Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: sGpQS0LHm2PXdjj6DfcMqa7ho3X9UK8MLV6TTV9qcEs=
Subject key identifier: CF:DA:23:CB:BC:C5:8A:24:36:21:D9:20:61:9F:F8:5F:1A:ED:F4:44
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019A72CA75906DC76CE71FCEA142C1FB1856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 052E
Signing time: Tue 11 Nov 2025 12:01:02 +0000
Manifest this update: Tue 11 Nov 2025 12:01:02 +0000
Manifest next update: Wed 12 Nov 2025 12:01:02 +0000
Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: ogyDvaGHQJ9cYIFsXP1uu83C81+tbbP9rG8PcbXeleA=)
2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:75:90:6d:c7:6c:e7:1f:ce:a1:42:c1:fb:18:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Nov 11 12:01:02 2025 GMT
Not After : Nov 12 12:01:02 2025 GMT
Subject: CN=cfda23cbbcc58a243621d920619ff85f1aedf444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:f6:3d:d3:d5:75:de:10:eb:20:7a:33:f0:
2d:cf:5e:8c:a6:58:d9:12:0c:07:60:10:cb:60:1f:
fd:0d:8e:5b:38:25:5e:60:24:d2:da:b8:36:3e:6b:
67:c0:48:c7:65:75:fe:36:54:2e:87:51:6f:87:e9:
6a:fe:73:01:63:93:32:b0:41:82:4e:8a:43:ea:3e:
da:0a:2b:3a:b4:9e:b6:58:a4:4e:64:0a:99:86:97:
04:12:c5:06:9a:36:10:dc:ee:14:f5:d3:1e:50:d7:
7e:04:2c:91:09:00:7f:4e:64:f0:01:a7:06:a4:8a:
9b:8a:22:83:87:ab:4b:7c:73:a7:86:8d:ba:0d:4e:
ab:cb:b5:40:d2:41:83:7b:25:3e:94:f1:9f:8e:45:
dc:fc:5f:ab:fc:ed:21:0f:79:7e:ca:28:64:9d:9d:
b3:47:a1:69:7e:be:44:86:9d:f5:eb:fd:b5:e5:f1:
8b:f5:5f:eb:48:ff:a0:98:65:6d:e0:13:1e:9b:a3:
62:8d:64:e1:29:34:91:78:1d:fa:ea:99:6b:b9:e7:
e9:35:fb:33:17:b5:c8:99:49:11:4f:38:5b:de:44:
63:e4:8d:0b:8f:04:e1:2f:29:35:06:0a:3a:96:14:
0f:06:83:36:14:8f:0e:2d:a3:ea:41:d4:c9:6b:22:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:23:CB:BC:C5:8A:24:36:21:D9:20:61:9F:F8:5F:1A:ED:F4:44
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0b:a8:80:cd:56:36:a6:c4:40:72:cb:b7:68:86:13:45:6b:
56:2e:63:e0:e6:3d:3b:aa:2e:c1:04:28:7a:c8:1e:e5:28:89:
79:c3:da:a7:76:a2:a4:23:e2:12:24:11:11:0e:10:9e:f9:b7:
9a:e6:8a:18:eb:92:55:bb:92:76:80:d6:41:a8:2e:9a:bf:24:
c2:d4:4a:e3:a7:18:34:c8:39:26:3c:f1:65:a6:e9:5d:69:2d:
d4:18:15:57:cf:4f:5c:5d:15:71:ae:6d:a4:a7:55:f3:c6:89:
af:19:28:fd:11:91:e7:92:f8:dc:b2:0d:64:f4:c7:cb:70:84:
e5:14:3e:61:ee:05:94:a7:ba:fd:59:35:7d:9d:c2:bc:85:6e:
8e:b0:be:a7:12:a4:5d:12:4e:e9:90:33:a5:b6:d3:ea:3e:07:
2b:fd:43:dc:91:32:f9:94:c2:6c:3c:7d:dd:37:ec:eb:e6:f5:
70:87:98:25:6a:d7:37:75:de:6e:29:d5:4a:3e:ae:9f:c2:33:
ca:41:af:27:61:8f:1a:e0:9f:e5:41:ed:07:9e:7f:af:53:d2:
25:85:78:a6:f2:e9:b1:50:4b:0b:03:1a:d5:dc:ad:4b:94:0d:
d2:8b:48:91:7e:ad:21:9b:e1:16:cf:b7:d2:f0:3f:27:ad:df:
4e:5d:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:48 2025 by rpki-client