Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: iB1By7/tiosf4s2sR/DP7Ywb2gbWAJbu/2jgBv0z+0E=
Subject key identifier: 93:7A:5B:00:B1:A3:3B:C6:D8:C7:8E:6E:82:E5:3D:0A:58:96:23:2E
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019A71808043292BC94C11C4DCA80C932CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 06:00:37 +0000
Manifest this update: Tue 11 Nov 2025 06:00:37 +0000
Manifest next update: Wed 12 Nov 2025 06:00:37 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: SaIjK1M7N2lkLXEKCmMrlarlaXqhjKR6yPrDQ+ix3fA=)
2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=)
3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:80:43:29:2b:c9:4c:11:c4:dc:a8:0c:93:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Nov 11 06:00:37 2025 GMT
Not After : Nov 12 06:00:37 2025 GMT
Subject: CN=937a5b00b1a33bc6d8c78e6e82e53d0a5896232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:42:0d:94:d4:ee:42:61:6b:1e:9e:ef:03:
ab:55:bc:d0:ae:5a:dd:3a:41:ab:56:ab:7f:32:88:
ca:a1:9f:41:28:13:8e:69:51:f5:06:c2:73:a7:30:
2e:85:22:5c:44:81:43:66:11:00:ba:02:d1:05:a1:
d9:1f:75:0a:45:f7:41:96:7e:99:2b:57:09:ce:f2:
18:53:51:66:41:4f:70:d6:ab:98:e3:f4:60:9d:97:
0f:2c:29:b0:17:20:8e:fe:44:26:d3:85:19:fb:5a:
59:8c:af:3c:09:08:ff:9c:58:6e:aa:16:ac:f9:69:
c2:73:bc:77:92:33:40:50:bb:32:75:9e:f1:6b:1a:
2f:be:20:5f:0e:5b:a8:26:8a:68:d5:77:f8:62:00:
e5:88:e1:f4:ee:fa:68:f0:24:3d:96:f0:af:1b:f4:
f7:e7:14:9e:cf:6c:32:ae:e8:dc:a0:c2:d1:92:20:
03:c7:da:ce:28:12:e4:4e:d8:1a:13:fe:bc:db:63:
66:cf:87:f0:ce:4a:ea:0b:4a:b5:84:30:af:19:26:
6e:f8:e9:26:ba:d5:d7:ca:73:32:82:9a:59:c8:52:
be:b7:04:7a:e6:54:9e:b2:28:71:8e:56:b6:32:d5:
0e:b8:9f:7b:b7:de:81:b0:19:5d:24:80:2a:bd:5f:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:5B:00:B1:A3:3B:C6:D8:C7:8E:6E:82:E5:3D:0A:58:96:23:2E
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:45:8d:34:28:5b:73:06:3c:76:7e:ee:a7:64:17:6d:89:7d:
30:83:a8:bd:cf:35:bc:9f:14:c1:dc:22:bc:13:4d:9d:bb:a9:
b9:03:7d:f8:0e:f9:8e:06:dd:9b:9a:a5:a2:5f:d8:89:83:fc:
07:c8:55:9e:d4:cd:cf:2b:d3:df:89:a7:52:95:5e:75:7a:88:
6c:31:22:34:b5:0b:d8:2e:0b:52:a5:ad:8e:90:47:9a:32:11:
14:bd:eb:3f:4b:76:f8:0b:10:01:7b:7c:a1:72:ff:c1:63:14:
48:50:34:98:ca:14:b3:69:f4:29:c5:1f:01:46:17:95:7e:1b:
c2:2f:32:d6:61:7d:c7:89:39:aa:33:78:ce:13:82:f4:8c:8e:
81:fc:e1:ff:35:d0:72:c2:34:60:3b:de:19:61:67:68:c5:eb:
71:38:bc:37:ed:63:50:e6:da:85:d7:68:69:7d:04:58:f5:01:
5e:57:cb:54:d4:f7:ee:2c:3d:ec:32:f6:ed:c1:f6:19:40:31:
a5:64:73:f6:3d:cc:0f:c5:bf:4e:3f:a9:45:4e:33:7c:4b:43:
32:27:1c:7d:28:3d:8d:07:3e:75:2b:3b:ed:66:30:a3:dc:f3:
2b:c1:c4:bf:4b:62:a4:61:d9:66:b6:7a:16:0a:01:dd:78:52:
e2:3f:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:06 2025 by rpki-client