Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File: 5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier: jWGzJ69XSNkJ3BPn2S18cXb9VSuLYalqm5YenodHT04=
Subject key identifier: B4:64:D0:8F:5E:0D:29:16:22:73:43:34:80:69:37:8D:81:FC:90:01
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer: /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial: 019A71EEBA71036360C64E03137757EB96BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number: 033A
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: s6r4fMnYty4xC6RqLb2NfK67Gd83GmTsbLZ7CIC/J6s=)
2: WZ6QV7I388WfR1atNyelt0Q9Mso.roa (hash: KwrEk8zO8slIVjQv6gkfQCNK8LKZkPpOkNAIgKKlEQo=)
3: cYRGhzL82eBqpmxlM9QdQCYRf0M.roa (hash: JsKzcZfq1zGMtrEgXsSMPufU5mv03rsq7Q409GdhdZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ba:71:03:63:60:c6:4e:03:13:77:57:eb:96:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=b464d08f5e0d2916227343348069378d81fc9001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:60:af:64:87:63:2f:71:50:bd:15:59:46:
91:45:6b:59:ed:b3:e7:ec:ee:b1:c0:f5:83:ea:61:
eb:5e:a2:bb:bb:2d:4f:fc:37:5e:9e:5b:f9:24:c9:
49:e2:43:28:f1:96:3b:1d:ec:fb:0f:f9:da:98:1d:
08:ef:ff:06:10:6e:98:4e:07:7f:39:cd:f8:5f:19:
ef:9e:21:cb:69:61:a2:68:98:59:3b:90:49:a4:c8:
1d:17:e0:91:d7:fc:26:84:10:3c:fc:45:7e:9d:5c:
2b:63:a1:f5:ec:bc:fe:59:0f:de:f3:92:26:b1:a8:
3d:dc:8c:4d:54:d2:fb:19:24:b0:db:11:d8:eb:27:
67:52:1a:89:71:c4:b1:13:dd:f5:4c:e2:e1:ee:61:
e3:d7:14:fb:e8:fa:0b:d2:4b:20:73:70:aa:ef:da:
95:af:39:c3:e3:7b:d5:eb:ad:c4:1c:70:6a:20:a9:
2b:25:f4:a3:0e:fc:6e:b3:c0:d3:71:ba:ee:db:8f:
7a:dc:89:a5:9a:a4:8f:d6:12:4f:31:7c:1a:4a:7a:
70:a6:d4:0b:04:5b:0d:c9:a5:24:d2:87:6a:d3:e5:
35:a4:fe:4d:49:47:76:dc:32:e2:54:11:bc:a5:0a:
c3:f9:86:3d:31:d7:ff:c3:de:9f:28:3c:b2:af:59:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:64:D0:8F:5E:0D:29:16:22:73:43:34:80:69:37:8D:81:FC:90:01
X509v3 Authority Key Identifier:
keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fb:74:93:71:e2:07:a3:85:2e:67:32:99:ea:ad:26:64:a6:
2d:c5:96:14:6b:54:d7:51:90:d0:6b:bb:86:f9:d1:b3:4d:7b:
c2:80:66:3f:95:5a:95:3f:34:70:31:1d:c7:66:52:e9:47:9f:
84:ce:81:91:35:a4:9a:a9:13:9f:f1:ad:19:4f:72:cb:7b:5c:
3c:e2:27:1f:23:24:e8:07:ce:ea:8e:17:56:cd:21:e0:82:05:
49:fc:98:1d:47:49:e4:ba:2d:34:89:a3:7b:3b:a3:36:9c:7d:
51:4d:bb:8e:b0:15:e4:e3:db:5c:ae:5a:63:5e:4c:3d:f8:a0:
4f:64:5c:85:66:13:07:3d:7c:65:38:96:35:e1:22:c8:b0:d7:
df:6a:60:c5:da:1b:f2:be:19:6c:b2:96:3e:74:06:f6:86:64:
2f:a9:fb:6e:7d:cd:af:55:dc:4d:8a:c6:fd:4c:4e:4d:50:8d:
b5:10:45:55:b5:62:f2:4c:82:a0:f8:76:fa:c4:0d:85:72:70:
af:0d:cc:9e:4a:6f:d9:19:bf:d6:c5:f2:28:38:42:52:d2:08:
9e:e1:a9:eb:72:53:bf:4a:20:53:1a:88:75:74:5e:9e:02:b6:
8e:a4:4e:15:60:a2:27:aa:ee:88:e6:c8:94:a7:ce:01:2d:98:
25:a7:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:02 2025 by rpki-client