Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: 47/Pukl6XroihmWRSU2G0MGhLBKmAiUu4VCJy2U/TR4=
Subject key identifier: 50:E4:E9:37:10:A2:28:29:28:FB:94:E8:7C:65:12:EE:D4:B0:60:23
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 019A4E863E230B09E4E43897922D7E6E62CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0C5F
Signing time: Tue 04 Nov 2025 11:00:11 +0000
Manifest this update: Tue 04 Nov 2025 11:00:11 +0000
Manifest next update: Wed 05 Nov 2025 11:00:11 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: x56mI8ZZcg2UN5yqDor6ljD6phpp6NHXTLo5uaB8iOA=)
2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3e:23:0b:09:e4:e4:38:97:92:2d:7e:6e:62:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Nov 4 11:00:11 2025 GMT
Not After : Nov 5 11:00:11 2025 GMT
Subject: CN=50e4e93710a2282928fb94e87c6512eed4b06023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:8b:05:35:e9:47:9d:00:cf:b5:38:ef:6c:
e1:a4:85:53:55:19:99:ee:3a:89:f7:38:cb:87:b3:
5d:a4:57:f4:82:32:10:97:11:67:26:c1:36:08:1b:
3b:6c:ca:3b:14:e7:d2:70:44:05:97:4f:16:97:92:
00:ff:16:45:d6:90:35:34:55:ff:a7:23:af:39:1e:
40:11:65:7a:f4:fe:b0:4f:41:69:16:a9:91:a7:a8:
54:f1:a7:84:57:f2:8f:d3:c1:01:6a:cd:54:65:e4:
fd:aa:76:d8:f6:94:e8:a0:95:34:8e:75:77:8a:20:
54:c6:f1:71:a1:6a:62:95:2e:14:f2:c0:b4:20:b1:
3c:a4:82:bf:40:78:83:36:f4:ac:5d:b4:aa:0a:6b:
3e:b2:df:62:23:30:2a:22:3b:7f:16:e9:f2:53:23:
b0:47:6c:71:0e:92:9e:3f:d6:fa:ad:93:6b:4c:fe:
0e:72:73:90:d9:cd:4d:d2:88:e6:07:0a:4b:d6:32:
1a:97:15:d6:25:7a:74:3e:47:ba:5e:ee:80:54:16:
8f:53:1d:45:92:44:38:7c:5f:09:10:73:3e:96:c3:
de:e1:ad:7e:d6:b6:50:e0:94:87:2a:cf:5c:26:85:
22:a7:65:14:9b:b6:f0:d8:05:de:b2:c0:8d:7f:66:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E4:E9:37:10:A2:28:29:28:FB:94:E8:7C:65:12:EE:D4:B0:60:23
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ed:1a:46:7f:a3:95:d5:01:2b:04:93:e7:68:9a:3f:42:ef:
47:18:d8:2c:49:96:af:81:18:86:6c:97:54:b8:1b:9b:c4:07:
1c:76:06:b0:ef:5a:cf:ea:cb:0a:41:47:86:63:e8:c6:71:8d:
94:5f:55:8c:9f:75:12:e0:af:cf:60:53:d2:88:28:8c:19:25:
a4:72:d2:8a:cc:0f:fd:f8:fc:ba:f6:c3:c9:35:2b:01:91:27:
98:6b:4a:c4:98:69:33:74:18:8e:3d:ae:7f:81:ec:55:be:55:
10:56:86:da:0f:37:b1:95:27:29:b8:8d:30:dc:f5:d0:28:7c:
89:ba:94:7c:40:4f:86:fa:c9:98:3a:a1:62:9d:99:9d:08:9a:
b4:92:66:5c:fd:8e:fd:5a:b9:35:8f:cc:4d:14:23:db:11:db:
d8:23:0c:c4:46:fa:22:1e:1f:2c:02:7b:2f:47:69:ac:9b:a1:
02:bd:cd:3f:44:f3:9d:f4:cc:36:77:18:46:9e:52:d3:4f:cc:
03:76:a7:4b:31:3a:67:08:98:8f:29:06:e3:bd:6c:2c:3c:8a:
39:66:85:34:95:b6:a6:ca:f2:81:db:34:81:8f:cf:3b:07:5d:
df:21:08:7f:a8:28:0d:50:80:98:35:b4:3c:83:c4:21:52:b8:
ed:e9:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:16 2025 by rpki-client