Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File: 5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier: LI5W728HKBXkx/7G3JYMUpFVMVmS3Nj3J4kSonq4dV4=
Subject key identifier: BE:0B:6E:41:D7:B9:C4:CD:C9:36:20:44:D5:21:15:C5:B7:8D:A4:07
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer: /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial: 019A71B9058C773DF69248C83188BA310D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number: 1270
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: HCysDsx4VFk+sDtEfnsLOIas4CFHU+q7Mi/7G6aIJSA=)
2: 75gL-QM6p_WWaZpy6iMBTgopl4A.roa (hash: C70hkA6dezEt2xcdG5Lxg7y2p7KFd6680YSWy+fNqPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:05:8c:77:3d:f6:92:48:c8:31:88:ba:31:0d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=be0b6e41d7b9c4cdc9362044d52115c5b78da407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:b5:4d:ca:8e:20:ed:2b:12:16:ff:60:84:
b6:84:f1:72:fd:69:c4:d0:20:dc:39:d9:9a:a2:14:
8a:7a:18:c9:2e:ae:1a:b0:62:08:95:3d:0d:2e:4d:
7e:08:4e:da:11:ec:0d:69:53:74:c4:f8:f4:b9:a7:
bc:20:85:24:51:74:e1:d8:cd:84:54:03:d2:56:cf:
d6:46:05:09:dc:a3:71:65:d0:ab:e4:0a:1a:ab:2d:
a6:d1:94:56:0d:eb:fd:60:1e:41:87:b1:6b:39:dc:
7c:45:5a:7c:a4:64:07:0d:8b:10:21:df:d1:4b:9d:
be:22:e0:38:b2:bd:83:7e:1c:56:4f:cf:1e:40:5c:
a7:ee:7e:ce:37:2b:2f:b2:3c:88:eb:85:be:00:d9:
49:34:03:d2:c6:09:94:c7:40:50:57:a0:0d:37:05:
ab:09:62:e5:92:33:40:cd:a0:ff:b8:b1:e1:ab:70:
b2:22:21:ed:2a:4a:86:b4:78:87:87:fb:1d:3e:f6:
29:64:36:16:09:3d:01:97:d6:63:7c:73:c2:1d:0c:
4c:14:b5:2b:d6:d9:c9:df:6b:67:37:47:d3:38:7f:
82:43:cb:02:43:99:81:40:36:f0:2e:4e:35:c3:10:
6c:25:af:69:e4:31:3f:6a:57:fd:7d:d6:af:6c:97:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0B:6E:41:D7:B9:C4:CD:C9:36:20:44:D5:21:15:C5:B7:8D:A4:07
X509v3 Authority Key Identifier:
keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:90:2c:a0:8a:2f:f3:a5:f6:a4:c6:cd:86:66:9c:bc:18:96:
ff:3c:08:46:b1:15:2f:13:55:6a:39:ea:b1:1c:79:98:48:5e:
25:48:cb:a3:b8:af:33:5a:bd:21:c1:f8:b4:75:15:a4:a0:a4:
3a:85:13:d4:3d:3b:ce:2a:68:8b:c7:24:fe:df:75:2f:fc:88:
d6:cb:af:7a:b2:a2:42:d4:1e:a9:cb:f8:cf:15:f7:06:32:98:
17:b8:ae:9a:b1:54:59:8d:84:d2:c6:ec:53:d0:66:90:ac:b3:
4d:f3:d6:67:09:c9:ba:0b:4e:7e:00:4f:7f:f3:d3:e9:d2:5b:
fe:da:b5:44:53:e0:28:94:6a:cc:70:2b:90:62:d9:df:ae:ac:
db:a0:34:0b:de:c1:b3:66:3a:9a:f5:91:43:64:de:fd:22:27:
04:b2:93:7d:76:15:08:31:4a:25:b1:92:b6:b0:c8:2a:7c:5c:
be:1a:51:67:70:65:07:0a:15:4a:2e:36:1f:fd:45:00:94:77:
2c:6a:3e:67:f8:a9:fe:55:2a:2c:6b:5e:98:ff:e7:16:0b:c7:
ba:ac:85:5c:d9:bd:32:e1:eb:03:df:50:e9:47:eb:5c:b7:94:
72:d3:91:f2:7d:a5:33:ae:a1:a0:70:55:5d:bf:c8:94:44:ed:
61:44:ab:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:43 2025 by rpki-client