Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: CSF7JpXvJUaRm3WfLeU0ctJbXhkxYriAFs3u6Iw7c90=
Subject key identifier: 61:5D:6D:40:C5:D5:2B:F6:F6:60:42:65:AC:97:FB:D2:C7:31:FD:41
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019A7301A87CBCC3C0F97516C74DD4A5AE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0945
Signing time: Tue 11 Nov 2025 13:01:19 +0000
Manifest this update: Tue 11 Nov 2025 13:01:19 +0000
Manifest next update: Wed 12 Nov 2025 13:01:19 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: 5yJhL7qC0UPvJtHkN8BnQX69iEZrI7Z88Qnqa8kgMV4=)
2: YRQ4Vg3A1i1QaO-e977IcW6KB9E.roa (hash: rc17/JwW2r6jYEgRn/1E0O8jtu0CDbAtQ0C5kFjlEwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a8:7c:bc:c3:c0:f9:75:16:c7:4d:d4:a5:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Nov 11 13:01:19 2025 GMT
Not After : Nov 12 13:01:19 2025 GMT
Subject: CN=615d6d40c5d52bf6f6604265ac97fbd2c731fd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:86:28:d1:2b:b2:e9:e8:ff:e9:ac:c8:b7:
99:ba:34:a6:f1:0f:12:b4:86:a8:e3:8d:77:62:ea:
22:0a:60:4f:e0:05:a7:b7:8d:06:5a:26:2c:56:35:
18:65:23:38:c0:d5:76:51:dc:8a:6d:8b:46:32:38:
32:f4:5e:87:88:2f:34:29:fa:bb:53:2c:b0:3e:82:
50:3c:c5:5d:22:b0:b5:92:a3:9c:79:f2:24:ef:15:
93:8b:0d:29:3b:b5:74:5e:a1:4b:59:0e:10:16:62:
b2:70:7b:1b:c2:68:03:4a:7a:4a:cc:97:36:d3:8b:
12:65:36:90:9b:91:70:b7:2e:f2:c8:d3:73:11:a3:
57:c4:77:89:b4:c0:0b:e7:50:1b:47:13:a5:c8:a9:
bf:c5:0a:cf:92:ef:11:e6:71:bc:2c:1e:22:cb:c3:
40:e5:14:08:37:41:32:c7:6e:bc:b4:29:f1:22:ab:
5c:8e:13:29:65:2d:ec:ab:ba:b1:fe:29:42:e7:4e:
1a:04:e0:9d:31:9a:e2:ad:d2:b2:16:2b:8f:97:01:
f7:55:61:1a:75:4b:11:c1:2b:d0:b5:0b:02:d9:df:
45:2f:6f:b2:0d:b6:eb:ad:13:de:27:77:1a:6f:60:
b1:4b:cf:b3:8d:b2:08:c3:f0:da:af:f7:d9:57:74:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:6D:40:C5:D5:2B:F6:F6:60:42:65:AC:97:FB:D2:C7:31:FD:41
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:20:a9:6a:b2:77:69:5e:e5:9a:8b:a3:c5:af:5b:d9:8c:1b:
0a:3e:f7:5e:02:af:c5:51:0a:ab:08:04:ec:09:c5:c9:fe:6e:
ee:1d:8b:a9:24:63:99:06:8e:c0:b6:37:64:b5:66:b1:dd:16:
43:0d:e0:f4:f8:24:15:0a:1b:13:47:9a:b2:61:3e:96:34:ed:
fe:42:c4:ff:18:d8:70:fa:d4:de:53:d4:ea:1e:e7:41:c2:a3:
49:82:2c:b2:ee:5d:df:44:59:bb:7a:e6:f4:61:15:39:9d:98:
9f:b3:cc:af:f9:d3:04:d1:8a:32:1d:5a:78:96:7c:7c:b6:e7:
2f:9c:e8:8b:61:43:2a:12:e7:e2:72:03:ce:af:4a:41:7c:d8:
be:38:f5:5b:be:c5:07:7b:8c:97:78:6b:9c:13:dd:3c:e8:aa:
2f:81:3f:be:13:34:77:92:d2:ff:b3:60:3b:07:0d:c5:11:97:
72:48:9c:c7:47:62:0b:1c:33:50:b9:88:07:52:cd:9e:6e:2e:
03:2a:c9:9d:63:5d:9d:28:f7:81:14:f1:b6:a4:ac:10:d8:49:
73:7d:be:45:0e:9c:ac:d9:20:a9:06:f2:0b:12:e9:06:be:13:
35:53:b4:4e:8e:53:85:e1:b2:cb:98:aa:0e:e1:96:72:7d:58:
2b:24:f5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:00 2025 by rpki-client