Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: o5MdI32hHEEsvHCYs3Ss7+hHCblmGxdDtgmXLf9leWE=
Subject key identifier: 8E:77:50:1B:92:5B:33:92:8D:95:E3:82:29:69:6B:F9:AB:39:7F:45
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 019A725CBC1664881E0C10C70F20FA98F168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:01:11 +0000
Manifest this update: Tue 11 Nov 2025 10:01:11 +0000
Manifest next update: Wed 12 Nov 2025 10:01:11 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: rEiW2oKjY41PdbMgjm6Hles//VMbnJnvnIZQ2HbJqwY=)
2: 6_MzG3BJa4ElBBdEF9-BTMf874s.roa (hash: JSnJz2i5mq2wdtkVMI+9lJsfr8mdn46eUbiIUghmOwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:bc:16:64:88:1e:0c:10:c7:0f:20:fa:98:f1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Nov 11 10:01:11 2025 GMT
Not After : Nov 12 10:01:11 2025 GMT
Subject: CN=8e77501b925b33928d95e38229696bf9ab397f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:cf:cb:fc:b2:9e:8c:31:9f:f5:aa:2a:cc:
95:9b:87:c2:3d:94:19:d9:ff:47:ba:2e:82:03:c0:
5f:83:ff:79:31:22:7a:58:a6:d6:3c:b3:2a:ad:21:
9e:6c:3a:8c:8f:d0:0f:25:61:2b:48:76:a1:c9:41:
2b:8f:3d:ac:94:03:82:6f:b6:4c:83:58:6f:29:5e:
a0:f7:2c:e9:e3:a8:11:91:d2:62:02:12:65:cf:ae:
ce:ff:a0:f0:44:d7:04:d5:65:e6:ed:78:cd:11:e8:
bc:94:50:ac:d9:1e:d4:74:ca:7c:e3:2b:f1:6d:36:
8f:e3:8e:fa:d9:80:25:be:ef:a2:41:c5:dd:69:bc:
10:7b:f6:90:cb:99:c8:57:34:57:df:9f:73:9a:72:
c6:45:04:61:7d:4b:60:f9:22:b4:5d:52:76:7c:91:
58:82:38:25:ef:aa:52:59:64:6b:72:b6:9a:fe:34:
af:4a:f1:f5:38:1a:df:16:6d:d2:04:75:a9:f4:81:
b8:df:88:27:eb:3f:9f:55:90:04:30:64:e9:16:bc:
cc:83:38:cb:e9:78:2b:af:71:aa:ce:0e:5b:2b:1e:
47:35:f0:0d:ae:a0:fd:b9:46:2f:39:61:06:2d:1d:
84:2e:20:ab:2e:a8:f2:bc:e2:b2:f3:25:69:5f:81:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:77:50:1B:92:5B:33:92:8D:95:E3:82:29:69:6B:F9:AB:39:7F:45
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:25:9c:4f:9b:4f:98:6a:7e:c8:12:99:3d:49:33:20:a6:e3:
8a:90:7b:b0:c0:9d:cc:31:7c:01:b1:70:4d:90:71:a4:2d:e4:
af:bd:62:78:5b:91:b0:3e:54:84:1f:66:16:ee:0f:37:01:5b:
39:08:a2:10:6b:4d:7d:73:26:a6:87:5b:96:d2:fb:92:c6:7e:
84:5f:2a:aa:36:93:7c:9d:02:22:dd:bb:cf:cd:92:c6:e1:2c:
09:15:61:6e:96:67:b0:7f:6a:46:bf:57:60:8e:1c:56:67:ef:
99:17:ab:87:09:41:a2:6d:d5:6e:35:8c:cf:63:33:ac:6e:89:
32:49:55:97:a3:58:a0:a1:83:1b:20:d3:6c:3f:ab:7f:a8:89:
40:14:66:1a:8b:47:5f:dc:13:b0:e8:bb:62:27:dd:73:e9:8b:
d1:b3:09:6b:1f:c6:9c:a9:5a:24:75:58:d6:9f:b3:d7:e3:0f:
d6:d0:6a:bc:91:c9:94:43:4a:37:a2:0a:79:5d:3e:35:3f:7d:
92:82:9e:c1:9c:11:e3:0c:b3:07:e7:c7:9e:20:65:40:81:43:
91:7d:83:d2:b6:73:21:36:fd:0e:8d:a6:1e:5f:12:f8:6c:ad:
4b:7d:22:e1:bc:8d:bd:b7:40:66:63:5b:2c:65:18:0b:a9:28:
f5:6d:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:56 2025 by rpki-client