Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File: s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier: vdaUsYuHZHO69HMY5tVbgLGsWnCCoY5ciSq6PY04nbE=
Subject key identifier: F1:49:F9:B3:4E:9C:86:1C:F5:EA:68:77:FC:72:C6:0E:F0:EE:54:06
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 019A72CABF2082E0E6C23E1F3CB6B61336CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:01:21 +0000
Manifest this update: Tue 11 Nov 2025 12:01:21 +0000
Manifest next update: Wed 12 Nov 2025 12:01:21 +0000
Files and hashes: 1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: 168GjuCL0/tsNyB4M0JpOHAtf+bYm2+LJhs3Qw6sA+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:bf:20:82:e0:e6:c2:3e:1f:3c:b6:b6:13:36:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Nov 11 12:01:21 2025 GMT
Not After : Nov 12 12:01:21 2025 GMT
Subject: CN=f149f9b34e9c861cf5ea6877fc72c60ef0ee5406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:b9:a9:23:ea:14:69:a3:ec:56:c4:89:ae:
29:8e:b2:47:92:98:d7:dd:7d:44:cb:d5:cc:a7:e3:
63:76:d4:38:a9:31:3c:16:f5:26:dc:e4:5e:16:6b:
8e:7e:46:38:77:5e:11:20:25:a2:70:30:fc:0b:e0:
f0:ba:1c:9d:5f:c7:08:4e:d4:17:fe:3a:b8:6d:5d:
1e:7b:a1:9b:e0:29:49:35:aa:45:28:21:69:75:6e:
56:18:30:e2:d2:88:a6:1d:64:97:67:92:7c:c8:3c:
5c:c2:39:09:e6:3a:65:fe:f9:47:8c:70:64:73:44:
e6:8c:85:26:a9:dd:2b:e6:44:ee:5b:f9:fe:60:75:
69:e4:ed:7b:a2:5e:1f:88:48:6e:cc:f6:23:f0:cd:
41:74:05:04:79:60:35:e4:e0:6e:0f:b8:fd:1b:d2:
bc:a9:d0:c0:31:97:01:59:e7:30:48:54:49:2b:b5:
4c:76:9d:49:90:17:92:a9:b6:f4:48:c2:06:bd:17:
a2:3b:fb:ca:e2:68:c0:e8:9f:ed:4c:91:bc:1f:75:
b2:b7:d9:9f:d3:12:12:c5:6e:de:0a:1e:8e:ba:9f:
31:00:af:77:09:9e:af:12:9c:f0:b9:6c:3e:63:d7:
b1:24:34:02:82:9f:9a:ea:fb:4b:a9:e8:a0:68:24:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:49:F9:B3:4E:9C:86:1C:F5:EA:68:77:FC:72:C6:0E:F0:EE:54:06
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:92:a2:c8:ef:a2:60:ce:f5:65:03:02:97:70:99:4e:5d:d3:
14:ad:5e:27:57:2a:a6:39:4b:73:f5:ef:16:48:bb:6c:90:70:
aa:8b:74:7a:b3:7a:3f:76:8f:87:4a:d8:87:1a:6d:fa:86:82:
cb:97:ab:3f:61:3b:9d:18:1c:26:5b:52:ee:a3:8c:bd:2d:43:
c8:8d:08:bc:f1:bc:fe:f5:50:b2:04:dd:6a:cd:d3:f5:8c:fd:
33:9b:a1:56:fc:c4:8d:9a:d6:5c:ce:0c:d7:2d:26:2e:b9:64:
7b:09:7d:4d:46:62:b0:a8:57:43:bb:ff:16:e8:7a:1f:05:07:
78:6c:0c:52:fa:e9:4a:54:6b:c8:b1:e6:c4:e6:7d:9f:8f:f8:
f6:5d:c1:e3:ef:fb:42:95:b0:c3:83:57:83:76:2b:a2:dc:c1:
1a:ee:60:dc:05:01:4a:17:0e:95:3d:0b:4a:12:68:66:f5:07:
a6:c7:ea:b5:43:c0:f1:53:30:a2:23:48:32:d9:84:e3:8b:b3:
61:6f:26:7e:91:51:63:a3:4f:c3:37:6f:dc:27:00:43:c9:97:
06:a3:58:13:92:3d:c5:52:b4:67:8b:0d:fb:60:2a:f9:a2:fc:
5e:5f:36:54:37:7a:ee:c2:93:20:17:b3:86:dd:6b:46:a5:aa:
18:b1:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:39 2025 by rpki-client