Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: IBjirC/zecQJMzMnkD5q7ePLA7A4uIbJigcc3hTovRA=
Subject key identifier: FC:93:2D:A5:6E:93:C8:BE:72:36:66:C3:0D:20:B6:06:2E:7B:13:F8
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 019A4E4FB834520E26DF1F538544CB50A486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 11D0
Signing time: Tue 04 Nov 2025 10:00:38 +0000
Manifest this update: Tue 04 Nov 2025 10:00:38 +0000
Manifest next update: Wed 05 Nov 2025 10:00:38 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: UrsczYIuD0LrzHBAinXbBIS4GOxHo1jTD9qyhjKmlFk=)
2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b8:34:52:0e:26:df:1f:53:85:44:cb:50:a4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Nov 4 10:00:38 2025 GMT
Not After : Nov 5 10:00:38 2025 GMT
Subject: CN=fc932da56e93c8be723666c30d20b6062e7b13f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:6a:55:82:0e:f3:b0:a8:41:25:75:b8:01:
43:73:86:e3:5b:70:c1:68:e4:78:dc:8e:ac:02:2f:
1d:47:9c:41:d5:de:69:68:03:a4:de:1f:5b:d6:17:
d5:63:02:a8:db:42:f1:94:0a:74:7d:f1:2a:38:08:
a7:9b:ad:9e:a1:b8:43:e0:4f:06:25:d6:19:32:3e:
05:c3:eb:02:4b:fc:fc:4f:72:fb:11:29:fb:e8:da:
e2:d4:51:b9:35:41:27:16:43:de:e5:15:22:b3:03:
2b:d2:9b:d2:8d:1b:fa:72:ec:4a:a1:bb:3b:da:3f:
da:f0:65:4f:14:5d:80:12:6e:c8:38:57:3a:7a:48:
56:1c:2d:dd:a6:d5:5e:9c:a9:79:cf:b2:4c:32:40:
2e:9f:d4:43:ca:1e:9b:7a:0b:c4:5f:71:6f:e5:98:
06:53:de:88:d5:bb:8e:c0:1c:25:58:e9:62:b8:94:
12:a4:4d:b8:68:c5:3d:33:dd:a7:b9:db:01:42:19:
e4:02:a8:57:6c:39:1d:1e:35:e2:f1:ce:ec:4e:6d:
3a:2e:33:9a:36:61:7a:b9:b3:2b:62:4b:67:c8:fc:
01:bc:7e:49:02:d2:46:40:5e:dd:4d:2b:4f:fe:e7:
9b:2b:24:d6:25:16:46:e5:f5:55:cb:4d:83:23:22:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:93:2D:A5:6E:93:C8:BE:72:36:66:C3:0D:20:B6:06:2E:7B:13:F8
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:95:65:e3:3e:ea:57:81:9c:8b:bd:16:56:d3:d1:01:f8:3b:
1f:b8:8b:26:84:c7:9b:4b:11:96:f0:d6:4a:27:28:16:de:17:
e8:7e:89:ff:4b:c7:c6:48:95:5d:d4:ce:c3:34:2a:dc:a5:20:
bf:bb:65:c1:78:d1:8c:7c:8a:75:73:4b:91:4c:d2:f4:73:7c:
99:84:57:99:04:79:e1:04:65:d1:b1:03:10:5b:b7:02:b3:07:
65:7d:ff:06:49:e7:a1:9a:dc:df:d7:32:dc:b5:30:f6:04:82:
77:d8:6b:3f:88:7c:00:cc:b9:6d:7b:1e:93:ac:dd:97:8f:cb:
a0:04:29:55:e8:5d:20:b3:8f:42:43:76:07:13:9d:be:10:ac:
3e:ae:3e:8a:69:21:ac:8c:70:7b:6d:83:b7:f4:13:0a:3b:d0:
2e:03:cc:69:b2:27:7e:22:9b:bc:4e:98:6e:07:12:ce:2c:95:
2d:9d:7b:85:af:35:40:29:94:0e:48:36:26:e6:41:65:32:76:
ed:46:f7:bb:6a:87:18:a2:b6:4c:b6:f2:21:e3:aa:d9:58:aa:
05:8c:d1:10:13:8f:9f:55:c2:8f:2b:89:09:b1:67:27:94:0c:
01:6e:21:db:3f:c8:8c:84:75:c5:97:2a:58:83:ab:5a:e7:76:
0a:53:08:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:08 2025 by rpki-client