Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier: 9+RtNQCJkUUmVomW3tVoWhnlcTgRFPTehPZGxpyfuag=
Subject key identifier: D0:12:49:78:3C:23:66:AA:63:D5:3E:5E:9B:C5:F7:AD:FD:1D:E2:6B
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial: 019A725C48B2B8D5045B693F3EA9019C7635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number: 0DDE
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: aZNzmjHMAnUkh+LCY/zv7KHKTbE3OE8jldsT0KLMGA8=)
2: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (hash: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:48:b2:b8:d5:04:5b:69:3f:3e:a9:01:9c:76:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=d01249783c2366aa63d53e5e9bc5f7adfd1de26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:df:32:68:93:a9:01:d3:36:6d:28:fb:40:
38:49:9b:e0:1b:00:86:27:db:fa:e6:37:93:e7:4c:
3f:11:14:d7:c1:4f:8a:ff:78:74:a7:90:74:93:8d:
0e:35:98:7c:96:40:0a:b5:5f:0f:b4:11:fa:94:ff:
aa:b2:c2:91:92:2d:10:92:ef:47:77:e4:70:b1:b1:
84:8d:b9:af:49:46:1e:75:74:5c:7b:b0:f0:f6:be:
45:fc:4d:a8:49:94:90:ec:57:af:ab:2f:11:57:2c:
bc:0f:47:fb:d9:a3:1a:ae:bd:db:66:24:54:93:fe:
63:75:16:62:c9:4d:56:aa:2b:fa:54:b0:b6:cf:cc:
20:87:1a:df:b1:46:7a:73:e7:52:61:fb:fb:f6:b7:
92:ca:46:72:29:55:5a:06:c3:d3:42:de:ff:4a:73:
75:88:f9:71:4e:f5:18:92:8b:01:34:0f:92:c5:ef:
55:68:de:7c:3e:8e:11:c1:db:0e:9e:f9:52:87:c2:
12:30:ab:fe:e3:71:d8:5e:ea:c6:cc:e8:ca:b1:21:
69:46:5c:41:9e:a6:a1:e2:41:c1:83:cd:f7:3a:4c:
89:41:67:dc:2d:dd:40:85:aa:62:c7:5d:7b:88:85:
d1:f1:51:0f:7c:69:6c:c4:08:b7:ba:ee:8b:ed:03:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:12:49:78:3C:23:66:AA:63:D5:3E:5E:9B:C5:F7:AD:FD:1D:E2:6B
X509v3 Authority Key Identifier:
keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:66:b6:52:7e:c5:6d:7d:bd:a1:46:4e:95:c2:52:96:00:64:
36:ba:2f:76:fc:9d:8c:0d:92:5d:6c:7f:dd:c4:14:48:0d:84:
fb:82:d1:14:9d:66:55:ca:49:80:79:7c:15:8f:d4:c8:2a:aa:
48:8d:77:dd:b6:9d:f6:a2:ff:65:98:d9:6f:18:56:d9:95:72:
ee:83:5a:29:df:52:1f:45:86:f9:53:f5:e2:be:d0:36:a4:16:
08:15:19:04:06:c6:73:bc:a4:af:fe:ab:14:bb:04:15:3c:de:
59:76:db:32:82:46:97:d3:16:ab:f3:5a:41:4e:fc:aa:1a:8b:
21:f2:d6:5d:27:ce:7e:c6:38:04:1a:8f:b0:a3:03:15:67:fa:
c2:9f:5a:97:50:a0:03:66:14:fd:3a:d3:35:2d:30:34:2b:72:
bb:23:aa:37:53:ff:aa:33:66:21:67:ae:3d:c0:d2:97:c3:57:
ee:d1:ef:4c:f3:c1:c8:5e:ca:94:34:9c:c8:5f:65:e1:9b:b6:
90:c7:e4:e3:b4:1b:22:86:91:0d:34:08:00:03:fd:74:2f:aa:
1d:5a:46:f2:66:76:83:56:d0:0b:12:0b:b7:68:b5:bb:43:a4:
1e:a1:9e:29:1d:1d:60:3c:a8:1d:d3:ac:82:ff:ca:d4:12:9e:
4e:3e:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:27 2025 by rpki-client