Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier: GnjkMShxM0zTn4npxy6/tmEbQozyZHHKpXvydb/8BTk=
Subject key identifier: D1:41:35:04:B4:91:BA:56:8C:4F:2D:6A:A2:D1:31:7D:28:D7:A7:EF
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer: /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial: 019A7226311CCD468F49528F74AB931DCA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number: 0334
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: O+eY7gc80qnOulXgnjVHikMfoW4f8JIZPVR32tYU/eE=)
2: s5YaS3VA0T52xJ5l5rFauUbFgwE.roa (hash: JV1GN+4WYVJ18P7z6Hwge46vI+gFA8OZrJth5Bdr90Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:31:1c:cd:46:8f:49:52:8f:74:ab:93:1d:ca:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=d1413504b491ba568c4f2d6aa2d1317d28d7a7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:c6:6d:8e:66:0a:db:23:f4:20:81:e3:94:
2c:b0:fc:7b:61:79:83:08:97:e0:70:0e:c2:16:1a:
8f:6c:5b:c3:e7:46:d1:30:39:11:7f:94:bc:f0:d9:
58:66:25:09:2a:08:a9:30:15:77:bc:be:bf:7a:ca:
4f:63:a3:14:3a:c6:0d:ea:3f:62:8b:17:20:f8:f6:
6d:8f:52:20:4e:c2:9b:4c:db:44:5a:c4:fc:d2:0c:
62:48:f4:4e:0f:45:07:aa:9e:06:4d:09:ff:a4:49:
4b:b4:e0:e4:89:55:6d:c0:92:41:1c:04:a3:2d:93:
b0:5c:57:14:04:0e:38:47:51:1f:e0:b9:92:49:51:
c6:09:15:f9:24:74:91:3a:d7:48:e9:18:ad:10:25:
55:48:cd:f5:6a:5d:02:be:f8:fe:49:4a:61:50:2f:
32:82:aa:a3:0d:da:5b:34:1a:7e:40:c9:8e:70:68:
98:8b:23:97:7b:c1:7a:70:f9:d6:ef:b0:e1:06:93:
39:58:54:1c:ba:dd:30:60:b0:a8:e6:27:76:8f:21:
1f:48:a0:b4:42:18:d2:84:0e:08:3c:57:eb:f6:0c:
27:ad:67:a7:71:66:63:7c:73:cf:ab:0a:dd:ad:9b:
71:34:15:b7:b4:a2:09:ea:b1:4d:a0:f1:6e:aa:de:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:41:35:04:B4:91:BA:56:8C:4F:2D:6A:A2:D1:31:7D:28:D7:A7:EF
X509v3 Authority Key Identifier:
keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:de:91:0b:7b:02:bd:4a:ad:45:9f:6a:80:9c:92:87:03:a6:
c3:de:c4:13:e3:63:b7:93:d5:98:cc:34:e2:95:16:63:fb:46:
04:47:b6:3f:ef:fc:3a:2e:e2:ef:23:7b:29:50:4b:18:31:99:
96:07:0a:cc:0b:a3:fa:3c:f4:1a:79:d9:e6:c1:15:94:77:68:
01:39:63:69:5a:cf:f4:ea:a7:8e:81:eb:b4:d0:9c:3c:3a:80:
5e:0a:9c:c4:d7:54:c1:70:80:e6:6a:c0:f8:d2:9f:3c:b8:f7:
cc:95:4e:e6:79:f8:d0:f6:e9:aa:00:33:44:d1:52:bf:ab:18:
37:3b:b1:a0:e9:8e:cb:b0:94:da:d0:ca:53:74:70:1f:bd:3e:
09:67:47:91:99:c5:d8:20:88:4b:d7:cd:19:e8:9e:19:aa:44:
e0:4f:15:cc:b3:fc:b0:d2:36:78:89:ae:11:dd:e0:a7:12:5d:
61:84:74:23:b1:61:bb:ab:d6:56:3e:55:af:e9:5f:98:b1:d2:
5b:0f:5f:33:c3:f4:94:d7:be:d9:8e:bb:29:39:8d:44:c3:18:
2a:01:90:95:42:6c:fc:be:8e:ca:01:c7:83:e1:51:13:54:e9:
64:48:c5:7b:f5:05:0e:cf:fe:33:a8:56:cf:fe:42:b1:93:ac:
f0:50:0c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:57 2025 by rpki-client