Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: tIdX6+rpRwm2hstb7LgiKW06wDTnrJWNK8kyCATrBzw=
Subject key identifier: CC:2F:F5:B2:87:B4:A5:03:5F:EC:F3:D5:DC:FF:C1:10:6B:21:6A:FE
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 019A7293877579C416B131827CE75B009838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 07CC
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: GhO4h+XKJqcWHH2XgvikGlF1rPihbuVLQ0bp8UmlZkc=)
2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=)
3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:87:75:79:c4:16:b1:31:82:7c:e7:5b:00:98:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=cc2ff5b287b4a5035fecf3d5dcffc1106b216afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:2e:58:d0:34:65:ac:70:c9:a1:85:e4:2c:
9c:31:b5:21:24:0a:ba:9a:6a:ff:b1:0d:7d:3c:69:
a5:ba:08:27:3f:73:1d:66:65:c2:01:f2:96:39:24:
a5:7c:7f:3a:10:c4:58:cd:55:ab:8a:8f:4b:a1:71:
ec:f2:95:0e:e1:4d:68:0f:e2:5e:20:bc:8e:4d:6a:
76:52:b1:9b:e7:37:08:f7:44:22:ef:c8:ae:a6:ae:
90:c6:b8:54:60:b2:bc:12:92:25:33:01:d0:47:f9:
a1:df:da:5b:7b:4d:e3:19:2b:68:82:ec:50:72:81:
37:81:77:8f:35:00:53:0d:56:98:7a:d9:f7:51:7b:
9d:7f:9a:c9:d2:5c:fc:50:15:e8:de:43:62:86:0a:
be:f2:f0:cc:e2:1b:7c:22:bd:a1:eb:4c:29:c0:d8:
71:38:f0:99:0f:95:ef:f9:fe:9b:57:06:b7:97:0f:
17:63:12:62:a3:f6:96:3a:13:d9:0f:58:75:7f:60:
0c:6f:c3:ee:48:9e:05:ae:4a:61:de:a7:7e:47:85:
08:c7:2e:ff:5a:8b:40:45:46:94:49:9a:4d:e8:dd:
fd:1f:ea:58:71:eb:80:3e:c8:4a:71:4c:02:9b:ae:
0d:11:a5:34:2d:45:02:fe:5e:c3:d5:a0:a9:7d:23:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2F:F5:B2:87:B4:A5:03:5F:EC:F3:D5:DC:FF:C1:10:6B:21:6A:FE
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cc:13:88:61:39:3f:a4:e8:3c:41:fa:c9:b1:c8:68:0e:c5:
7e:9e:71:c4:b8:eb:c2:e6:38:ee:e5:8c:ce:be:6a:21:45:a0:
b8:a7:a7:fe:e7:28:70:4e:40:c9:71:fb:8a:79:a7:3c:d9:16:
24:33:22:bc:86:ff:31:06:05:6a:a5:80:b9:17:1c:38:63:21:
c2:c1:6a:4f:11:c9:3c:8f:c1:6a:3b:4f:56:91:d8:59:7b:c8:
b3:6d:3c:35:bc:ef:22:1e:46:bf:08:2a:17:df:99:a2:29:99:
cb:ce:b6:e0:85:bf:5f:78:94:9d:b4:fe:5a:37:f7:34:10:a0:
ad:17:8a:3b:e9:20:ac:c8:0b:d5:3a:89:0a:fe:cf:da:89:7f:
51:70:f4:b7:25:26:c3:98:7f:bb:04:2b:5d:2b:d4:f6:29:a0:
bb:60:53:94:9c:e3:97:02:bc:0c:85:96:6c:57:95:a8:49:4a:
43:80:40:d5:76:ca:a3:95:82:71:6f:de:4c:34:8a:52:f3:f9:
ae:49:ee:d7:0f:0d:fb:c7:71:d8:19:cc:60:4c:32:b1:38:5d:
b4:35:1d:81:a7:ef:a0:fc:36:1c:c0:46:db:c6:50:df:b7:84:
d6:79:73:e2:24:2b:44:aa:19:7b:5f:4a:53:9d:19:6a:84:1f:
78:b9:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:53 2025 by rpki-client