Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: TxSmrSteb7kzlIQYTtA7kEeCizz5akwOLlAP0iH1f78=
Subject key identifier: 0B:02:CF:F1:A3:C9:68:68:AB:E1:E6:26:44:5A:24:64:A9:22:82:AB
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 019A730163D704BFC6503EC5C0DFCE2E136A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 13:01:02 +0000
Manifest this update: Tue 11 Nov 2025 13:01:02 +0000
Manifest next update: Wed 12 Nov 2025 13:01:02 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: 6Xi0dLKyUdPSKdcOInh8pcaG0fQauOtG9UDNmyeR8BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:63:d7:04:bf:c6:50:3e:c5:c0:df:ce:2e:13:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Nov 11 13:01:02 2025 GMT
Not After : Nov 12 13:01:02 2025 GMT
Subject: CN=0b02cff1a3c96868abe1e626445a2464a92282ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:26:0a:f4:87:23:0d:3e:bd:b9:3c:ae:d0:
bd:35:b8:5d:25:85:1d:cb:07:8a:47:9d:20:06:9c:
68:f9:34:50:d1:7b:0f:96:54:be:f9:fa:02:a9:51:
d4:e9:c7:31:65:fa:b5:65:99:f9:8c:88:28:49:26:
bc:43:7f:81:48:a7:4d:c4:9d:d6:53:39:b3:4c:92:
51:3d:3b:dd:16:f1:77:b4:86:1e:a3:73:18:b2:b5:
1a:13:f2:46:11:5c:bb:83:69:0c:c5:57:2d:36:43:
f4:d6:11:4d:50:86:48:d3:17:09:3e:55:fd:1d:a1:
69:c7:b9:a8:8b:8a:b2:09:f7:b8:eb:2e:c3:5d:cf:
23:85:13:d0:f8:38:22:27:54:ba:f8:3e:9b:c6:99:
37:82:8d:52:1a:0b:a9:02:36:48:8c:75:7b:6b:f5:
b4:b5:52:cd:54:f1:43:60:d2:6c:2d:68:bb:32:e1:
44:8a:7c:e3:82:76:74:68:6b:5f:bc:a7:21:20:52:
31:23:37:c0:e7:9e:7e:7a:a0:de:95:ad:4b:29:55:
d9:68:53:ee:f1:90:7e:50:4e:36:aa:b8:b1:7b:62:
05:6a:5f:7b:31:fc:85:f4:40:42:63:cc:33:25:71:
76:ca:4d:ea:58:33:e3:5d:75:20:3b:f6:30:a7:a2:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:02:CF:F1:A3:C9:68:68:AB:E1:E6:26:44:5A:24:64:A9:22:82:AB
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f9:d2:82:1a:73:96:b2:46:b2:34:50:24:13:f2:cc:f1:79:
75:57:bb:08:ad:77:85:be:b1:54:dd:33:f7:74:02:dd:8e:a5:
4b:16:f4:bd:9b:5d:b3:41:8a:f3:0b:4d:26:b9:ea:31:0e:cc:
c9:b8:be:a5:da:3d:ef:a0:5f:88:75:b0:4c:7d:c1:b7:cc:11:
89:71:b5:52:3f:99:e9:d6:83:8e:1a:e5:02:5e:49:c4:aa:96:
e3:32:8d:90:af:2a:53:5e:57:04:97:78:23:d5:87:2b:1b:4f:
a4:cc:01:c6:e7:61:b1:d7:60:df:9c:11:65:39:1a:65:ee:88:
75:8a:9a:3f:2a:96:ac:76:31:07:fe:6a:28:67:37:88:e1:5a:
93:82:69:49:4e:97:e4:33:14:40:90:11:9d:19:fb:a6:70:ca:
76:b7:dd:a1:5a:3b:66:3e:8f:55:22:0e:b1:bd:31:86:22:1d:
77:a1:20:fb:30:03:a3:d8:5c:d5:b3:d2:e0:e4:c9:4b:ad:51:
24:da:a1:ec:0d:e7:dd:de:58:4a:c4:25:e4:25:d5:51:d3:ee:
12:07:a8:5e:f5:59:22:7c:cd:28:42:27:46:62:06:62:c1:44:
12:6a:be:ca:97:50:22:9d:46:44:ef:fb:ed:3a:fa:72:30:45:
60:fa:95:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:10 2025 by rpki-client