Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier: um5j7FLdb6KnjfUTbbAOSA8jjf+bFDnc1s7/eyYlhUk=
Subject key identifier: 28:C4:DC:7A:47:33:23:79:99:EB:17:DF:EC:83:5F:11:44:0D:F4:7E
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial: 019A725CB3AF77EFB2BDE704161AAFBE129E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number: 16C1
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: CWUOKx7i7fWMTOLeX8QsuPHIs9TuZiy3Xdhs5/Bu9tE=)
2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b3:af:77:ef:b2:bd:e7:04:16:1a:af:be:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=28c4dc7a4733237999eb17dfec835f11440df47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:88:8b:66:db:81:39:48:cc:bb:90:8d:59:
80:03:8f:88:fe:e7:c1:da:4a:2e:29:49:12:3e:f0:
98:d0:14:57:ca:cf:9e:d2:3f:6b:02:b9:99:36:8b:
f2:12:5f:00:97:13:2a:06:67:6b:40:07:dd:3b:7a:
15:21:e7:9c:32:2c:0b:53:de:df:c0:83:d4:5a:15:
6d:c4:d0:32:e6:ac:64:5d:35:f4:f8:13:a6:e7:60:
5b:4d:3a:ee:74:46:4c:6c:bc:46:7b:1a:76:09:3e:
52:d4:53:ee:28:dc:6f:7d:39:c1:a9:4b:51:77:9d:
ec:ff:bf:9f:a7:97:1b:85:57:97:0b:dc:2a:a8:59:
ed:fd:29:3c:a0:59:c0:37:9e:f6:aa:65:b7:2f:db:
21:96:13:00:11:41:0d:eb:84:2f:77:71:f8:c8:ea:
c6:19:c3:ef:dc:28:ba:63:d0:bb:0c:6c:9e:39:19:
26:67:0a:dc:4b:1e:1e:73:3c:5e:e5:b5:15:ef:fe:
ca:42:39:b7:3a:36:c0:e2:94:3e:7b:a1:e3:fb:7f:
c9:0e:c1:87:ef:ca:de:5d:3a:21:0f:8f:ee:26:9b:
37:5d:97:91:d6:12:5c:33:a9:1b:1f:a0:79:5e:bb:
11:5b:17:6c:87:d7:8d:9c:f4:f6:5f:15:5d:86:16:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C4:DC:7A:47:33:23:79:99:EB:17:DF:EC:83:5F:11:44:0D:F4:7E
X509v3 Authority Key Identifier:
keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:aa:69:65:93:3b:20:62:3e:47:f7:ff:41:e6:51:6c:50:a4:
30:99:aa:a1:73:bb:be:5e:96:49:84:81:5b:12:df:50:c3:0f:
40:84:13:a3:e6:86:c3:b8:20:cb:a2:c7:e4:c1:74:8d:aa:9b:
f9:9f:ac:1e:c1:1d:5f:2f:4e:d6:5a:6a:30:f3:78:e8:9f:59:
5b:8a:6d:3d:16:6c:1d:92:86:3d:35:06:54:19:91:6e:77:0f:
da:c6:61:28:55:49:14:2c:98:5c:f1:6d:a8:b7:45:3e:26:03:
e3:c5:97:80:e4:f6:0a:a7:2e:78:b1:6c:30:3e:98:1f:d7:d1:
63:fb:23:5e:26:46:02:5c:bb:f6:6f:fa:39:e7:e0:ff:9b:08:
c8:08:5b:da:49:7f:15:00:1d:a2:1a:ab:e3:07:7d:68:31:22:
42:c2:7e:4c:98:e9:c7:18:3d:5f:5b:d8:94:7a:31:8d:8d:7d:
15:1b:64:36:3b:65:64:9e:a7:37:71:04:d6:ac:25:26:34:2a:
bc:13:ac:20:e2:61:49:6c:c2:7f:b2:8c:5d:e6:85:d3:1f:ec:
da:4e:ab:7d:3e:cc:64:14:52:bc:2b:63:04:26:eb:ca:11:55:
2e:92:ae:2e:8a:6c:b0:1f:e6:65:4b:89:75:eb:76:5f:0c:d8:
4d:97:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:59 2025 by rpki-client