Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier: tiE/hc7M+Gasg3u1jz5GxLEXmYaNtmOhrKc2uBN3Rmo=
Subject key identifier: C2:61:BB:2A:E3:41:08:88:16:19:7B:73:0B:7B:75:AA:C0:06:AE:17
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer: /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial: 019A70A516AE86FC18FD6CD40C2BFCB7CB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number: 070C
Signing time: Tue 11 Nov 2025 02:00:58 +0000
Manifest this update: Tue 11 Nov 2025 02:00:58 +0000
Manifest next update: Wed 12 Nov 2025 02:00:58 +0000
Files and hashes: 1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: jH5FVpXmGb5aAQbL5kHR0S9Nwx3wtykxQ233oblJocw=)
2: zwhatF5o3yk6nLXIa0yxqzP0ZTc.roa (hash: 9S00G7VwkBsXnXA2C5JQWmhqMbRgsqzBdUuOpwkdR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:16:ae:86:fc:18:fd:6c:d4:0c:2b:fc:b7:cb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Validity
Not Before: Nov 11 02:00:58 2025 GMT
Not After : Nov 12 02:00:58 2025 GMT
Subject: CN=c261bb2ae341088816197b730b7b75aac006ae17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:2b:7d:58:f4:63:e3:84:98:aa:5a:d9:cb:
62:7a:61:5c:19:18:f8:8e:9b:13:55:15:94:7f:77:
ba:f1:49:eb:3b:34:d1:e3:9b:11:ae:7a:c3:d5:65:
89:2e:a3:f0:df:bd:e7:27:7d:81:26:43:fa:24:da:
a2:88:23:02:9f:50:fd:1f:ce:01:37:38:45:ab:2b:
f1:03:7f:84:50:a7:fc:9c:e6:2d:32:ee:d5:52:ad:
93:9f:07:3d:52:60:59:30:0e:b7:3c:e6:eb:ab:22:
11:10:ab:3d:5b:cb:09:6d:0c:04:ac:e9:90:5e:82:
1e:17:24:2b:32:ab:c0:04:4c:5c:d3:b6:2e:f8:b2:
02:87:69:6d:4f:6d:ad:cb:cf:5f:8f:c7:12:0d:3f:
ba:de:c5:1c:ef:94:a9:a8:44:2e:45:06:3e:cc:4a:
a4:de:8e:29:47:e6:b5:7c:04:4e:c7:36:85:59:53:
df:a6:c4:c9:7a:69:0c:b2:4e:a5:74:22:c4:86:d4:
af:b6:83:58:e9:ca:aa:e1:f5:e5:cb:ff:76:3a:9c:
31:d6:0a:24:23:9d:39:b8:85:09:23:da:60:b1:5a:
8e:29:29:0e:92:d1:b0:82:a3:72:0b:07:1b:d9:0f:
1b:a8:a1:15:91:da:2d:f3:c6:a1:f6:8f:c9:f3:f5:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:BB:2A:E3:41:08:88:16:19:7B:73:0B:7B:75:AA:C0:06:AE:17
X509v3 Authority Key Identifier:
keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:38:e6:14:af:61:b7:6d:21:b7:4f:5a:c1:63:0b:83:5b:a9:
33:7f:92:17:d9:cc:fc:4f:04:b8:c5:0e:25:bc:42:d6:90:0b:
81:c6:d9:97:83:ff:62:86:66:ce:18:c2:a4:bf:22:9f:fc:95:
c2:37:77:27:b1:2d:05:99:ba:18:b2:15:24:36:af:81:07:2e:
58:d0:a9:ff:5f:18:37:9c:56:de:e9:3e:bc:e8:06:ad:77:ad:
89:bb:db:3c:fb:58:ed:20:c6:7f:f7:3e:88:5d:0b:e4:30:d4:
72:12:01:78:d5:3e:ae:07:e1:ce:84:3c:62:27:d0:43:2a:af:
7d:29:1d:49:b9:58:04:b4:a6:17:e9:2f:4c:aa:de:0e:85:20:
d4:41:2f:3c:96:b7:c3:fe:70:d8:f6:bd:b3:63:fe:25:93:e0:
76:60:66:e8:7b:0b:e4:89:23:32:ba:e2:f6:cb:ef:76:35:bf:
84:b0:72:bb:1f:ef:99:c0:db:95:e5:43:f9:52:18:e1:6b:d4:
7e:c1:33:f2:e0:67:cd:71:c1:f1:7c:a2:0b:e5:38:10:da:4d:
d0:a0:7f:d3:f0:f2:d0:ae:51:b7:82:23:eb:64:8c:76:bf:b1:
ad:65:29:02:f0:fc:de:20:b0:17:76:ad:e3:50:01:9f:bb:f8:
79:93:ff:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:54 2025 by rpki-client