Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: FhJJwOIShQCFsn378mDxHUEEwEZxa1vdRLc0nJ63j/8=
Subject key identifier: 5B:4B:97:89:4C:72:67:C2:D2:B3:C6:F9:D4:30:6B:11:23:3E:F6:B1
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 019A522C540A53C69BA707F04B0F67487165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0EDD
Signing time: Wed 05 Nov 2025 04:00:28 +0000
Manifest this update: Wed 05 Nov 2025 04:00:28 +0000
Manifest next update: Thu 06 Nov 2025 04:00:28 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: lRlJfV3/Ahd2cDYKonbHaDgGhAJWvsAVZrqvRRnoUbM=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:54:0a:53:c6:9b:a7:07:f0:4b:0f:67:48:71:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Nov 5 04:00:28 2025 GMT
Not After : Nov 6 04:00:28 2025 GMT
Subject: CN=5b4b97894c7267c2d2b3c6f9d4306b11233ef6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:02:3b:69:f0:fa:71:05:71:d1:4c:37:66:
d3:fe:af:ff:e6:37:84:67:fe:e6:70:fe:b7:3b:11:
ed:fb:b3:39:bb:7a:2b:73:e5:f2:a8:a9:0f:37:7c:
70:f4:b6:21:26:c5:02:8a:f2:aa:84:49:5a:4b:8e:
b4:55:0e:07:71:d4:eb:f3:97:5b:ac:68:f6:6f:2a:
3f:61:c2:66:95:49:bd:f5:9c:18:6a:1e:d9:af:a4:
b3:d9:60:b1:fe:e7:91:73:22:cf:21:53:36:4c:1f:
07:8c:d5:10:53:de:a1:dc:45:4f:3f:c1:be:a6:e0:
d2:86:06:a5:c9:12:c9:b3:6c:a7:ef:f2:d2:02:c1:
b3:2e:e2:f9:e0:55:30:b7:87:7b:c9:d7:24:22:03:
d3:09:c0:4f:23:c5:b8:24:32:55:a0:ad:16:91:bd:
25:49:0c:13:36:5c:97:36:5a:60:a4:43:a8:53:a3:
3c:3c:70:81:34:c1:40:f6:57:ee:a4:a6:cf:2b:e9:
5f:6c:28:29:eb:ad:b3:34:ef:5b:1b:df:a2:cb:1a:
9b:17:b1:ee:2d:69:20:be:24:72:c7:6d:0f:f3:39:
56:dc:59:8a:b4:fd:4e:67:4e:e0:a7:2d:eb:87:e2:
59:dc:6f:54:f3:b3:e5:df:b3:fc:42:49:fd:d8:29:
6b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4B:97:89:4C:72:67:C2:D2:B3:C6:F9:D4:30:6B:11:23:3E:F6:B1
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5e:34:d9:e1:82:0c:49:3b:bf:9f:56:06:44:2c:87:6e:2f:
da:b9:c8:2c:89:f7:16:62:53:d9:24:be:4d:d4:f6:d2:72:5f:
25:32:25:1e:af:2f:b2:e1:1c:2f:cc:36:2b:84:96:b5:7b:dc:
4c:78:28:c0:2a:76:48:d6:c9:ab:91:de:74:7f:7c:42:ee:77:
33:9e:49:91:26:4d:08:75:e4:67:4b:eb:a2:7f:b8:9a:71:c8:
2b:12:dd:03:b6:45:eb:04:23:48:ac:a8:f0:34:aa:26:e9:eb:
c9:98:82:bf:bb:f9:de:ae:ef:82:15:a9:9e:56:d6:f6:96:88:
15:98:e8:07:03:4e:7e:1f:e2:62:46:2f:11:6c:6b:4c:fd:9e:
b8:17:8d:13:fc:24:dc:16:52:f8:20:c1:98:fc:20:3b:f5:db:
5d:79:f9:f8:02:04:c8:84:f9:68:1d:8d:5d:02:80:8d:b4:82:
50:f2:23:35:a7:60:af:6b:54:59:cb:1a:4b:e9:c3:f3:8e:95:
d9:70:c7:f4:5e:3e:4b:4c:aa:c0:d9:67:8f:17:90:91:62:0a:
a8:d5:99:6e:61:96:e7:02:d1:56:dc:ee:dd:45:22:38:8c:78:
56:1a:fd:6f:7a:a2:3b:ff:cc:d9:ce:45:80:3a:de:6e:a8:89:
3f:2c:34:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:36:42 2025 by rpki-client