Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier: wDx5nic2/oXgrkLBYR+IFpyjY/BTR/qo0MMwxXVWUpw=
Subject key identifier: 00:30:26:F0:F1:73:94:B8:26:93:11:92:5A:28:D5:70:62:34:CF:B9
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial: 019A7112FE1D509810A27D61F2B1D6FD3921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number: 0ACE
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: ehvGSuAKaAM6K5i5ICzgQODpfHlRmEAvpCrNb1ik2aI=)
2: m4ZSJvHCvVAdAoCa8Dy3Jfpj2Po.roa (hash: aprBkCfkVmxisnK2NR7zrUxKt0p0KhHf/uKOAfeW9gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:fe:1d:50:98:10:a2:7d:61:f2:b1:d6:fd:39:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=003026f0f17394b8269311925a28d5706234cfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:df:b8:85:e2:f2:ef:ac:0b:2c:f1:1e:58:
59:7f:0a:b8:56:e9:fe:ce:05:b8:75:fd:15:16:71:
6e:b0:7e:aa:1d:f6:c1:ac:47:75:7c:cb:b1:84:2f:
64:f8:ad:7c:15:6b:7b:3c:ab:e5:06:47:44:70:dc:
35:b0:92:00:90:1c:cb:eb:ec:48:df:2f:8f:9f:44:
c6:f4:19:d1:06:db:20:c9:ea:10:b1:21:7d:97:ce:
6a:d5:9f:d0:88:be:48:99:b6:42:34:8b:be:4f:8f:
b6:01:d6:ba:7d:23:4e:4d:89:e0:61:29:80:f2:73:
47:1b:6c:54:de:08:94:4a:ad:85:9d:54:8b:bd:3b:
dd:ec:66:77:41:a7:d5:ef:a7:85:54:72:e2:0f:df:
00:7c:a1:ac:db:ff:c4:d5:57:8e:12:2b:bd:2f:d3:
ca:9b:d2:35:b9:c9:39:19:f3:49:5f:5f:d3:8d:1b:
e4:24:c4:24:61:fb:c8:a1:99:d6:1d:e3:82:9a:1a:
43:2e:67:c1:9f:9e:14:c2:78:73:70:ee:ee:89:cb:
40:50:b3:75:cf:a4:c7:71:dc:d4:c8:8b:50:6d:85:
2f:40:66:86:44:88:20:ff:8a:11:6c:d5:4e:4d:a5:
36:fe:25:ad:79:88:21:c8:97:03:70:a8:1b:23:45:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:30:26:F0:F1:73:94:B8:26:93:11:92:5A:28:D5:70:62:34:CF:B9
X509v3 Authority Key Identifier:
keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:35:76:59:dc:86:06:97:7b:d1:8e:a6:35:84:8c:39:de:ce:
0b:94:64:9d:0b:cd:70:52:2e:29:3c:74:88:31:93:67:7c:62:
96:ed:ac:2a:10:2b:89:62:ca:0a:fa:50:29:c6:c5:b4:25:10:
99:ef:18:9a:45:4e:c0:ea:c6:87:ab:39:30:63:db:75:ce:a7:
9a:be:c6:5e:d0:b3:96:38:ee:b2:c1:8c:1c:02:0a:28:12:2c:
8e:34:87:7b:f7:15:aa:da:e1:ba:c1:4e:80:32:bc:a4:ad:fb:
bf:b0:49:b7:b2:dd:a9:bf:93:66:64:9e:f9:22:89:ad:e5:fd:
db:95:9e:ea:34:cb:55:62:a8:43:04:6c:3b:57:bc:4b:ac:cb:
54:6e:d0:bf:fa:64:39:44:91:b5:c1:09:f5:50:d3:19:48:29:
70:6d:64:05:4e:0c:43:ef:93:5a:4e:44:18:41:07:cc:23:c6:
da:8a:a9:cd:72:c1:76:91:12:25:c0:7c:c3:41:34:78:18:17:
77:10:5a:f4:9d:ea:60:45:9d:10:f4:a9:1b:ba:e3:ce:ed:34:
34:01:d3:45:d1:80:33:f8:69:9d:40:be:9e:4b:13:1f:62:1e:
38:74:72:dd:be:ba:9c:64:a4:71:20:2a:e1:51:43:02:27:cf:
da:d6:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:19 2025 by rpki-client