Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: oIxG+HWFju0iHFxhfo+hBPO0PYVCj1uvmrVylod66zQ=
Subject key identifier: 47:A0:95:4A:18:B0:A3:8C:58:D2:91:BC:B6:2B:A9:8E:7D:81:10:75
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019A7225DF3167B8E65096299600CDAA2EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0DAC
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: nsvWynvhxl49eDveUKzARZ+0JzXjQer/yAFwFXKOgCA=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:df:31:67:b8:e6:50:96:29:96:00:cd:aa:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=47a0954a18b0a38c58d291bcb62ba98e7d811075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:13:d3:a6:39:8a:bd:b3:91:f0:2b:15:52:
4c:06:ef:68:d0:10:1d:2c:4b:12:4c:de:fc:86:10:
4b:d3:59:e5:3d:b6:03:49:a9:02:af:0b:7a:fe:52:
94:86:29:2e:eb:4f:5a:69:56:d5:52:27:07:56:ba:
96:84:c7:4f:2b:42:15:a6:cc:6d:53:44:ee:0e:88:
f4:0c:d0:09:82:89:3e:2d:15:cc:4f:31:61:d0:62:
1f:47:a9:8d:64:5d:d1:08:11:18:a8:4f:33:1b:f8:
1e:2c:83:c6:4c:a1:29:d1:29:b1:7c:2e:64:cd:48:
9d:a3:33:42:21:91:b8:91:77:5d:f9:dc:7e:ab:fc:
1a:3c:ed:07:99:e6:dc:d7:67:1e:fe:78:d8:4c:e2:
88:4a:0d:04:11:25:96:3c:4b:29:1b:a1:22:dc:00:
b1:0b:26:9b:3d:e9:3b:46:15:41:bc:c4:10:48:83:
db:b0:e6:b2:92:49:b0:18:b6:90:af:8f:52:67:bc:
e6:81:53:1f:b9:2d:de:23:4e:5e:c1:ae:d9:75:6c:
3f:9d:de:0f:ac:34:bd:35:67:cb:1d:b4:cf:49:dc:
89:c0:36:be:ee:0f:fe:1f:46:47:be:5b:27:e0:61:
c1:2b:aa:35:0a:ab:97:b8:17:19:4b:cb:44:89:c5:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:95:4A:18:B0:A3:8C:58:D2:91:BC:B6:2B:A9:8E:7D:81:10:75
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e4:ae:0e:75:9d:e5:84:59:73:72:12:19:cd:9a:98:e5:6b:
81:4a:93:d4:93:77:55:d6:0c:9b:3f:00:2a:45:f6:7e:77:98:
1c:85:21:cc:71:93:f5:1d:92:e0:c2:67:70:57:42:c5:81:37:
54:40:09:73:fc:0a:3e:b6:17:21:73:2a:ea:75:e4:bb:93:e1:
ad:d8:01:22:d3:7b:bd:14:3b:ba:4c:de:95:35:b5:60:ba:80:
e2:a8:89:ac:79:66:ca:16:b5:17:93:58:ee:68:58:94:8e:a9:
49:f6:fa:d5:93:e9:f2:63:1a:17:4c:8b:1e:47:06:cb:a2:90:
7a:da:ba:09:56:a4:7e:f7:cf:64:77:ba:60:ce:17:a9:f5:5a:
0d:91:3d:92:c6:c5:c4:bc:ed:7c:f2:96:02:1c:f8:88:aa:e9:
30:21:f3:90:e4:e7:ab:02:5c:af:34:7a:64:17:68:9f:20:ac:
8b:77:0d:5a:98:2c:bf:cb:55:36:03:9b:ab:a5:ee:4f:d2:75:
43:26:52:11:85:4e:12:8a:43:c0:04:95:11:89:e4:02:98:c1:
fa:a5:12:78:95:24:cb:11:01:b3:b8:09:c2:89:e3:ee:2c:b8:
3b:0c:aa:6b:73:66:ba:31:83:46:c7:49:e0:d3:99:b6:78:fc:
99:6b:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:39 2025 by rpki-client