Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
File: i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json)
Hash identifier: 02c5Tb0bEexu+wqw0u3WCr29nrHgRVHu0kr4ZyldrAE=
Subject key identifier: 84:D3:34:34:2C:CB:C6:B1:D9:DC:CC:59:76:37:A7:DA:26:F1:99:BA
Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
Certificate issuer: /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Certificate serial: 019A4EF599C35DD195227696B7B182DA323C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
Manifest number: 05AA
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: c5/ujKeencKXeV+VV/QRjQhXE+1iU8ZHYHQS5CEAHfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:99:c3:5d:d1:95:22:76:96:b7:b1:82:da:32:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=84d334342ccbc6b1d9dccc597637a7da26f199ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ee:4a:3a:92:a7:ff:03:21:e7:7f:f6:03:19:
48:fc:99:75:56:8a:ad:b3:5e:cb:99:6a:57:09:f7:
21:a8:01:e3:fe:b8:92:b9:00:89:65:5a:dd:dc:7c:
e1:99:e9:1f:76:30:5d:96:5c:6b:30:21:52:ae:53:
04:c0:9b:4f:82:a5:05:29:c1:5e:57:23:38:b5:71:
c5:0b:0c:db:d2:8e:be:ce:0b:8f:bf:e6:11:2f:ab:
fd:9d:04:69:61:b7:97:83:3a:30:c7:af:22:38:0d:
be:19:f4:f1:7c:01:f0:a8:56:c3:5f:38:7a:c6:b4:
e7:0e:f1:48:14:c8:c5:b3:82:40:0c:c4:db:94:a7:
b6:d9:48:74:bd:96:c3:9f:c1:e5:bf:7d:89:c4:a0:
06:97:3f:e0:ee:12:19:68:a3:ec:c6:35:9a:4f:19:
2e:a4:bf:19:29:64:9e:2b:cc:1d:59:26:43:41:c0:
39:6c:4a:7a:1e:4b:85:96:e5:f7:77:8a:51:39:2c:
e3:ff:8e:37:fd:1c:a3:f3:17:e7:4d:47:a0:86:b7:
f6:85:c7:40:a9:e4:c5:72:b8:fe:29:ff:73:ca:e9:
28:9a:5c:b7:c5:81:8b:2e:ce:55:b7:dd:4c:50:d4:
1e:07:2d:b5:a0:56:63:65:d5:3d:c3:b4:05:65:c0:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D3:34:34:2C:CB:C6:B1:D9:DC:CC:59:76:37:A7:DA:26:F1:99:BA
X509v3 Authority Key Identifier:
keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:73:7a:83:2d:4d:1f:f1:d6:87:c2:7f:66:61:3e:1e:d5:cc:
e1:25:97:c7:78:da:1a:ad:f7:dc:5a:90:d8:77:32:e8:81:c4:
78:27:23:eb:70:f0:99:0f:9a:c8:35:40:7b:0b:47:ce:43:b6:
5d:b7:b8:c9:2a:a6:49:4c:20:fd:73:1f:be:b7:57:a8:f3:f4:
e8:db:86:c7:71:91:73:ea:9c:11:eb:d1:43:7d:42:94:fa:69:
87:8d:54:6c:cb:5a:c1:48:69:ef:6d:9e:1a:c8:4d:6b:b2:93:
14:f0:48:46:03:4e:78:08:2c:15:fe:51:1f:21:6a:10:56:ce:
61:b7:85:77:50:33:9f:84:0b:16:68:0c:13:b9:03:d6:df:2e:
2d:d5:8e:23:75:08:d9:54:e6:07:da:f1:4e:17:86:b8:43:be:
dd:d0:5e:a2:47:e7:e6:d7:ef:70:69:0d:93:44:cc:d5:10:f0:
c5:ae:46:5b:c0:ea:12:ae:75:c2:6d:7b:1c:25:63:65:d8:0f:
af:5a:ff:ac:2b:53:1b:da:40:f5:f4:86:8d:91:c7:0c:0e:a0:
74:38:da:7f:95:10:8a:f5:00:a2:77:e0:80:a4:9b:25:f8:03:
3c:ca:e8:db:96:36:27:79:b6:20:8c:bd:de:ff:36:1c:a3:49:
dd:1c:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:57 2025 by rpki-client