Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: I6vksDhCyAnzFgFTpHJSQSFiSMgOUdmZDA7nEarQgQ4=
Subject key identifier: 38:92:3F:10:D4:EB:8D:2B:C7:4F:FF:87:02:A7:7C:1E:81:00:F0:0F
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 019A706E7016D59B6791ABFD0A67192F227E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 01:01:16 +0000
Manifest this update: Tue 11 Nov 2025 01:01:16 +0000
Manifest next update: Wed 12 Nov 2025 01:01:16 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: Ck5knFRl9L4aarcjQBKVrW2eOOvoZTH+oItfkX6MZw8=)
2: CK8AO5cGK3UQexwKT4OQnvAc618.roa (hash: FFxKHiRId03ta3Wbr3GQyhjQH1qxb15B+KbsuejkB8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:70:16:d5:9b:67:91:ab:fd:0a:67:19:2f:22:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Nov 11 01:01:16 2025 GMT
Not After : Nov 12 01:01:16 2025 GMT
Subject: CN=38923f10d4eb8d2bc74fff8702a77c1e8100f00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:c2:f9:76:13:85:74:ff:db:04:2b:d6:16:
37:c8:ec:25:90:d9:68:63:eb:cf:69:28:e7:c9:29:
7f:e7:1b:df:4e:f4:12:ce:e0:26:a4:71:14:16:87:
50:20:6a:a0:a9:b1:65:99:cc:28:10:1d:4c:49:dc:
b6:c1:2e:d5:e3:71:8d:a6:4d:02:e3:2c:01:5a:46:
3a:a2:6e:c1:e8:b2:e0:66:8b:73:3e:64:82:95:b5:
05:1f:f3:7a:18:09:ad:a7:ae:52:5d:66:f2:25:44:
8f:2e:0a:76:db:c4:f1:90:c1:b1:ff:83:0d:72:f2:
68:54:10:c5:53:b2:06:8d:f3:8e:26:3d:21:78:0a:
d7:68:7e:17:ac:a4:cc:40:46:80:2a:5f:2b:76:9e:
27:b9:3c:8b:a0:62:69:25:f8:82:9d:f9:b6:14:32:
5e:be:05:bf:93:ea:6b:b9:08:d3:96:c6:00:87:8f:
6c:08:ed:e0:d4:c1:2e:b2:c2:10:cb:92:b3:1e:54:
de:1f:dd:bd:df:8b:69:7b:c2:da:6c:b5:e4:ad:e5:
90:c5:db:07:c6:34:15:ea:09:b2:90:a4:a0:20:e6:
61:1d:3d:6e:30:3b:4d:63:4e:31:69:df:14:8a:ff:
1b:b3:64:a7:d2:f8:1d:42:5b:07:25:26:04:57:99:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:3F:10:D4:EB:8D:2B:C7:4F:FF:87:02:A7:7C:1E:81:00:F0:0F
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a8:2d:10:4b:38:3b:30:c6:0e:ff:70:8d:54:6b:c2:88:b2:
eb:91:d9:8e:66:e3:9a:f0:be:e7:8a:3c:2b:9e:f9:98:51:c5:
6a:a0:11:a8:33:2a:1a:73:62:d7:06:c1:d0:fb:c0:a1:e1:a6:
50:c9:97:26:58:a9:ef:c7:13:9f:61:03:74:35:ea:51:24:79:
8a:ff:fc:3b:de:2b:d5:2d:91:dc:e1:13:a3:10:37:5d:a3:84:
d4:1e:5a:3c:18:38:5d:22:47:5c:08:a8:23:3a:c1:7a:25:7f:
47:fe:52:ee:ee:68:8b:24:e4:06:13:2e:47:04:9b:66:98:a1:
ca:35:c3:b3:8d:dd:65:b4:f2:cc:0c:7a:38:41:e5:32:c9:63:
41:2a:0f:03:33:ba:70:09:c8:88:3d:8e:60:8e:84:26:9c:13:
30:f3:82:7d:66:4d:81:77:bd:e4:06:f4:ac:05:d3:d5:36:3b:
ab:77:c1:d7:f6:3d:80:ff:c7:0d:71:9f:10:75:d7:75:ec:6e:
69:81:67:37:e6:e2:39:96:d5:c5:ea:5d:65:c6:42:29:be:9c:
64:36:34:6b:50:11:df:ff:31:d4:5d:0c:ca:92:d7:4a:9a:b1:
b4:9f:b9:37:cf:48:bc:5a:b6:9c:a5:3a:c9:ce:c6:e6:78:d2:
c1:19:fb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:42 2025 by rpki-client