Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
File: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft (raw, json)
Hash identifier: +xbhHOIY07fItpXxQPphy8KqK8YNF2IbQHkzl+w0tXE=
Subject key identifier: FB:91:C4:20:AF:94:2E:92:FD:C0:16:81:DC:89:AF:01:8F:B3:C6:A1
Authority key identifier: E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D
Certificate issuer: /CN=e403f4da5b423d899fbb5b56164fb07696d8159d
Certificate serial: 019A71B8EB5EC1ABED7D51202724C6C91E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
Manifest number: A9
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: 5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl (hash: XfSglwXHlr8Byx+xcDsFr7GxhsoEAa8ar9cAbgiJ7A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:eb:5e:c1:ab:ed:7d:51:20:27:24:c6:c9:1e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e403f4da5b423d899fbb5b56164fb07696d8159d
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=fb91c420af942e92fdc01681dc89af018fb3c6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:b3:c0:54:ce:bb:27:0b:3b:1c:e3:1e:51:
8c:9f:72:09:a7:11:e1:3f:12:5b:ca:28:89:ce:29:
99:8e:02:70:22:29:1e:fd:67:ef:ad:17:7a:03:fd:
53:42:56:7a:fc:a7:d5:6f:c6:39:c0:ae:95:ea:16:
68:06:4d:cc:59:2c:28:65:a6:01:c5:91:51:61:a3:
ba:cd:85:d9:4e:8b:4e:cd:d6:c6:26:26:ba:f3:e8:
63:02:f3:fd:50:34:e3:08:9a:1f:6c:51:5d:f0:4c:
b3:bd:1f:fc:e4:4d:95:af:01:89:39:55:b9:a6:13:
99:21:43:1c:37:12:bf:7f:38:b4:15:7b:56:32:bc:
8f:8d:b0:00:2c:c6:f4:cc:3c:3f:36:93:2c:99:7c:
47:c5:5a:77:8e:77:6a:11:a4:59:a3:fc:97:e9:57:
d2:af:1b:85:7f:df:c0:03:17:e2:68:dd:f8:f4:a9:
ce:d0:48:46:93:d0:99:a6:a5:9c:35:7a:28:48:52:
e2:75:72:b5:a9:c2:1d:2c:d8:64:a5:c9:b6:f5:db:
01:f6:60:8d:2a:41:63:d9:50:4b:b7:a1:4c:be:1d:
f0:b4:50:52:75:86:89:09:bd:07:0d:b9:aa:e6:dd:
3a:f3:97:52:dd:06:c6:5c:73:dd:13:99:ed:22:cf:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:91:C4:20:AF:94:2E:92:FD:C0:16:81:DC:89:AF:01:8F:B3:C6:A1
X509v3 Authority Key Identifier:
keyid:E4:03:F4:DA:5B:42:3D:89:9F:BB:5B:56:16:4F:B0:76:96:D8:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AP02ltCPYmfu1tWFk-wdpbYFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fd210d-d4c3-4831-a446-a00956afc469/1/5AP02ltCPYmfu1tWFk-wdpbYFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:07:28:9f:f4:5d:f7:19:38:17:ec:ef:94:fb:ec:62:bb:d0:
60:b2:fa:5e:c5:45:be:4a:c8:9b:cc:ce:1c:e3:54:6e:70:86:
fb:a0:5e:b0:56:44:c7:04:d2:3d:85:91:94:5b:d5:14:41:4b:
4b:ec:01:ee:e0:81:4c:c0:28:4d:71:a2:cb:2a:93:b0:d7:c6:
40:01:45:86:01:1b:06:30:b8:16:98:e7:37:c4:d4:ab:83:ea:
1d:5b:24:7d:1c:cf:b1:ca:b5:aa:5a:82:cb:09:ad:7d:4d:72:
77:ef:c6:35:70:95:b5:71:00:82:94:61:71:65:69:61:7f:45:
8a:02:bf:b2:71:d8:c4:37:e8:fa:a9:d8:67:79:d7:7f:1c:7a:
07:ef:b0:10:12:66:11:92:65:b5:c3:5c:e8:c8:ef:ca:e9:c3:
8d:1a:42:59:42:89:52:88:53:31:60:8e:35:b3:d9:f6:ce:eb:
5d:77:17:29:2a:90:f9:05:80:e4:a0:a0:a1:38:fa:f4:61:be:
77:44:04:19:02:2c:92:c6:14:ec:dd:bb:9b:13:9b:a7:36:13:
8b:95:a9:d1:17:98:fa:27:71:c8:9f:b8:dd:24:36:c8:79:bb:
f1:26:b3:9a:83:a1:7d:b6:87:39:f2:5c:7f:c5:5a:6a:3c:51:
04:81:54:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:19 2025 by rpki-client