Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: WYAfsnoaLxhwMOHeNg8Z9ECCb9pwLh2szN2mRa56JuM=
Subject key identifier: 5C:E3:F8:38:E9:2B:C7:7E:77:00:7D:44:6D:24:61:B0:8E:4B:F9:65
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 019A71B87B859FC8C5C66B290E234D81B64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 164F
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: QIDBcB0DOvab8mNRWrIhV8F1UBSsBgKYU4uSoUZ+Ew4=)
2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7b:85:9f:c8:c5:c6:6b:29:0e:23:4d:81:b6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=5ce3f838e92bc77e77007d446d2461b08e4bf965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:ea:14:b4:6c:13:13:3b:df:8d:b1:3f:af:
ac:66:6f:aa:4b:ab:64:f6:40:81:8b:b8:18:df:1f:
fd:41:f3:2c:b1:f2:1a:db:b0:03:30:f7:d7:5c:0f:
d9:5c:42:bd:04:6e:bb:e4:76:48:bd:a1:1f:43:7a:
ac:72:33:b0:ce:0b:18:61:61:83:b7:d9:9d:45:04:
88:9c:2a:48:1f:e3:e8:b8:6b:e5:1f:3b:e9:e7:7c:
92:3c:57:da:99:37:39:62:b6:80:8a:74:e6:19:00:
84:0f:c7:6b:df:9d:76:39:9a:bc:e0:21:5e:2f:87:
12:73:73:c9:92:6f:c4:aa:c1:93:ac:21:32:91:72:
87:2e:f6:b1:5e:58:9e:6e:7b:6c:cd:b3:f0:b3:d1:
90:73:f1:75:3d:0d:f8:6e:51:2e:0d:0e:2e:ba:b2:
06:c0:d8:e4:8b:cb:20:fb:76:d3:d7:c0:b2:ee:48:
5a:8a:7b:a0:fe:2c:b9:d4:ef:e8:d3:de:2e:cf:4b:
23:99:43:3c:0b:2a:0c:0f:a1:b2:02:34:8e:e3:99:
c8:06:52:00:c1:12:47:26:37:5c:91:83:40:32:99:
ba:1c:24:63:12:e6:b8:43:59:82:41:a5:3a:a1:b7:
8e:20:6f:32:c0:ea:bc:db:86:ac:7a:91:64:d5:e0:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E3:F8:38:E9:2B:C7:7E:77:00:7D:44:6D:24:61:B0:8E:4B:F9:65
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cd:73:b9:20:c8:97:d5:73:ea:5a:99:01:20:81:63:fa:27:
da:51:60:87:1a:60:ce:fd:15:8e:99:a0:0d:28:3b:f6:40:3f:
b6:15:81:54:9a:f0:f4:0e:ee:73:29:0d:8b:2d:17:b5:d5:b3:
3f:6d:a5:96:45:f9:a5:fa:e9:59:81:4a:ff:8a:84:c8:e1:7e:
26:c6:69:b6:4b:f6:b6:a8:c1:8b:78:42:34:bf:26:24:e3:4c:
d0:7c:b7:be:50:1a:3a:f3:37:39:ae:1c:8e:b3:7c:a4:ed:86:
20:c5:6f:ec:f7:a2:6e:86:68:52:d0:d4:55:b9:41:d7:2a:0b:
97:6f:0e:20:8c:c1:ce:ea:de:96:33:51:90:d0:0e:c4:15:a8:
31:4a:67:00:a9:97:eb:b7:63:07:8c:a4:71:52:5f:c7:33:e3:
79:c7:7e:80:29:42:de:f4:2d:a9:bb:20:94:77:6a:94:31:f8:
25:c3:cc:05:5c:db:fb:c4:67:7d:bc:db:5a:7f:72:87:c0:c2:
78:4a:9d:2f:45:36:fd:f9:dc:e0:a9:dd:3f:0f:c0:d1:83:29:
b7:53:c2:9b:3b:41:b8:22:7e:eb:87:da:57:c6:d5:10:69:40:
c3:2f:3f:51:fa:aa:77:30:ff:5d:28:66:17:4f:04:40:bf:d0:
4d:ee:7e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:44 2025 by rpki-client