Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: /+jQWwN+QjqROQOBKDXjiWhXyrVvOsRw84McAxKjbZI=
Subject key identifier: CF:01:AD:0B:F4:5F:66:66:C1:47:3F:01:E5:FE:0A:55:79:23:93:08
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 019A71B7795119822799014115B1B86925C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 0951
Signing time: Tue 11 Nov 2025 07:00:40 +0000
Manifest this update: Tue 11 Nov 2025 07:00:40 +0000
Manifest next update: Wed 12 Nov 2025 07:00:40 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: U/7DsROuUZzFzviHwsQu6n94mmmaotgoxUVvmVlBX0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:79:51:19:82:27:99:01:41:15:b1:b8:69:25:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Nov 11 07:00:40 2025 GMT
Not After : Nov 12 07:00:40 2025 GMT
Subject: CN=cf01ad0bf45f6666c1473f01e5fe0a5579239308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:23:71:f4:f1:02:45:01:b2:07:94:e3:2c:
80:4d:32:ee:f9:6d:a2:37:bc:42:b1:b1:3c:1f:1f:
a6:38:a7:64:0f:76:55:41:2f:13:c8:33:aa:d9:d3:
c1:50:90:c7:43:e5:dc:17:10:4c:9a:cc:fc:f4:c8:
08:a3:a7:1e:ee:7b:87:2b:eb:6b:16:97:a4:bc:fe:
b8:b2:2f:3b:0f:ea:db:e9:fc:38:c9:df:ac:cb:38:
1b:5f:4a:e5:4a:de:61:a5:a3:8e:f8:b8:a7:51:ca:
55:3d:8d:b8:72:0a:fa:7d:87:4e:95:7c:b4:39:d4:
f8:c1:ea:6b:52:a5:69:29:10:37:56:d8:0a:2d:5f:
ed:a0:84:c2:98:59:32:14:5c:a7:1e:a1:d5:41:de:
be:af:5d:47:4a:de:66:c0:fc:9e:40:31:f9:60:85:
5a:a0:bc:af:50:19:d3:94:0b:c7:85:2b:ad:7a:ba:
87:84:12:7d:5c:8a:30:03:5b:ae:5d:a9:c7:6f:55:
55:e1:53:d9:7d:d5:29:29:b3:df:64:a5:a6:f1:bd:
d3:ab:6f:0c:2d:be:18:4b:ac:98:a7:63:8b:03:95:
00:d3:f7:40:fc:2b:ef:f2:87:e7:40:bc:09:2c:18:
4d:df:fb:03:56:28:d6:e0:b6:f4:c6:ff:d3:73:dc:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:01:AD:0B:F4:5F:66:66:C1:47:3F:01:E5:FE:0A:55:79:23:93:08
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:78:ba:7a:8f:90:d2:c7:ad:dd:ce:ea:64:14:8d:b5:c1:d7:
f7:7a:6e:5a:b4:71:71:bf:db:93:14:64:78:3a:bb:56:c0:76:
b7:1e:60:74:a1:6b:7d:bf:6e:70:29:bf:d8:4f:78:eb:c8:6b:
89:5e:d6:ab:6b:e9:98:93:cd:f1:b5:a8:f6:49:99:10:53:09:
db:22:db:37:89:ed:56:57:29:43:c0:d0:96:45:a0:a6:d0:3f:
16:7a:da:60:1b:b6:9b:be:34:5a:80:a9:f0:f6:ba:81:eb:cb:
b6:6e:a8:45:5f:ed:f4:2a:59:22:16:95:0a:4a:25:6f:a1:64:
5e:e0:aa:9a:95:82:c5:19:f8:53:5d:b0:ec:41:7a:3f:25:3b:
ee:73:74:95:c7:50:d3:c5:2e:24:38:b3:28:fb:43:69:62:89:
e4:9a:aa:d8:4c:12:39:9e:8c:d8:8d:e4:af:b4:a0:2c:0b:e9:
29:45:99:20:1f:08:68:19:21:e2:ee:5c:41:59:c9:6e:8a:fa:
ff:b4:b7:67:fb:2b:d4:b4:29:00:20:69:28:1a:d2:ff:55:17:
65:c9:e8:e6:31:ed:ed:1d:50:f0:f7:5b:d9:56:60:07:c8:f8:
75:57:0a:d9:92:f1:0e:b0:d4:55:5b:99:8d:e1:eb:aa:8c:f4:
30:b4:cf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:11 2025 by rpki-client