Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
File: 5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json)
Hash identifier: VbGmixtEk09yHQAllWTeaXSktXH4Fx7FHCIHftaYYB8=
Subject key identifier: 24:D6:6C:B8:5D:66:C8:70:CF:F3:65:D5:6B:A1:BA:64:8B:05:1A:74
Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Certificate issuer: /CN=e410972cc459568804bb4b791d7c13cfb2283883
Certificate serial: 019A70A55DB2703FC4B0CC5BD5CC5C72564C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
Manifest number: 14ED
Signing time: Tue 11 Nov 2025 02:01:16 +0000
Manifest this update: Tue 11 Nov 2025 02:01:16 +0000
Manifest next update: Wed 12 Nov 2025 02:01:16 +0000
Files and hashes: 1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: o0x8hO3NfAzQNEAIvY2J04Esubcq1G3/KXlzCXHzUOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:5d:b2:70:3f:c4:b0:cc:5b:d5:cc:5c:72:56:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883
Validity
Not Before: Nov 11 02:01:16 2025 GMT
Not After : Nov 12 02:01:16 2025 GMT
Subject: CN=24d66cb85d66c870cff365d56ba1ba648b051a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:2b:a5:f3:85:87:d9:1a:e5:e3:ef:0d:94:
9c:d7:f9:9a:ea:67:9b:d9:00:60:c0:36:63:98:e1:
a4:1a:7d:2a:89:ae:2c:90:6b:0f:23:70:20:b1:dc:
b2:78:d2:e9:ef:30:d3:7b:a6:07:cc:24:62:40:a7:
7e:a4:17:e3:b4:f4:f1:48:6e:2e:cf:81:b0:08:bb:
11:97:de:6d:74:39:9b:7a:29:46:8f:b6:90:af:0c:
ce:db:65:25:51:f6:85:3a:05:7b:9b:c4:5f:72:1c:
d4:de:c1:65:2b:c9:f5:90:4c:0c:df:c1:7a:11:bc:
92:ec:0c:b1:2c:89:35:29:29:e6:57:9a:a9:1e:b4:
ef:4f:29:41:df:62:b8:1c:93:61:cf:f8:c4:3a:2a:
61:4e:a1:ad:09:d5:e0:e3:d1:3e:ba:95:13:f3:b0:
56:fe:f9:cc:a8:55:59:15:e3:76:86:b0:4d:67:02:
83:82:f1:ff:d9:4d:2e:94:9d:a3:6d:40:a0:db:72:
29:76:ff:8e:18:96:9c:18:20:e1:84:59:34:98:6b:
27:b0:f1:a6:30:38:1b:42:9b:da:ca:b6:b5:bc:00:
0f:e2:04:d1:07:35:4a:ef:b9:86:52:a0:77:9b:28:
58:22:94:d7:39:d8:f2:f3:cb:de:09:80:54:cf:32:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D6:6C:B8:5D:66:C8:70:CF:F3:65:D5:6B:A1:BA:64:8B:05:1A:74
X509v3 Authority Key Identifier:
keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b4:51:e0:4d:49:5e:3b:2a:f4:7c:2d:e0:85:5b:e3:59:66:
84:0e:18:1b:19:bb:64:c9:4f:a0:3f:4b:c0:2d:9d:fa:87:11:
1d:ad:72:26:ef:13:07:b0:f1:b3:f1:a1:f1:f5:9b:fb:62:cc:
01:16:a3:1c:c3:c7:6e:2b:60:f5:94:fe:16:48:06:67:a8:44:
23:83:f1:b5:dd:4a:09:f6:f6:96:8e:2a:26:43:a3:79:da:14:
06:ff:b2:00:41:1c:4a:12:21:1d:11:d7:c6:f7:25:d1:20:cc:
0f:9e:97:ca:45:5d:a5:16:8c:4a:5f:9d:a9:b7:eb:99:25:34:
21:4b:a1:35:8c:38:9b:54:14:59:a1:ca:28:aa:15:74:e9:6b:
cc:72:fc:12:1b:0c:bb:aa:53:82:e8:47:23:ac:a8:d7:b6:b4:
73:73:95:e4:21:94:4a:f9:d0:67:d9:00:42:07:45:6d:ec:7c:
43:ff:28:53:b0:24:b8:46:46:18:03:0c:7c:ca:fb:b9:12:8d:
e0:95:3d:d6:a6:b2:f0:60:1f:d7:39:82:c1:ff:37:b5:f9:36:
cd:33:a3:89:13:b2:b6:92:4d:0c:d1:16:12:f5:7a:45:72:7e:
cc:11:0c:6f:45:71:7b:80:0d:68:e3:08:71:19:99:ac:ab:f6:
4d:16:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:36:25 2025 by rpki-client