Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier: +8XOItU2GUSzV8/QEVSLnxsW2VShJJJn9u1ONO/1qTA=
Subject key identifier: 2B:31:5B:B3:99:EF:59:D5:30:EB:6F:E9:88:ED:0C:B6:01:D7:CD:69
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer: /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial: 019A72CA1A53A53EB21E53DACE51C4DFA326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number: 0811
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: iLxR0SmflStGWv60eMnQBSNZHtCZ/z0Bhjxdjg91M24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1a:53:a5:3e:b2:1e:53:da:ce:51:c4:df:a3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=2b315bb399ef59d530eb6fe988ed0cb601d7cd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:7a:08:6e:e4:c9:58:0e:51:31:ad:34:c8:
bb:fa:dd:77:c2:0d:39:cc:6c:b1:a2:e9:92:0c:01:
fa:01:03:64:24:b2:7c:05:71:40:01:df:7c:9e:c8:
b9:11:39:33:c1:f1:a9:6e:1d:5c:7c:73:af:2c:b2:
79:5e:11:81:df:7c:c3:16:bc:4d:3f:66:0c:93:b7:
fc:2b:44:df:2a:43:03:66:fc:1b:4f:82:b6:5f:85:
36:ee:95:78:84:4f:4d:85:2a:25:0a:db:f2:6e:5e:
4f:fe:bb:ef:6d:2f:dc:42:a1:f0:ce:0d:14:b2:95:
ff:28:e3:5c:83:25:42:76:7d:0a:26:bc:c3:6b:be:
ad:9c:6a:32:65:ee:2b:98:93:33:f6:62:00:cb:5a:
52:55:6b:b9:ba:a0:75:38:6b:ae:27:4e:20:78:b9:
47:10:92:33:7f:74:8a:29:99:18:9e:4b:10:27:60:
f0:d7:b1:90:34:58:ba:eb:6f:6d:ca:97:48:b3:5f:
41:ac:b9:11:a7:73:bb:ee:2a:67:26:96:8c:09:31:
a7:1e:8c:c6:2e:72:fc:b2:76:4a:8e:7d:e4:66:55:
b9:1e:5e:d4:81:43:03:85:e6:22:08:fa:7f:38:b3:
0d:80:db:ce:62:09:8b:f2:2a:cd:ae:01:b2:61:94:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:5B:B3:99:EF:59:D5:30:EB:6F:E9:88:ED:0C:B6:01:D7:CD:69
X509v3 Authority Key Identifier:
keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4c:ca:cb:09:9b:bf:6f:cb:6b:cf:fb:28:3f:89:af:bf:95:
c9:70:70:0f:fc:e2:fc:57:13:bb:e6:27:53:03:7b:b3:0c:6c:
95:bd:7b:d7:3d:da:bb:99:f9:ad:c4:c6:46:d9:d0:38:98:58:
39:cc:13:d8:07:20:dc:de:e3:04:ac:e8:77:6c:b6:ee:05:b4:
49:e6:94:3f:97:bb:3e:80:58:82:e6:c2:cc:1a:28:96:3b:37:
73:b5:f3:1d:45:5d:7c:15:59:93:29:9b:42:92:9b:5e:09:9b:
3c:49:b0:4b:57:b9:60:21:18:86:d0:c4:6e:1a:a9:a8:f0:28:
eb:c7:bc:4d:c8:30:7f:db:6c:40:fd:c4:4a:3c:43:47:95:c9:
cc:41:68:3a:3f:44:4e:3a:19:3e:b3:f9:fa:62:86:0f:24:78:
1c:13:95:e8:0d:54:75:79:f2:61:25:6b:3b:15:e0:79:13:c7:
cc:7b:8b:8c:3b:2a:86:c9:f2:4d:a3:b5:9c:c3:1f:ae:37:a9:
44:2c:d4:cf:d9:87:bb:29:43:78:d6:8e:e6:77:9b:22:be:68:
a5:cf:42:b3:55:00:56:93:e9:c3:07:5f:7b:c5:84:31:ce:83:
b8:16:f0:dc:1a:80:fb:f1:97:dd:23:78:3d:e0:72:72:3d:38:
16:ba:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:15 2025 by rpki-client