:85:7e:14:7a:59:4f:f6:4e:e0:cb:1e:9d:e1:5b:5a:e1:85:
e4:1d:85:13:5c:7c:54:71:ef:ad:a5:0c:5b:ce:c9:fc:90:54:
91:84:37:aa:39:f1:23:35:75:16:12:31:ba:55:f3:4d:d6:de:
f0:d8:e6:81:56:68:ee:91:68:5d:1c:65:da:2c:23:68:45:a3:
7e:ba:cf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:42 2025 by rpki-client