Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: EtMx+JjtkI99ZuWHiib+Y4zorOwExHhKhaTGxrI805M=
Subject key identifier: 13:44:F6:72:75:A8:84:3C:2E:1A:80:27:7E:BA:56:5E:DC:2C:F5:CB
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019A4F621498F1879C13AC6F6672DBC04A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 0798
Signing time: Tue 04 Nov 2025 15:00:18 +0000
Manifest this update: Tue 04 Nov 2025 15:00:18 +0000
Manifest next update: Wed 05 Nov 2025 15:00:18 +0000
Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: +96y+tznbX/+dDh2uMLIPgtKAE4SnqOI2Okg3lBceQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:14:98:f1:87:9c:13:ac:6f:66:72:db:c0:4a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Nov 4 15:00:18 2025 GMT
Not After : Nov 5 15:00:18 2025 GMT
Subject: CN=1344f67275a8843c2e1a80277eba565edc2cf5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:d4:22:69:d2:0c:dc:f5:59:79:15:68:a3:
47:4c:31:80:e5:8d:11:f2:60:3d:80:f5:ca:7b:29:
82:ca:b1:bb:41:cf:98:cf:a0:58:5a:26:d3:29:3f:
31:06:5e:c7:fa:0c:c6:4f:c3:76:d2:b0:f4:bb:0c:
48:1b:b5:8d:90:06:64:9b:43:88:94:b4:18:a4:9d:
2d:2f:b1:07:b7:6a:a9:da:0a:54:81:d1:9e:41:9d:
39:4c:63:eb:d5:f7:c1:14:8c:26:cf:5d:18:ce:32:
4f:79:df:85:3a:2f:6a:15:5f:c8:94:58:39:7f:ed:
79:0e:f5:e8:a6:0c:f6:91:d4:11:a2:45:e5:ed:7e:
98:25:a2:ef:e8:4e:28:dc:0e:c6:00:3d:a9:53:eb:
78:2a:dd:15:4b:51:6b:58:ec:fc:e4:e9:ca:5b:7c:
7c:ef:f3:85:18:0d:0a:17:9d:0f:79:f5:da:d2:9c:
e2:82:6b:43:76:96:a6:fc:a6:30:0c:d6:1c:94:99:
b9:03:5d:fc:da:69:c0:c6:f6:7e:da:f0:24:c0:52:
39:ff:87:65:59:94:49:95:bb:a0:fb:81:00:65:a8:
31:be:57:5e:5f:a2:77:3a:30:8e:4e:d6:30:63:fe:
6a:29:1b:55:cc:ad:d5:1b:d1:87:73:f7:a2:28:95:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:F6:72:75:A8:84:3C:2E:1A:80:27:7E:BA:56:5E:DC:2C:F5:CB
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cb:27:4a:0c:ac:08:fb:69:da:d5:c2:3e:97:77:71:2b:2d:
2b:38:6f:e0:67:13:8d:37:18:7e:2b:0f:f7:5e:a3:a9:5d:b9:
e8:05:83:03:7a:5f:aa:09:5a:77:0d:1c:38:2f:8e:70:01:5e:
d1:40:fa:24:b4:9b:ce:83:24:26:61:1b:89:2d:58:97:b0:2d:
6d:6a:06:db:f0:de:07:38:7f:83:1a:b5:fe:cc:4b:81:d9:c3:
df:d2:f8:cc:e2:d6:71:a9:d9:41:fc:90:b7:78:6a:4a:08:61:
8f:9e:fe:91:41:e0:55:fa:b0:29:2e:0e:8e:be:42:8b:1a:ba:
0a:8f:1a:a1:4a:2d:14:ed:9f:ce:8c:1d:32:9d:5e:65:52:02:
43:a0:d9:c8:6d:fd:40:60:b3:90:12:44:3c:cb:26:92:0c:78:
7b:94:2e:13:6e:c8:05:29:73:e6:6a:d8:ed:96:2c:e2:ca:c9:
f2:76:5a:99:f1:1d:79:6c:72:69:c9:96:c0:48:18:62:0d:44:
da:b7:c4:56:03:fa:51:ed:70:61:87:18:04:40:6e:f5:31:7f:
b2:08:87:b7:80:66:c1:f3:40:fd:c6:fe:c8:e0:93:cf:06:ab:
7f:71:05:88:7a:2a:40:fe:65:7d:d9:2a:0a:8f:8b:68:d5:b1:
7a:a4:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:35:37 2025 by rpki-client