Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File: m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier: 1j58GD80vO08zioQD8t7KXuGtJVLhlSx8n/PcxMXA98=
Subject key identifier: 0A:6B:91:03:1B:C6:AF:0B:A8:2F:0D:52:E6:16:EA:4A:7F:09:87:B1
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer: /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial: 019A72259867816E23836579C2F27E317236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: Y4FGbN31gaz72Z2KoDvz08aDwt6puqsXdRReenode50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:98:67:81:6e:23:83:65:79:c2:f2:7e:31:72:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=0a6b91031bc6af0ba82f0d52e616ea4a7f0987b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:dd:e8:89:31:c0:d9:7c:c3:a8:ac:a4:3c:
eb:5e:67:1d:4d:1d:5d:b1:c8:f6:b5:cf:81:91:67:
3e:6f:f1:f6:d9:59:a5:cd:fa:bd:1b:67:b7:6e:c5:
5c:35:ea:64:4c:21:19:20:24:7b:9e:8d:49:0f:26:
59:56:84:cd:33:d6:33:12:76:45:59:aa:4a:ac:35:
77:65:29:9f:77:12:75:86:fd:21:08:fc:bf:32:25:
7b:97:03:d9:fa:25:49:b7:ba:14:a9:96:d6:0c:14:
87:fa:10:ee:1b:67:bc:32:47:c1:f9:61:3f:fa:24:
8e:a7:d5:f1:4a:46:c3:ce:58:b2:01:ad:06:04:31:
47:ef:58:1d:49:b9:2e:70:48:38:f0:5e:1d:45:62:
76:b3:06:f8:7b:1e:9b:f6:bd:cc:85:ef:cc:e0:cc:
74:2d:f9:a1:af:1a:a3:f3:d1:24:a6:7b:a9:2f:b5:
af:22:d9:17:df:64:01:5b:e7:99:93:79:75:c7:ea:
ce:af:e1:62:b7:f2:36:03:8c:3a:c0:96:6f:db:35:
12:db:6a:f2:e5:9d:51:40:2b:2d:58:05:b5:30:20:
9f:38:3f:a6:5f:2e:88:2e:e0:bd:79:70:b2:dc:63:
a9:e1:f8:be:6d:f3:07:67:22:1e:12:e0:07:cf:5c:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:91:03:1B:C6:AF:0B:A8:2F:0D:52:E6:16:EA:4A:7F:09:87:B1
X509v3 Authority Key Identifier:
keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1b:a6:71:7d:60:21:bd:95:bd:1c:f3:6b:57:f8:0c:9a:00:
12:9d:e7:d1:d8:63:9e:5a:f6:5a:33:4f:1a:ed:50:86:77:a9:
be:dc:7a:84:93:46:76:ca:0f:02:00:21:f1:67:70:ab:77:45:
b6:11:9f:4a:25:95:93:0e:6f:37:75:91:d1:79:09:65:72:07:
a1:56:09:7e:a9:6e:f5:39:db:89:ed:75:ac:78:70:e5:67:f6:
c4:5f:af:b2:67:87:7d:c0:e0:a7:3d:63:27:9a:32:95:a4:2d:
77:3e:2f:ab:66:2a:aa:6f:b3:71:20:fc:76:24:69:c3:86:4c:
d2:df:f7:dd:50:a4:e8:de:4f:d6:36:cd:80:2d:c9:0c:e4:35:
a2:b8:42:c8:98:02:b2:f6:4e:fe:4a:14:d8:45:f1:d0:55:78:
3a:f3:c0:2d:c5:2b:cc:6d:3a:a3:e3:39:f6:63:a9:81:b1:cc:
90:08:d4:05:3c:86:98:3c:e1:d0:d6:b7:53:25:b1:ff:9b:99:
51:c7:7f:ee:ba:3b:d5:0a:32:5d:6d:ec:ef:13:22:43:06:56:
44:0e:e3:cb:0f:2f:fa:e4:f7:4b:36:dc:65:9d:52:4c:8d:6f:
f5:ab:e1:db:e5:05:ca:fd:3c:1b:c2:fc:36:19:e1:7d:5a:b9:
cb:e8:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:48 2025 by rpki-client