Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: ZZl3wjEZF2TwV4VTD/EIMGLE8IZXAo4ac/kEr7Cutg0=
Subject key identifier: 8C:C6:CC:8D:9C:AF:1D:DF:E4:7D:83:7D:12:2F:73:39:19:70:18:B8
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019A7112B8058324C716B13D1B9CAE70A5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 13CB
Signing time: Tue 11 Nov 2025 04:00:43 +0000
Manifest this update: Tue 11 Nov 2025 04:00:43 +0000
Manifest next update: Wed 12 Nov 2025 04:00:43 +0000
Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=)
2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: NdlXcLJ3C3zPRYUh07IJyDzgRZ5bwMHkkEw3F4g4nAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b8:05:83:24:c7:16:b1:3d:1b:9c:ae:70:a5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Nov 11 04:00:43 2025 GMT
Not After : Nov 12 04:00:43 2025 GMT
Subject: CN=8cc6cc8d9caf1ddfe47d837d122f7339197018b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:55:20:2a:2a:cd:b1:3d:06:c2:3c:bb:6c:
50:97:ae:2e:ee:c9:99:c0:45:c7:8a:1f:a3:00:ba:
71:18:55:f2:81:5a:25:6e:6b:31:96:e8:e8:44:40:
e1:46:82:22:fe:02:54:ff:6a:08:4b:5f:c2:89:f9:
37:42:5d:7e:54:0d:16:bd:13:ef:4c:87:a2:56:9b:
7b:95:7a:0f:35:00:f5:8d:e9:f3:c2:79:9d:26:ec:
b5:d4:e7:c6:9b:db:3d:05:04:a4:69:b1:a0:02:a1:
42:7d:55:63:a0:87:e3:2b:04:3a:69:c7:dd:e1:77:
77:ee:e5:b6:8c:11:48:6d:38:fd:25:97:62:1b:0a:
0c:70:18:ac:a1:3a:12:a5:2a:9e:5f:b5:27:15:3c:
01:a7:e4:ce:92:9b:b3:4e:88:a9:91:9f:2c:9d:57:
08:b9:b8:81:48:00:6b:28:05:df:63:fb:5c:3c:8e:
55:61:28:71:af:8b:1f:f9:5d:03:22:fb:52:89:3f:
32:e6:f2:d7:8c:06:43:4e:21:72:0b:2c:ec:29:fd:
a5:96:90:66:e7:a8:d7:a6:03:0d:13:f9:07:a5:d3:
ca:ef:ef:55:a7:8c:e9:3e:25:cb:33:71:c8:ba:6a:
df:52:48:49:f0:01:a0:94:7b:cb:d9:07:a6:f5:d8:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:CC:8D:9C:AF:1D:DF:E4:7D:83:7D:12:2F:73:39:19:70:18:B8
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:30:f8:e0:6b:37:c8:b7:45:60:0d:e0:aa:da:88:c3:90:1a:
96:2f:b9:ea:be:61:d4:0d:d0:32:99:d0:a0:c8:84:78:37:da:
dd:28:01:ba:d6:40:b0:81:9f:b9:17:39:8f:e1:4b:48:cb:1e:
f6:aa:6a:e4:34:15:db:d5:43:fb:f4:de:28:df:bb:4e:53:a8:
ac:20:2b:a0:86:ef:11:99:78:36:21:d2:78:57:56:11:4e:66:
b8:80:b6:69:62:c7:8b:15:07:07:8a:68:04:31:33:e5:86:cc:
95:b5:67:7f:1b:63:84:d2:c9:7e:21:32:db:10:ca:e1:36:af:
b9:7d:84:82:70:50:1b:53:38:80:ff:02:7c:6d:53:59:17:8d:
d5:84:e3:91:0f:1c:c4:9a:06:ac:f4:a0:61:6c:a8:ca:5c:bc:
b6:55:21:34:b6:8d:f3:66:c3:12:1e:f1:b8:7a:b6:33:20:d4:
ca:7a:14:c1:e0:71:21:63:6d:49:3a:81:d6:3c:07:d2:8b:86:
a5:44:e2:22:ec:11:b0:dc:79:9f:a6:28:44:05:62:d9:dc:e0:
f3:b9:40:02:ee:34:ed:e1:91:0f:ff:0a:8e:1e:75:2f:a1:ac:
2e:9f:4f:ef:e2:7a:df:38:c6:1e:fa:1f:d7:ad:b7:72:1c:9f:
02:58:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:23 2025 by rpki-client