Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: xuyGp/SR5Mb3MCVDZQbipGUhr5zFKoh3m8Tg/5G7oU0=
Subject key identifier: 7F:9E:6F:B3:00:2C:A6:53:46:69:5E:A4:41:87:CE:34:D5:E4:10:84
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 019A71B7814E6FE18339E66A8DCB70A1004F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 0A66
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: AeglGPm3Q3MLCHgirc3/iP7UtFydeS8VIorzOXiShMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:81:4e:6f:e1:83:39:e6:6a:8d:cb:70:a1:00:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=7f9e6fb3002ca65346695ea44187ce34d5e41084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:04:88:9b:0c:5c:24:4a:a9:02:72:14:78:
f9:0b:d0:d3:2c:39:a1:27:7d:15:93:39:ad:ce:a2:
47:cc:70:ad:76:e9:53:86:f8:e9:f4:33:06:b3:51:
6a:f7:47:e8:8b:db:40:5d:93:12:b4:0e:79:9c:57:
d8:e5:b5:f7:39:50:62:c1:6d:ef:7e:ca:7d:e4:4e:
a3:c2:e9:e3:35:6d:a4:b0:ec:a3:2f:1f:bc:b8:47:
d4:01:d0:f1:c7:ca:92:c9:53:75:3a:ef:7a:a6:d2:
a5:34:8d:8d:c0:06:5c:67:b2:c4:c6:70:95:be:75:
63:03:bc:19:56:14:7b:a9:77:b2:39:97:8c:42:9d:
5b:85:f3:cf:dd:36:ad:95:bf:f0:72:f4:84:b0:a4:
6d:f5:22:71:ee:73:7b:5b:84:04:62:1c:1e:74:20:
1a:fe:8d:26:23:fd:b8:1c:a5:98:4b:ad:9b:45:50:
e0:4e:70:1b:63:fa:9b:f5:d4:f3:9e:8a:3c:f8:9f:
90:fc:17:30:3f:76:c3:5a:4e:74:4e:e3:a5:c7:1c:
22:36:9b:41:9c:c7:39:57:20:dd:f7:b3:f5:43:0e:
f6:53:cd:c2:a6:13:c7:5b:15:0f:50:ad:1c:c3:b4:
fe:4f:53:da:f5:09:67:48:a5:27:20:76:38:1b:15:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9E:6F:B3:00:2C:A6:53:46:69:5E:A4:41:87:CE:34:D5:E4:10:84
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:18:e0:b2:b4:b8:1a:2b:55:4a:8f:c9:ba:8e:ab:ad:46:19:
2c:33:81:91:5c:71:a4:17:0f:ed:de:db:8f:de:24:2e:23:ca:
7d:3e:a6:3a:c1:a1:df:8b:ef:e8:6e:9e:e8:c7:98:37:a5:34:
23:45:99:2d:09:ac:f9:96:92:37:a2:2c:fe:49:9a:5d:b4:9b:
b0:f7:83:72:d7:41:29:38:8c:66:1d:56:00:3b:b8:f5:9f:66:
10:e3:05:dc:0b:51:60:65:5c:b3:46:1e:66:ed:70:10:84:42:
18:3c:98:36:0a:b7:98:a7:25:80:07:4c:60:ad:a9:a2:9c:70:
e1:80:7f:e7:48:6b:27:09:d0:67:bc:8b:f9:30:60:14:34:ea:
02:7c:1c:3f:81:ba:4b:91:ec:6a:51:a7:94:6a:b6:15:61:76:
c6:8e:34:85:58:88:44:b3:6b:73:38:84:b2:d2:ec:6b:72:96:
b9:c7:9b:6e:4f:8b:70:d1:dc:ee:48:31:35:b2:e3:25:de:a0:
84:99:f2:0c:75:ce:7d:4b:8a:7c:91:b0:b1:63:21:9e:c0:dd:
fb:eb:be:40:d7:63:73:f4:25:0e:44:d2:21:0c:2c:a9:33:b7:
2a:34:68:4d:20:bf:ef:fa:46:c3:65:86:ac:cb:58:47:3f:af:
b2:24:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:46 2025 by rpki-client