Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier: YDBo3tunqcyN48wYRH+IYj4YExB2p/cgwe0mK2ZXPjM=
Subject key identifier: 50:CB:13:C4:3F:83:59:FC:72:86:66:72:82:24:93:46:A4:88:FF:20
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 019A4E4FBFC566384C8DF218EBEB30A21A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number: 11ED
Signing time: Tue 04 Nov 2025 10:00:40 +0000
Manifest this update: Tue 04 Nov 2025 10:00:40 +0000
Manifest next update: Wed 05 Nov 2025 10:00:40 +0000
Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: Z13+qbAMJSj6aqmNzMqLNlkf5pUxjYQMuCMYRJ/0fmA=)
2: 5RNQOoYI7rp8d4nASoBcHUOUpY8.roa (hash: FG1C0t8LdLpHD2f41qfi65AEKFEoAI1fPmg3pwTrSAI=)
3: 9sR2L5tWHl9nYIOa3aPDj2epTyM.roa (hash: DVpf87jmOmV1usbZpIj3EdX+MCp0oX2EtW5xng4U88Q=)
4: eQWgmPYrRyxmbW7jic8MtUc1Zpo.roa (hash: QgtMWXIUrz6jvt1nPBxlt0MfdGFiSY2UtDQz0hujdYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bf:c5:66:38:4c:8d:f2:18:eb:eb:30:a2:1a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: Nov 4 10:00:40 2025 GMT
Not After : Nov 5 10:00:40 2025 GMT
Subject: CN=50cb13c43f8359fc7286667282249346a488ff20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:ae:75:b1:b8:02:75:f8:80:0a:9f:08:50:
fa:6b:37:64:88:14:56:88:27:5b:2e:8b:42:ba:40:
47:bd:ef:eb:32:12:2e:e5:80:e7:44:97:1d:a9:33:
ea:c4:02:6b:c7:26:4d:47:8b:9d:f9:92:ff:f4:42:
11:4e:9e:97:b4:8c:fb:d3:60:01:e0:42:79:e4:ce:
a2:f0:a9:3f:a3:12:f2:7b:70:52:24:f6:ee:77:47:
d3:36:ba:fc:27:2f:11:1e:2c:10:c4:bd:a1:5b:f6:
bd:b6:68:18:eb:34:67:bf:88:22:ab:31:f0:37:68:
6d:9b:24:c6:ce:c5:60:93:c8:13:1b:bf:bd:b7:3b:
78:36:2d:28:cc:4d:60:50:bf:43:91:7b:c9:21:f4:
59:61:9d:a9:20:df:6b:1d:43:a1:68:5e:f7:5f:12:
78:88:59:2f:85:95:db:d0:60:55:f9:d7:66:9c:57:
c0:35:1c:9f:6d:29:57:1d:d4:cb:d1:69:32:69:38:
c7:bc:93:bd:2c:0a:2f:b4:89:cf:24:38:be:ab:f2:
5a:df:d1:43:b2:43:7e:0b:0b:2a:d9:eb:eb:e2:7b:
76:82:df:c3:1e:c4:6d:17:9f:a7:a5:3a:24:41:7f:
1b:6f:b3:e8:3f:bf:23:09:28:a4:3b:b8:81:db:32:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CB:13:C4:3F:83:59:FC:72:86:66:72:82:24:93:46:A4:88:FF:20
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:29:de:03:4a:bd:ae:aa:2a:83:3c:2c:aa:4c:e0:0c:72:fb:
f5:d4:02:ad:19:d0:ec:5b:4a:58:6a:a2:95:69:b1:54:0b:66:
14:64:72:a4:3a:ac:7e:b0:a3:c6:84:5a:8b:a0:b6:d1:cb:c9:
76:ea:09:c7:dd:cb:78:6c:92:89:65:83:79:15:81:b0:cd:13:
d2:5b:0e:33:02:05:3e:46:ca:06:e3:4c:bf:67:75:14:9c:80:
7b:02:88:8d:b7:6d:11:16:c1:fb:09:6a:7f:ee:a3:0b:d3:8b:
ea:9d:a5:b5:71:08:e2:2e:0a:9a:7b:64:33:ae:f9:ea:89:30:
1a:8a:b0:b7:8d:a2:bb:13:60:3e:66:91:72:3b:bd:8b:0d:17:
aa:79:cf:3e:91:93:d8:cb:09:19:45:78:6e:2e:f6:a9:67:e9:
ff:12:eb:52:23:24:bf:c9:68:51:67:c4:6d:46:3d:02:b7:e4:
d0:9c:e7:ec:c4:ec:28:27:2c:80:19:e6:40:38:12:28:3e:e0:
2a:7c:cf:36:7b:ff:b5:46:ec:14:66:5a:bc:d0:9a:6e:92:0f:
e8:20:98:7b:c7:2d:fa:44:b8:fa:ac:47:81:64:e7:e1:c9:84:
10:0c:a6:c1:10:58:b9:5d:b2:14:f9:47:c6:81:06:2c:3d:84:
c5:d7:05:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:18 2025 by rpki-client