Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier: CZrhU5I2N5PRUGxyct3USmrH6KYQ00FyMyIe04L4vfI=
Subject key identifier: A8:78:43:AD:4A:E2:58:5E:A4:4E:74:BE:83:7D:91:BB:D1:08:2C:52
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer: /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial: 019A72262904DB32F4F7DD9B5FDD36F86033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number: 09D5
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: H8c2kAy8GrVZJ6mmxZx5I1JAeS7TT/VnEtS+IEI5e4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:29:04:db:32:f4:f7:dd:9b:5f:dd:36:f8:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=a87843ad4ae2585ea44e74be837d91bbd1082c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:7d:6f:6c:df:2a:ce:15:f4:7a:de:f8:7e:
16:8d:5a:9e:af:14:2c:08:7f:3f:c3:f3:b6:44:58:
fb:3a:76:7a:8a:bb:ae:e0:cc:01:f6:de:22:c7:5d:
5a:45:ce:b5:5d:79:02:7c:54:a1:a4:bb:1b:fd:60:
e3:c2:bd:74:2f:a6:49:b8:e7:ef:2e:fa:be:bd:9a:
56:3f:13:9e:f8:14:83:f0:15:53:ce:fe:92:52:e2:
97:2f:38:78:a0:ea:1f:a4:d0:a2:50:de:38:28:c7:
e2:16:68:08:35:ed:21:e3:ea:ab:3d:1d:9d:d7:48:
6c:18:04:7d:8e:40:b1:10:48:a4:a8:7f:14:db:d2:
22:59:9d:69:b8:58:8c:ea:00:2a:39:32:01:d4:a9:
06:3f:9d:72:d4:75:dd:04:af:18:8a:5f:39:46:4a:
ea:b6:ed:df:8a:9c:43:e0:c2:e6:75:a4:3e:2a:72:
d6:5f:8a:30:d5:cd:71:32:47:e1:aa:03:4e:a4:5c:
a8:29:c3:65:df:58:b5:6a:59:05:9b:73:19:ab:1e:
8d:89:b6:89:b3:9d:50:67:02:a5:7c:e7:5c:fe:69:
84:47:74:5b:c4:8f:ef:d6:ac:dc:7b:f1:57:25:0c:
31:99:86:a2:82:dd:15:32:53:d5:46:5d:f0:2d:46:
01:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:43:AD:4A:E2:58:5E:A4:4E:74:BE:83:7D:91:BB:D1:08:2C:52
X509v3 Authority Key Identifier:
keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d9:29:db:f0:97:c8:30:eb:8d:11:88:f0:0d:96:8a:72:71:
4c:4f:44:61:c1:2c:3c:c1:4e:f4:7b:18:78:46:5e:26:89:25:
71:e4:d3:f5:6e:55:7b:66:f7:dc:13:6c:a2:46:d1:d8:57:d2:
62:fd:bb:67:fb:01:68:7a:ef:db:2b:f8:7e:94:43:88:6a:80:
68:86:b9:2b:ea:a9:26:8f:56:90:6e:e3:fa:1f:d3:bc:6d:f7:
a4:e8:f9:d9:7d:51:45:8d:4b:93:e6:ad:84:c9:ff:a7:e5:7e:
7d:41:fd:6f:07:47:52:2c:ef:90:08:fa:17:0b:35:4e:80:19:
ff:16:d3:10:05:29:f2:a3:27:a6:61:6b:59:46:6c:85:66:34:
50:19:79:26:eb:8e:34:df:7b:0a:19:b0:04:28:c9:8a:a9:35:
f1:6e:46:2a:0d:93:34:e8:ad:9e:6e:11:7a:7f:61:95:5c:1e:
fd:06:71:14:33:49:13:09:cc:25:e4:17:78:de:4c:c7:d0:c3:
c1:f8:8f:3b:5a:36:35:ca:bf:8c:37:44:16:8c:01:53:c7:08:
36:14:2a:da:f6:15:3b:8a:0f:c7:aa:cd:59:c2:34:96:1f:69:
d3:e9:bb:f2:ff:ba:97:36:05:f6:bf:68:56:52:24:ee:8c:21:
c9:d1:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:48 2025 by rpki-client