Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: gGItbBAwo5NteqPuwFDlwRxsOxhpevUG8eJkzLKYfSQ=
Subject key identifier: 85:20:CD:D9:9B:5F:7C:7B:FD:F3:4F:D3:17:0C:B6:15:16:C4:4C:BC
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 019A71B93AE9D39BB477612E515C0E4D6FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 03ED
Signing time: Tue 11 Nov 2025 07:02:35 +0000
Manifest this update: Tue 11 Nov 2025 07:02:35 +0000
Manifest next update: Wed 12 Nov 2025 07:02:35 +0000
Files and hashes: 1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: FS5ic82MPrTtGrrJ3TR2cHwtx2Hjh/icTfkZJrWjyEM=)
2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:3a:e9:d3:9b:b4:77:61:2e:51:5c:0e:4d:6f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Nov 11 07:02:35 2025 GMT
Not After : Nov 12 07:02:35 2025 GMT
Subject: CN=8520cdd99b5f7c7bfdf34fd3170cb61516c44cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:77:7d:5b:ae:93:0f:a5:84:85:a3:f1:57:
a1:a3:ba:77:36:68:f7:33:ea:45:70:c4:52:67:86:
49:f2:e4:ff:33:72:e4:ff:df:7f:df:61:bd:b7:3b:
17:54:cc:57:3e:ed:ec:60:09:1c:45:81:df:d6:43:
ec:32:91:c3:32:13:35:31:8a:6a:7c:06:69:c9:07:
f1:5b:99:78:5e:e2:b8:09:a0:8f:f6:41:b1:c7:2e:
e4:5f:57:f7:24:1b:68:2c:9c:95:aa:a3:d3:9b:27:
3a:a6:60:9e:b4:44:63:44:e1:79:74:3f:57:36:26:
09:91:e8:42:c4:c6:16:76:f8:4d:41:f2:81:b1:e5:
36:ae:68:cc:ec:c1:57:f4:0b:bf:be:5c:2a:ac:1a:
c6:1f:ea:6f:e1:c0:c8:e0:c0:42:ce:fa:93:8c:7b:
6b:8a:5d:09:28:ce:e0:ae:38:bd:65:09:dc:07:78:
9f:05:68:34:10:0d:18:ac:04:a2:6a:23:67:d0:cb:
d2:50:9b:ee:36:b6:87:23:b0:a7:9b:e8:a5:da:76:
81:eb:b8:40:0d:e7:6d:25:7c:42:c1:89:33:ac:f8:
28:a2:e6:a6:b8:b9:32:52:b7:34:b9:a0:06:e3:43:
67:1b:38:d4:2b:a3:68:2c:42:27:3a:97:99:8f:16:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:CD:D9:9B:5F:7C:7B:FD:F3:4F:D3:17:0C:B6:15:16:C4:4C:BC
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:46:87:b0:0b:c6:95:53:43:85:24:84:3a:77:c7:9c:ef:5b:
3a:04:b4:0e:a2:0c:21:08:ee:56:d1:07:f6:e6:f2:21:65:f7:
52:16:09:6a:10:38:b2:d0:b1:6b:98:e7:7b:f3:61:22:4d:82:
cb:67:e7:c4:3b:0a:d1:bd:55:74:27:d4:03:6a:35:a4:03:e5:
9b:16:ca:65:93:57:d3:86:82:c7:c4:a0:83:43:ea:15:88:67:
1e:e1:fb:82:99:74:9c:b6:69:25:63:e0:e5:04:5b:ac:df:0f:
00:2a:fe:2f:c9:0b:40:20:8a:97:ac:af:f1:60:46:3d:fa:99:
01:f7:0e:5b:12:dc:4c:0f:30:ea:9f:82:dc:9d:b3:44:f9:43:
a7:9f:fd:fa:ea:6a:33:27:fb:22:7b:67:32:9d:56:7b:f3:b6:
d0:bc:cc:e8:b3:2a:3e:09:bc:a2:06:0b:2e:f3:17:de:e4:3f:
7a:04:74:54:1b:ea:95:68:5a:05:81:d2:7f:13:99:cc:ff:c9:
fb:1f:f3:a1:3d:eb:0b:b7:a3:b7:ab:73:aa:b4:c8:98:a2:e0:
06:b6:14:18:69:ee:a5:84:68:c1:de:52:7a:8c:c7:08:60:c0:
30:5b:ed:0b:19:01:28:cb:8c:02:57:a1:01:cd:70:14:28:08:
2d:d2:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:55 2025 by rpki-client