Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json)
Hash identifier: N9a+gFfSuDLy6mz2mJivOzCuHPRpC8w+Qvn9LSsHR9g=
Subject key identifier: D5:E2:73:EF:B1:C3:05:6D:A3:D0:27:E4:B3:CE:8B:3C:B9:D8:50:11
Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820
Certificate serial: 019A7225FEB957BE67AF4A77F07A46B122E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
Manifest number: 026B
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: /gpYGdeWf2DJS57DvNa9xuiaHxhf4y/mgWcXEAz6Gwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fe:b9:57:be:67:af:4a:77:f0:7a:46:b1:22:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=d5e273efb1c3056da3d027e4b3ce8b3cb9d85011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:86:9e:f1:05:66:1f:51:23:8e:13:8b:79:
6b:45:5e:0a:ab:08:e6:c9:22:d5:d8:b4:9f:4d:fd:
5e:fb:46:e9:9a:5a:3f:2e:7b:b9:8b:58:ac:ca:2f:
6a:9c:e5:38:f5:79:73:d8:22:e3:c3:03:27:93:6e:
40:06:1e:6c:60:8b:44:cd:50:9b:e8:3a:0d:31:3c:
26:4a:23:ad:da:98:d0:45:9d:43:8b:c3:fb:3f:47:
11:53:fd:4d:c6:5c:2d:39:9e:02:22:b0:f9:46:cb:
68:c1:02:d4:01:e1:8b:ba:e1:5e:1e:ed:62:b1:cc:
fd:7a:69:5f:47:8f:63:58:d6:c3:29:3e:47:63:66:
cb:71:7c:4b:5a:f2:85:ec:9c:75:4c:dd:80:58:fe:
0a:1e:35:97:74:1d:32:da:93:0a:30:77:2c:59:c4:
5f:14:ac:b9:26:47:a2:15:0a:31:8a:d1:7c:70:ae:
e9:bd:64:11:ae:09:cd:01:bf:98:06:4d:ac:cf:05:
95:e9:bd:fd:dd:cb:47:7a:fb:e9:28:b6:82:91:20:
09:cb:ad:fc:f6:a1:21:0e:e0:dd:03:4c:9b:de:99:
3d:18:38:ed:16:88:2d:9d:71:ea:6c:c2:e4:75:6c:
6d:19:2e:cc:b3:4e:13:a0:6a:31:2c:5e:8a:e2:91:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:73:EF:B1:C3:05:6D:A3:D0:27:E4:B3:CE:8B:3C:B9:D8:50:11
X509v3 Authority Key Identifier:
keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:52:c7:71:c1:13:0b:61:55:1e:a1:d4:52:d9:4f:da:66:b8:
4f:5a:1c:91:7a:95:b0:b3:62:30:ba:1d:9a:2d:ec:1f:06:88:
dc:1e:6b:80:45:db:1d:45:b1:e8:44:7a:82:b5:10:13:86:53:
b9:7a:84:ed:3f:b2:19:d8:1c:55:e9:f6:fb:b4:0d:4a:12:61:
2a:3e:db:85:f2:8d:11:86:67:94:46:cd:5d:f2:48:fe:de:80:
d7:be:c9:7b:d0:2f:34:89:af:12:37:4a:61:03:eb:d6:6c:2e:
20:20:de:d3:11:a8:2c:6a:a1:90:34:5b:99:8c:b5:d0:b2:e0:
f1:4c:4f:56:b6:ec:15:bb:0c:21:4a:d0:2d:0b:7b:2f:c5:8d:
ab:b0:7a:b0:db:b9:3d:c5:60:d0:05:62:f7:bf:a3:3f:25:a4:
18:ec:ba:d5:77:b1:02:73:d6:34:d6:88:83:a1:a4:67:13:82:
04:a4:09:b6:f9:4d:dc:79:76:38:d1:b0:87:6a:f6:4d:7f:63:
da:f9:75:6c:9b:a7:13:7f:d9:d3:39:08:2c:c7:b6:20:8d:ca:
76:19:d3:4c:73:16:f5:18:55:db:9b:82:8f:2d:19:ef:e1:fe:
25:cd:73:da:a2:9f:76:40:32:25:b4:f0:52:a9:4f:48:7f:60:
0b:88:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:13 2025 by rpki-client