Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: TD2QeqVTwBysyTvaEZgiEh3kvxwinxri5cK3DRJ9PgQ=
Subject key identifier: 2D:C5:EC:F2:4D:21:8B:07:6A:DF:80:81:04:1B:95:D9:0C:15:0C:74
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019A4F996637424EB6D6299FFD2DDB4D31A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 1411
Signing time: Tue 04 Nov 2025 16:00:44 +0000
Manifest this update: Tue 04 Nov 2025 16:00:44 +0000
Manifest next update: Wed 05 Nov 2025 16:00:44 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: QaS9nbYEakXxByX2KAp6U8BDss0pHm6IVpOGHLk6o3g=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:66:37:42:4e:b6:d6:29:9f:fd:2d:db:4d:31:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Nov 4 16:00:44 2025 GMT
Not After : Nov 5 16:00:44 2025 GMT
Subject: CN=2dc5ecf24d218b076adf8081041b95d90c150c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:9d:b5:59:f0:a0:b3:11:5b:ff:05:64:97:
78:58:5b:5a:8c:6a:01:15:dd:31:03:b0:b3:16:75:
e8:c6:32:78:ad:fe:5c:ad:70:f9:9e:5d:5e:77:a4:
83:e9:91:dd:c5:2a:69:f8:d4:6c:15:45:78:52:c8:
c6:e0:e3:3b:8d:aa:dc:dd:74:3f:61:c9:24:14:e0:
e2:c2:f1:49:2b:ef:13:ee:af:e8:ad:8e:10:ae:1a:
da:a4:d1:dc:ca:d3:e6:1e:fc:f4:3f:93:c4:b7:fd:
65:34:71:80:17:c7:77:1f:f4:f5:0e:d3:65:93:6f:
00:4d:a8:a3:6e:0a:1f:ff:f2:d9:8f:5e:85:89:b1:
6f:6b:93:73:fa:d9:59:d6:7b:a2:f2:18:cf:7c:a5:
4a:65:e5:c0:5c:cf:8d:6d:b0:bc:f8:1f:4b:96:65:
df:00:ba:77:1c:1d:80:8c:c5:d1:15:09:32:54:b3:
e4:9e:60:e4:c9:d7:06:8c:81:2c:00:cd:3b:d9:92:
59:ac:a4:cf:7f:54:fa:fe:c9:c6:d5:5b:f2:18:40:
fa:0a:00:0f:5c:26:ec:46:3f:ee:13:28:5d:ef:2e:
c8:0d:b7:47:19:64:a1:89:f8:b6:4f:fc:60:43:42:
82:76:74:a6:2b:7e:1e:1f:14:cb:fe:9a:75:73:0b:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:EC:F2:4D:21:8B:07:6A:DF:80:81:04:1B:95:D9:0C:15:0C:74
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7e:80:e7:9e:9a:e3:b6:d8:b8:d8:1d:8f:12:55:0c:78:2b:
c6:c7:52:e1:ca:d5:8d:7c:c5:99:9e:76:b9:98:f7:db:67:37:
38:bc:be:9a:56:9b:7c:be:aa:4e:28:b2:66:3b:22:40:f8:f6:
a6:b8:b7:33:7a:bb:eb:9e:40:5c:43:9b:8c:bb:a2:f2:42:c6:
e9:9f:a2:30:d3:b0:52:32:33:61:47:e1:19:5f:8c:38:bf:bb:
fc:6a:d9:67:3c:9a:36:50:5c:49:3f:8e:a3:3f:0c:5e:ba:9e:
80:56:d6:a8:60:81:03:3d:cf:55:11:be:a7:74:29:05:0e:62:
24:11:32:d6:6f:76:7f:f9:87:06:36:28:89:ab:fe:25:9f:17:
ef:27:46:8e:3a:85:c3:73:d1:ec:ce:2e:6f:83:06:2f:96:79:
7c:66:17:eb:9b:a5:ca:65:d0:51:b8:2e:a2:e6:28:59:dd:4a:
4d:d1:4d:9a:2b:32:41:20:4e:e3:49:c3:94:a0:56:96:ec:21:
e2:80:80:3d:23:d2:00:ef:b4:93:84:9b:4b:df:80:61:fb:58:
7a:f7:3e:db:63:3e:22:c9:3e:43:c7:dd:1c:fb:87:3c:76:3b:
1f:fb:83:4a:18:49:8d:d4:be:cb:c0:e5:07:5c:b9:45:5d:86:
09:06:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:55 2025 by rpki-client