Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: 23UrgWkNBtIKeaOIpHzKOBArboRHcARZqgolx4CP+aw=
Subject key identifier: 1A:CE:30:4E:B5:FD:1B:7C:01:43:06:73:4B:56:35:15:20:44:0F:7B
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 019A73A72D227C24F5E588A66215896A926C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 13B1
Signing time: Tue 11 Nov 2025 16:02:07 +0000
Manifest this update: Tue 11 Nov 2025 16:02:07 +0000
Manifest next update: Wed 12 Nov 2025 16:02:07 +0000
Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=)
2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: 0my0dfI4mn27afHv3NFIlTaqvYg144Z6MAMtBNrWCwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 16:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:2d:22:7c:24:f5:e5:88:a6:62:15:89:6a:92:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Nov 11 16:02:07 2025 GMT
Not After : Nov 12 16:02:07 2025 GMT
Subject: CN=1ace304eb5fd1b7c014306734b56351520440f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:24:0a:c2:cf:91:c9:f2:da:aa:6b:46:58:18:
cd:fb:34:97:96:57:b2:3f:be:c7:4e:12:c3:6c:cc:
fc:a5:59:65:fc:9d:4b:33:46:33:60:cc:aa:ff:83:
59:eb:be:83:45:98:05:d3:19:4d:cb:28:9d:51:68:
37:fc:25:4d:85:fd:e8:dc:9a:85:de:6c:dc:95:45:
6d:fe:df:51:6c:ce:8a:ab:64:8f:f1:e8:2c:d2:4d:
75:a7:23:ea:41:0b:9d:02:86:40:76:da:cd:88:06:
08:09:aa:8a:37:12:ce:d7:aa:a2:0b:86:dd:29:81:
17:dc:0f:a9:af:cf:ee:1e:75:56:d7:65:86:21:09:
51:8f:78:47:67:e9:52:29:61:98:1a:88:00:09:b1:
b1:a1:34:21:61:42:a7:01:9f:db:a0:32:0a:00:c8:
24:39:af:6c:9d:05:de:99:1a:9d:49:0e:45:0b:6f:
af:65:ee:8e:69:32:c7:5f:24:35:86:e7:59:2c:10:
cb:06:49:17:25:b4:e7:33:e3:0e:66:c8:61:c8:fd:
a1:0e:0d:61:c4:08:3e:35:51:e9:e4:6a:7c:56:48:
54:ff:18:ca:f2:22:19:90:cb:77:a3:34:0c:91:07:
32:9e:c1:f4:c6:b4:3c:d0:fe:0f:71:db:c8:c9:56:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CE:30:4E:B5:FD:1B:7C:01:43:06:73:4B:56:35:15:20:44:0F:7B
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:57:43:22:80:75:ea:1f:0c:cf:1b:7b:e6:15:44:07:f7:87:
03:fd:51:f2:9f:d0:4d:60:49:36:2c:24:ea:a1:5f:64:31:c8:
09:36:7f:f9:92:80:42:d6:45:b6:f1:66:62:24:f9:d9:31:01:
07:f1:7c:4d:9c:5e:1d:ee:47:fd:5e:7c:3c:35:b3:e3:96:b3:
78:c2:15:92:64:26:56:13:78:4e:e5:50:a0:8a:14:b1:75:2c:
dc:31:1d:45:67:56:51:70:bb:fb:3f:47:4f:28:77:7d:f7:44:
94:14:79:01:b5:7f:c6:74:64:57:e9:9e:c6:fd:7d:46:31:3d:
2c:60:41:6b:7f:41:21:01:10:10:a3:f2:6d:68:50:e3:fb:5b:
b8:9c:07:aa:b7:11:41:59:a8:a6:ee:e3:d7:92:f0:12:3b:4f:
8f:9d:46:2b:43:6c:62:53:59:a3:79:ce:c1:9e:2e:04:ea:9b:
aa:9b:60:a2:3c:91:44:f8:37:54:8e:be:59:3d:51:36:be:d1:
a5:70:00:0d:88:1a:73:b2:a0:14:97:96:5c:44:00:6e:ad:71:
73:0c:97:2b:38:40:28:e5:94:81:fc:53:17:45:6e:fa:11:03:
0d:9f:05:3c:86:6d:fe:a2:6f:f3:1e:7d:bc:32:53:f6:f6:b2:
14:37:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:46:42 2025 by rpki-client