Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: /metbSm5HUV1vWbSGi58WOxh8XZWCohnLXOmGvU2OcE=
Subject key identifier: AE:7C:64:BC:2B:17:85:B2:00:75:4E:67:47:AE:87:98:EF:9A:FD:06
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019A5150C05395440EEBEA7B4206271BEF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 0799
Signing time: Wed 05 Nov 2025 00:00:37 +0000
Manifest this update: Wed 05 Nov 2025 00:00:37 +0000
Manifest next update: Thu 06 Nov 2025 00:00:37 +0000
Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: DUSSrQbOXX03JF/BCaAVag9AereWwRL40knqTkAh2oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c0:53:95:44:0e:eb:ea:7b:42:06:27:1b:ef:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Nov 5 00:00:37 2025 GMT
Not After : Nov 6 00:00:37 2025 GMT
Subject: CN=ae7c64bc2b1785b200754e6747ae8798ef9afd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:1a:f3:88:42:79:00:c9:01:78:92:08:55:
f0:27:43:3b:63:eb:c3:13:59:3f:cf:49:82:bf:17:
39:bf:1b:9b:26:68:f2:f9:19:1c:48:35:22:22:00:
70:dc:a2:76:f7:8f:c7:9f:1e:64:61:c5:5a:2d:03:
f2:f9:6b:20:76:f2:5f:da:36:70:22:e2:32:b2:ce:
77:95:49:d7:aa:a5:2d:bd:62:da:ee:90:84:ec:ad:
fc:2f:80:5a:39:d1:2f:35:eb:d1:5e:ed:91:35:60:
61:a3:59:ef:58:72:09:a1:67:95:d4:86:be:db:ca:
52:fc:a2:f1:81:df:30:84:90:a9:8c:54:3f:0c:93:
00:c6:cb:e2:0e:1f:d7:61:ea:02:a6:0c:87:69:46:
c6:38:f9:e4:cd:81:e0:9a:b3:de:3b:0e:2f:b6:7f:
8d:6e:05:45:ca:ba:6d:94:24:0c:72:ca:75:33:ea:
4e:d3:93:f7:8a:20:36:c4:e3:8b:b6:02:31:28:4c:
b7:65:3b:dc:5a:b1:d9:07:85:71:b2:9e:cd:35:af:
ff:02:dd:1d:43:f1:56:6d:d8:c3:cf:17:b0:93:75:
15:ab:59:b2:55:a6:4a:71:c4:75:b2:fd:f4:60:ca:
6b:99:c9:a4:03:dd:43:a1:27:57:df:55:0c:ac:fc:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:64:BC:2B:17:85:B2:00:75:4E:67:47:AE:87:98:EF:9A:FD:06
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b0:09:a8:a2:e1:e3:8d:a6:e2:f6:7d:55:67:8d:18:37:b1:
d8:7c:32:78:b5:17:06:22:0e:e5:4a:2d:23:f5:12:c9:96:32:
ca:d0:f0:ad:d8:b7:af:c7:31:f6:fa:2b:97:a4:d0:54:dd:78:
c1:6d:78:af:14:0a:9d:a6:40:bb:5d:98:fc:ad:51:d9:86:9c:
43:10:e8:df:4e:8f:0d:e1:bf:e0:4d:49:46:f0:39:9e:df:35:
9b:c1:d6:5f:87:ed:34:12:3c:d3:e6:64:bd:cb:16:60:56:79:
d5:93:17:ce:37:e9:46:24:6a:de:3e:1a:01:3b:ff:af:1d:51:
21:e6:12:9c:77:cb:33:4f:a3:0d:eb:9e:a4:33:58:44:fe:fc:
da:c8:cb:26:f7:79:4b:c5:2d:9d:ef:65:f2:35:41:ea:ab:86:
b6:07:d5:a2:46:25:e4:99:ca:54:b5:fb:8b:6e:af:4d:80:35:
77:81:89:9d:a2:ff:d0:c2:b2:f4:6e:b5:75:3f:9d:c2:f3:ca:
fe:be:9a:c1:f2:88:c5:0d:53:6e:0f:19:41:78:44:39:58:8c:
1f:4d:33:58:be:22:9d:87:1f:37:17:92:55:5f:af:3d:b9:ce:
ad:c3:79:7c:e4:fb:90:90:50:f3:53:e6:16:93:6b:dd:dd:50:
ae:d0:35:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:47 2025 by rpki-client