Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
File: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json)
Hash identifier: iJTfoS26RerJ8ZEA9SAfhy0K9OpLUYaAaWFQlblCnJw=
Subject key identifier: 84:4F:E9:72:A6:8C:14:67:44:81:78:DD:89:86:1D:BF:6A:90:68:E7
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial: 019A7149AA561BB5FB0D39E0D8BCE1C95CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: nLYG3okCrP9BoirNuF/GFCKOsiQWZfNX6szkjEx20Ac=)
2: Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa (hash: FohmZC9RjfkLWGSkIiIa2VtU1w5u6RfcN+tDaynMZcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:aa:56:1b:b5:fb:0d:39:e0:d8:bc:e1:c9:5c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=844fe972a68c1467448178dd89861dbf6a9068e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:79:20:01:d7:5e:c3:35:5d:00:29:65:94:
b2:83:e0:dd:db:7a:7c:05:57:69:7c:77:94:a8:f6:
7d:73:af:e7:8c:5a:80:6b:79:78:40:b7:7c:00:88:
6b:18:ee:f1:eb:ac:27:4e:8f:e0:83:46:2b:94:3c:
28:24:c9:f9:40:6c:8a:f9:63:8c:a6:ed:76:14:10:
58:09:41:91:d0:03:ac:90:85:d4:2f:6c:6b:e5:5e:
df:2f:5f:22:6a:cb:b8:92:99:7d:23:3e:7d:17:15:
7b:a0:8a:5a:66:b7:48:31:3a:73:eb:0b:42:08:a2:
d0:90:c5:dc:3e:37:c4:88:9e:5f:5b:f2:5e:cf:72:
a5:c6:e6:22:6c:81:59:0e:d3:a3:17:85:50:a2:f7:
2a:ff:d2:07:7c:0f:6b:bc:cc:ec:0e:1b:53:af:6f:
e2:cd:f1:00:b3:d2:15:9c:63:d8:8e:ba:08:8f:d3:
a2:27:59:ae:2f:4b:aa:25:2a:45:a0:47:62:16:13:
71:2d:50:c2:12:c8:e4:84:0e:cc:a9:68:58:47:7f:
0e:e6:4a:2b:40:ff:e4:4a:20:6a:6a:66:e8:9e:8b:
31:53:d2:b4:ee:d0:05:47:48:c3:06:f4:50:02:f8:
63:2b:93:43:b2:5a:73:a6:b6:8d:a5:42:a5:9c:83:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4F:E9:72:A6:8C:14:67:44:81:78:DD:89:86:1D:BF:6A:90:68:E7
X509v3 Authority Key Identifier:
keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bc:f4:83:9b:e6:77:9a:4b:22:30:15:39:76:a1:b1:c6:6c:
ed:d4:13:63:5e:33:e8:5a:d5:b6:7a:7d:49:51:e9:57:28:53:
b1:16:00:48:9e:ba:c6:8e:f1:3a:62:7f:34:4a:bc:67:fd:87:
20:02:af:7f:2c:17:d6:05:40:b0:d4:3f:c1:4c:d6:cd:16:20:
7d:c5:46:66:1b:e8:45:60:e1:49:d0:09:fc:fa:bc:5a:f2:6b:
6b:bc:5c:2c:9a:b0:0d:67:bd:42:29:45:89:1a:a7:7b:15:b8:
1e:ea:f1:9b:d6:5c:1c:49:77:c4:68:c8:61:3e:98:b8:22:c9:
83:4b:e7:cb:38:14:92:c1:d0:7f:26:76:0a:10:9b:e3:7d:d3:
3f:9a:c1:4c:2e:74:60:a2:29:de:14:9e:6c:0a:cc:5e:71:b3:
f0:e7:9e:62:c7:0c:a1:6f:44:55:fc:55:f4:44:70:93:92:08:
20:a7:43:cc:31:b0:19:cc:d0:ee:be:07:2d:dd:80:b1:a3:ca:
a7:47:cd:07:1c:80:a5:76:65:db:d2:1a:a5:09:0b:42:85:92:
4f:f3:a2:1a:5b:c4:7f:86:51:b0:6a:8e:26:9f:08:f1:6b:0e:
72:fb:bf:d3:4a:7a:69:91:0e:db:81:bd:63:bf:6b:b9:c8:ae:
e1:29:c2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:31 2025 by rpki-client