Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json)
Hash identifier: 6JsbCXUkBHNWmQglKQYjT/0NtiBXrMjbdqfvlwV8JlI=
Subject key identifier: 9E:F3:75:3A:F2:A4:56:34:CB:8A:D2:FC:0E:8B:2C:07:7D:F8:3A:B6
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial: 019A72CA3A6471D1FD5BD1528A8070B91CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
Manifest number: 0EBE
Signing time: Tue 11 Nov 2025 12:00:47 +0000
Manifest this update: Tue 11 Nov 2025 12:00:47 +0000
Manifest next update: Wed 12 Nov 2025 12:00:47 +0000
Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: jsAYodlVN4nPnG4tixM8K3IxL5UUgZTMXnLP7+6+0E0=)
2: TeyiHHpQzPXntQ9zcodgsnssabQ.roa (hash: 99RzEV6KxbBUQmEGjwYOg/0KALhFJ98CPqecVaZd8t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:3a:64:71:d1:fd:5b:d1:52:8a:80:70:b9:1c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e505d93497f19d2563066b409200969711f28c67
Validity
Not Before: Nov 11 12:00:47 2025 GMT
Not After : Nov 12 12:00:47 2025 GMT
Subject: CN=9ef3753af2a45634cb8ad2fc0e8b2c077df83ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:e6:3a:13:8a:56:7f:ff:1b:32:9c:7d:bd:
66:5c:58:81:20:db:fc:e9:9f:b4:c7:82:3c:fe:5d:
70:17:da:28:ab:e0:68:b1:79:36:63:64:9c:cd:4c:
ad:eb:3f:8a:ac:5e:3c:13:c2:fe:84:f8:80:c1:60:
d5:ad:24:ef:2c:c1:d1:48:12:45:91:ec:a9:dd:51:
f4:69:75:70:ed:13:ea:0d:32:a2:61:26:c9:57:8c:
62:d2:be:62:c6:e2:c5:55:c8:53:5d:d6:13:f5:bd:
56:7d:27:23:cf:cc:8b:a0:ac:56:bb:1d:df:34:75:
97:36:29:59:ad:14:e9:d1:f5:3c:ca:c0:bb:47:b8:
12:77:b1:55:b4:9b:c1:a1:2e:e7:b7:46:8f:ad:e7:
64:05:ad:05:30:df:26:f6:c2:c5:a6:e9:be:15:43:
17:15:32:31:4a:29:d9:b4:d0:8b:25:c6:a2:63:c4:
86:b9:41:cf:47:aa:49:79:9c:f4:72:13:c4:0c:05:
5f:f7:64:5b:b9:aa:07:a2:3c:cf:ef:57:3d:38:be:
85:b4:af:3f:42:ce:90:57:31:68:01:90:c5:33:5f:
d3:15:e9:12:44:ce:01:25:2f:26:c5:30:41:e5:f3:
ad:62:83:ac:53:e7:5a:40:b6:b5:63:ab:ee:a1:c5:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:75:3A:F2:A4:56:34:CB:8A:D2:FC:0E:8B:2C:07:7D:F8:3A:B6
X509v3 Authority Key Identifier:
keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:07:37:09:92:4e:4e:a0:16:f1:d7:16:93:0b:77:ea:61:de:
fc:55:e9:45:48:23:20:9b:3c:2d:2b:e0:de:c9:05:d5:e7:48:
52:7c:38:0a:e0:74:cd:d6:ca:13:12:6b:04:c4:a5:78:ee:1c:
8c:9b:18:7f:1e:ba:61:c0:69:5b:12:a4:6e:1a:0e:b9:01:e0:
d0:0e:9e:8d:38:1c:99:61:67:81:bc:7b:aa:31:0c:0b:a9:bd:
1d:af:e1:3c:bc:f0:14:63:5d:60:c6:2c:e0:7e:93:8f:47:ba:
35:1f:76:a1:77:ba:4a:f7:98:26:2e:b3:d3:54:f1:be:4b:a6:
74:fd:bf:c0:4f:35:55:65:04:24:de:f0:ff:7d:69:ac:23:f5:
b8:11:75:93:e7:74:cf:5d:80:65:86:9a:df:29:d4:0b:d8:09:
df:00:e0:3b:3e:fb:a1:87:98:6f:71:09:e9:38:f9:d8:30:d0:
3f:0d:38:6c:01:a5:d0:2c:3a:41:67:6b:0a:d4:be:60:05:a5:
2b:f7:98:b0:c4:5a:89:5d:e9:fb:a0:49:7c:8e:0d:86:95:b6:
bd:68:48:05:c3:b0:84:ba:83:7c:75:22:bd:ea:f1:69:18:c6:
ff:69:68:83:9e:65:60:a4:c2:2c:46:a7:f3:c2:f2:59:1b:43:
03:d2:b2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:34 2025 by rpki-client