Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File: 5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier: E6XxfMtAsCqBTNhliB+pj9BXvcd6g93fh8uTDih4rN4=
Subject key identifier: BB:EE:01:85:C1:E0:18:4E:05:32:7E:B2:C5:DB:D3:25:5E:B3:47:11
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 019A725CEB15EE351CABE5A64219EB43FB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: ChkWCqwUJAo8PVD8GdocIimBQFSHCgwhVlnWS1EMD10=)
2: 8liaJL0g-7zotMbXe_sm2ys9BE8.roa (hash: 30a8wxGDwl2f7yhZhDFSqSXr3+9jtWYD0pYLCfzDZkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:eb:15:ee:35:1c:ab:e5:a6:42:19:eb:43:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=bbee0185c1e0184e05327eb2c5dbd3255eb34711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:e9:e1:5e:5f:35:94:ff:a9:88:13:28:5c:
63:2d:00:98:e5:2f:9f:9a:c5:6c:c1:46:88:dd:dc:
95:bb:e2:b1:cc:22:84:e3:41:36:ec:4d:80:f5:1e:
02:1b:59:88:18:23:fb:22:9d:f3:8d:1f:b2:c8:b4:
96:6e:07:cc:c2:2d:2b:89:2f:ea:e2:3f:65:4f:98:
e0:df:ca:a4:e3:1a:75:c9:db:c2:75:87:43:af:a2:
f1:b2:1f:6d:1a:2e:9b:b4:28:6c:dc:71:1e:6b:44:
52:02:a1:a2:f9:6f:1b:de:f0:7e:9f:63:b5:b8:b7:
6d:56:26:a0:73:a4:f9:cc:51:8d:de:e4:a4:67:bb:
37:e7:fe:18:16:c3:9e:c9:c6:76:85:7c:b1:5c:0c:
ba:14:38:63:de:70:c3:c7:90:6c:69:eb:e7:23:f3:
85:9c:6e:af:b9:8c:77:81:a6:37:2b:8b:ae:e8:bf:
8a:64:84:ff:0b:1a:a3:85:3a:a5:7f:9e:02:cb:dd:
f4:de:4b:69:53:6f:45:51:d4:80:20:65:61:e8:0c:
7d:35:ee:0c:74:34:87:2a:10:04:58:28:0d:fc:75:
17:8f:67:d3:60:db:d3:b3:b0:c1:cf:e1:1d:67:05:
be:6f:d6:31:06:04:c9:f0:c2:9a:52:e4:73:d2:03:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EE:01:85:C1:E0:18:4E:05:32:7E:B2:C5:DB:D3:25:5E:B3:47:11
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e2:1a:8e:71:27:29:7a:e8:06:fc:96:1d:56:ea:dd:cc:56:
03:4e:54:da:77:0c:8c:f2:05:52:22:1a:79:0a:e8:d0:ef:2e:
e9:a2:8a:a3:81:13:99:bc:1c:14:4f:89:70:9d:fb:06:68:c9:
7d:17:38:6e:0f:1f:c0:bd:bf:12:83:98:23:d3:32:f1:14:7a:
8d:51:14:f1:b2:4e:2d:00:b3:18:b0:ee:5d:a8:6f:64:73:54:
47:d9:5e:10:d2:db:97:2b:ab:ad:8c:bc:05:36:96:d7:6f:19:
52:68:3e:f4:25:8c:bb:40:e9:33:fb:cb:2e:61:2b:11:b5:2d:
07:73:6c:63:25:16:60:10:d4:ec:67:25:96:5d:e4:44:78:9e:
6b:4e:8c:63:90:16:17:d3:ce:c9:a0:a9:9a:09:a6:33:75:10:
34:5a:71:f5:6b:16:cc:53:64:41:32:31:5f:8a:f9:df:cf:45:
a5:eb:70:20:53:e3:33:03:2d:46:41:de:fa:32:01:1d:f7:c1:
ff:18:76:79:b5:af:b4:e3:d7:bd:3c:5f:7f:07:46:5b:6a:62:
f5:b9:0d:a5:a5:4a:69:f8:55:bf:c6:3f:f5:b7:9b:1b:d1:88:
c3:47:c8:e2:ca:d7:40:e7:2e:d8:3a:ad:06:e8:72:2e:0b:83:
03:99:62:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:41 2025 by rpki-client