Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: cFXDozd6jnkZZoppEE7hIZPUQZogvhPzIRvUq4vC3ng=
Subject key identifier: 42:16:24:92:F0:F7:F5:21:0B:64:CE:B6:3B:2C:A5:10:5D:0C:B3:03
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 019A706E2B5086BDE420FD46C3EAF4B27DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 0D60
Signing time: Tue 11 Nov 2025 01:00:59 +0000
Manifest this update: Tue 11 Nov 2025 01:00:59 +0000
Manifest next update: Wed 12 Nov 2025 01:00:59 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: dEX3vsfTyXAjORwfUyyhDEITttsanswH+aBanzxkTdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:2b:50:86:bd:e4:20:fd:46:c3:ea:f4:b2:7d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: Nov 11 01:00:59 2025 GMT
Not After : Nov 12 01:00:59 2025 GMT
Subject: CN=42162492f0f7f5210b64ceb63b2ca5105d0cb303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:29:71:65:cf:eb:5e:81:7d:ef:50:89:92:
6f:82:2f:1c:4b:76:85:3c:73:8d:a9:bd:32:5b:89:
6f:9a:b7:28:87:1c:9b:48:25:6f:69:27:42:66:9f:
3c:d3:bc:aa:48:54:a8:e6:aa:86:2a:ba:77:9b:68:
88:cf:b1:4b:37:bd:b6:9d:f2:dc:d9:3c:70:68:aa:
22:df:a3:54:47:4f:e1:95:a1:06:40:f8:1d:fb:61:
ca:89:bc:4e:15:65:cc:b8:b6:3f:8e:db:68:fb:5b:
dd:0d:01:f1:f1:68:7a:42:6e:0e:70:42:97:5f:7e:
d1:ef:59:ab:f4:b1:26:0f:20:de:25:7b:61:c4:fd:
fe:35:12:80:bf:df:f8:88:ae:9a:7b:76:47:71:51:
67:81:6a:10:c2:93:29:33:8d:86:2f:b0:59:32:2a:
10:b5:97:3d:a0:f5:76:14:26:19:68:d2:10:05:07:
0c:42:f4:a6:d3:01:0d:07:aa:79:0a:f0:af:e3:c8:
cd:ba:01:69:e1:72:45:36:79:75:1c:26:92:c3:48:
7f:d4:10:b8:5d:9c:69:d0:1c:f5:31:3b:35:62:d3:
21:77:15:ef:3b:95:22:a1:55:1a:44:5d:38:88:da:
0a:07:d9:38:b2:cd:37:01:c7:9c:98:be:1c:a0:c2:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:16:24:92:F0:F7:F5:21:0B:64:CE:B6:3B:2C:A5:10:5D:0C:B3:03
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f0:90:16:1b:07:10:6e:e3:15:3d:8e:8a:e4:2f:3d:72:87:
b8:b7:24:82:c6:07:b7:24:2e:7c:af:1a:a0:e8:8d:66:05:cc:
bc:73:d5:84:fb:34:6f:f8:45:d1:ce:e6:8b:80:d8:b5:6f:ae:
cc:ef:96:69:9e:6c:e8:e1:71:e8:c5:a0:df:1d:fc:69:2f:82:
a3:5b:2c:3c:68:e0:7a:df:82:9c:9a:98:f4:3c:f4:cc:1c:c7:
02:7f:27:77:18:5a:38:0d:ec:e0:16:cf:54:0e:2a:be:36:32:
d4:70:db:83:ae:62:0c:1e:3c:f9:d0:cd:f8:d2:c1:bf:8d:9a:
bd:4c:bb:1e:2c:4d:0f:2f:6c:47:ae:c8:60:24:3c:65:7d:08:
01:db:41:39:6b:ce:53:1b:98:1d:5e:74:76:05:58:93:f3:19:
8a:85:b3:54:a0:a3:b8:48:71:44:eb:a7:5d:a2:b2:39:01:42:
a3:02:86:a6:e8:24:31:12:0f:13:09:19:50:18:06:a7:06:51:
cf:87:c5:23:ac:65:76:a8:7c:29:5b:f4:17:52:c1:6d:4d:94:
ea:3f:59:ab:a3:50:d9:d9:ed:fe:29:79:47:d8:ed:20:d4:a4:
b8:15:5f:32:28:95:59:6d:7c:88:e5:6c:0f:3b:57:8d:98:f0:
25:fd:b9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:09 2025 by rpki-client