Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: NVVjcyCDJbFtFb3uAb5NbeqeGNTrIJk8se85R3T3yP8=
Subject key identifier: F7:AA:67:B3:42:22:0D:74:F0:2F:3C:E5:44:75:7C:72:5C:73:89:EB
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 019A4D747324AF279403E75C0985B9E7E114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 1106
Signing time: Tue 04 Nov 2025 06:01:08 +0000
Manifest this update: Tue 04 Nov 2025 06:01:08 +0000
Manifest next update: Wed 05 Nov 2025 06:01:08 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: wqXwTf3GARHNNXmJqUpT61SgVkYb3qZyvGIBm6lX7Fk=)
2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:73:24:af:27:94:03:e7:5c:09:85:b9:e7:e1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Nov 4 06:01:08 2025 GMT
Not After : Nov 5 06:01:08 2025 GMT
Subject: CN=f7aa67b342220d74f02f3ce544757c725c7389eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:ed:4e:25:df:89:1f:9b:f4:9a:57:f3:f6:
37:78:0f:fa:7a:2b:99:3e:c1:e1:15:e9:06:05:4d:
14:47:31:4a:17:39:db:73:b8:2d:46:d5:82:80:b9:
60:d3:3c:02:20:ce:75:e8:48:07:3e:83:b2:43:a9:
e5:a6:f0:97:29:1c:e6:59:fd:96:ee:a8:0a:f9:fd:
53:95:82:61:9a:3e:37:a1:33:b9:48:37:bd:ec:1e:
10:ec:4a:5d:30:15:7b:2a:1d:8e:15:08:a2:0c:62:
d9:0a:40:ab:0d:72:09:0a:62:1d:4a:01:f8:85:34:
73:08:6e:ec:99:de:94:d4:ff:98:69:45:51:27:5c:
93:c6:0b:4f:94:34:3d:64:9d:cb:95:ed:8e:2f:2b:
66:c6:bb:95:44:d9:45:e3:c8:b2:94:26:fa:6c:8f:
dc:a2:20:2c:d1:68:2d:a0:7c:d6:38:98:2f:ac:61:
f2:fd:60:52:6d:9f:d9:22:91:b9:3c:65:5d:c6:65:
ce:22:cc:51:41:aa:56:21:2b:c7:bb:75:b0:9d:e4:
8b:34:26:af:dd:d1:ca:4a:11:10:ad:33:28:7c:8c:
cc:1f:ee:0e:a3:4a:0c:1a:97:68:ed:db:ee:d4:6d:
ea:e2:09:42:62:3e:33:bb:da:16:0f:e4:13:c8:93:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:67:B3:42:22:0D:74:F0:2F:3C:E5:44:75:7C:72:5C:73:89:EB
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:92:14:4d:a2:4c:8a:55:f8:56:55:b1:06:3e:34:ec:77:1a:
d2:f1:0d:73:3b:aa:25:0b:89:1a:40:8d:59:8b:d4:21:9a:b5:
81:16:a3:48:a4:28:d2:cc:63:e8:5b:0f:6f:05:88:8e:ef:55:
95:4d:72:5d:39:16:ed:4b:44:97:1f:17:9f:b6:4a:0f:46:da:
1c:6e:02:a3:2a:f2:a3:ca:33:43:17:96:c9:2a:b8:a5:79:aa:
23:38:4a:f4:44:00:eb:a9:75:84:a9:75:43:94:4d:63:e2:cf:
7f:85:a3:90:72:9d:bd:40:96:83:06:bf:f6:67:91:fe:7a:90:
98:01:6c:9d:a3:b4:5c:d3:6d:a4:ae:34:1f:18:7b:74:6c:c2:
15:8d:14:fe:ae:98:00:0b:86:e7:c0:ed:cb:fb:f2:21:a8:f2:
09:23:2b:8d:cb:45:6a:3a:21:92:e9:8c:bf:e4:e4:ff:ad:bc:
7b:a1:f7:14:51:bb:55:90:41:3c:6d:cb:02:00:38:28:19:42:
40:e4:61:85:35:95:a5:54:f7:2f:f5:54:0f:f0:a1:84:11:ea:
47:bd:aa:17:49:e8:2c:f0:08:18:a2:f1:c0:82:82:20:75:d3:
f8:7c:b9:e2:74:31:58:b0:05:15:6b:29:b7:36:fb:09:fd:7a:
e1:e4:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:00 2025 by rpki-client