Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File: 5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier: qGZFfbU3FpCW0D4AGdlyQl8+Qk1kQxxNRITzZ5x9mfI=
Subject key identifier: 58:1D:3A:EF:AF:9B:81:89:4C:A7:19:37:4E:15:2A:67:D4:62:9B:41
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer: /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial: 019A71B83975E3426FAC28E7B4CD1A643947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number: 0A3C
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: 6LoymgYniFyV2/Ck/otbn9QyKSBDBhPDkby8WS3sP+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:39:75:e3:42:6f:ac:28:e7:b4:cd:1a:64:39:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=581d3aefaf9b81894ca719374e152a67d4629b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:b4:b8:6b:10:84:c4:8d:fe:44:b3:6f:e3:
b8:1f:d6:d8:99:d8:6b:fa:71:ee:72:85:23:4a:95:
49:b7:a5:d0:63:08:ad:17:18:e9:18:de:fa:38:31:
9a:02:01:57:cb:aa:a1:e0:35:28:e1:b6:3c:84:20:
bf:06:ab:40:dc:58:cf:dc:db:da:30:30:78:9a:e2:
e9:fb:99:9b:9c:1d:9a:72:72:bc:29:34:23:ec:ca:
b9:2c:41:74:8a:24:4b:93:19:39:51:1b:11:15:2f:
7b:3d:02:d3:81:a6:48:87:ad:06:69:f9:95:85:7a:
6f:08:2d:a9:5a:9a:fd:18:73:87:1d:a4:a7:5f:d2:
ed:46:6c:26:7c:96:57:1b:f5:d4:40:d1:9e:61:1d:
0b:b2:8b:af:4d:6c:b1:48:00:f5:ca:26:98:29:e3:
7d:d7:62:4b:d7:43:2c:41:9a:c3:b4:a1:fa:f3:8c:
b9:94:b9:c7:63:51:32:e9:b9:a2:94:37:5d:d8:66:
43:bf:fa:53:a6:dc:16:e7:73:e9:15:95:63:bc:5a:
a7:bd:cd:b9:cb:b4:89:8a:df:dc:2d:91:ac:8d:1f:
84:22:3f:d6:b9:1f:5b:26:ba:d3:4c:59:1d:ab:42:
eb:b7:ac:eb:ea:59:30:00:a0:2c:8d:13:85:06:21:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1D:3A:EF:AF:9B:81:89:4C:A7:19:37:4E:15:2A:67:D4:62:9B:41
X509v3 Authority Key Identifier:
keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7b:fc:ec:7b:7a:96:d2:c3:e0:b4:c2:cc:08:a5:1e:40:51:
6b:6d:6c:ad:9f:f4:5f:af:49:cc:9c:4b:b2:ab:70:20:cb:93:
82:c1:08:cd:5a:7a:e7:e8:37:5c:1f:f9:24:66:60:ac:2d:4c:
65:0c:79:58:34:9a:eb:a9:50:ef:00:07:41:07:e0:4a:dc:41:
c0:7b:03:42:ed:25:ca:f9:d0:e6:d2:30:89:d6:ba:35:a5:16:
8e:86:07:65:8e:9c:cb:43:69:c2:c1:51:f5:54:ce:d4:d0:13:
b8:c8:d8:53:57:8a:bf:86:8d:44:fc:dc:56:76:3f:97:b7:6d:
6f:bd:4a:04:d0:f1:c1:2e:3d:52:94:ee:1a:fc:4b:c6:6f:07:
60:ad:ba:8d:b7:2c:e5:10:4f:6d:f7:05:dd:78:4a:d9:4f:58:
dd:52:66:47:e8:a9:03:d8:78:38:da:bc:b8:e0:53:61:b2:e6:
fa:1a:4f:90:78:00:f1:51:17:ac:0c:e1:11:e0:64:2a:26:81:
3e:2a:52:9f:2f:54:54:e2:e2:92:07:f7:d7:da:fe:ba:29:67:
50:8f:1b:83:e8:e9:77:59:36:0c:45:4d:a5:69:55:7c:56:d0:
4d:b6:06:56:22:17:6b:9d:ce:63:98:a7:46:be:87:92:aa:c7:
8d:2a:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:06 2025 by rpki-client