Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: 89D3mr5V/YJ4UBYkcxXL88ohynXi9e6N6tR98wEULoA=
Subject key identifier: 63:6E:60:D2:00:D2:0F:90:D4:62:B7:B7:C9:EB:41:1A:47:BA:B4:77
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019A503DC7E505ADF96B07A2060462C9DDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0C30
Signing time: Tue 04 Nov 2025 19:00:17 +0000
Manifest this update: Tue 04 Nov 2025 19:00:17 +0000
Manifest next update: Wed 05 Nov 2025 19:00:17 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: RM4C2GXZviRVOYYKml0y+WJ/1dGRK/oOP0HL0PFTumw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:c7:e5:05:ad:f9:6b:07:a2:06:04:62:c9:dd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Nov 4 19:00:17 2025 GMT
Not After : Nov 5 19:00:17 2025 GMT
Subject: CN=636e60d200d20f90d462b7b7c9eb411a47bab477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:12:5d:ac:80:6a:48:b1:8c:39:06:1d:1f:
98:f0:79:d3:3d:82:f4:27:93:a0:a5:08:32:74:00:
c8:56:7c:cd:d6:69:19:a2:db:92:76:9d:f1:20:ac:
bb:d3:29:0e:8e:e9:cb:ee:64:1e:e6:a4:d8:8d:89:
a5:f0:73:7c:e4:30:f2:cd:3e:e3:8b:a8:ed:c7:67:
22:5c:55:3c:3b:11:3b:f7:be:f9:a1:c7:67:4f:01:
3c:59:e0:58:00:07:17:1e:69:83:f6:46:c4:c1:5b:
03:c2:22:ca:1d:78:35:c9:7e:f0:4d:7c:a4:1b:05:
59:1b:a7:ad:e4:a4:86:ab:de:54:b1:f4:0a:15:97:
3f:41:c0:b2:65:ba:e5:bd:54:2e:96:e0:73:68:3e:
e6:53:9c:9c:47:30:3d:3d:5c:35:36:d1:f1:30:5e:
1e:d5:78:f7:4b:ff:db:11:ac:6e:20:18:2f:35:6c:
30:88:81:85:99:1e:2a:1a:37:67:ef:7d:4d:b3:e8:
73:63:15:8e:5e:a5:7d:fb:41:77:52:0b:43:32:54:
e3:5f:c4:39:b2:0e:21:b8:79:3b:6f:78:5c:93:53:
a9:21:01:56:3a:ea:3c:e3:87:48:5a:62:6a:f3:5c:
70:8f:5e:81:2d:8e:36:3a:8f:46:40:90:19:0d:4c:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6E:60:D2:00:D2:0F:90:D4:62:B7:B7:C9:EB:41:1A:47:BA:B4:77
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:81:c1:26:9f:37:1f:16:a4:8f:91:9a:af:7c:5f:4e:f1:c2:
fa:2c:87:79:93:46:bc:27:2b:83:73:5b:a7:eb:c1:cb:8f:e5:
ec:ab:b0:17:42:4c:a6:3f:48:3e:a2:43:6b:db:0c:97:cb:46:
e2:61:64:65:e3:26:a2:fe:63:93:ae:73:fd:1a:c5:1d:ae:f5:
f0:2e:c0:09:95:3c:65:cb:d4:f8:2d:59:10:d3:04:e9:1c:0c:
9f:dd:4f:e5:b4:2f:a8:24:04:12:4f:f6:b9:8c:c8:43:1a:52:
d8:a0:77:83:60:ea:28:ba:2b:63:f0:f5:a6:c8:f7:cc:b2:c8:
9a:b0:7a:94:af:6a:a0:01:0f:54:4e:04:48:b0:53:7f:c9:e6:
6d:4f:7a:aa:d5:cc:15:d4:bc:9f:7d:0f:5a:f4:8a:76:90:95:
74:87:9d:c5:f2:86:18:d7:40:8f:f8:6d:e1:40:c7:f2:3a:73:
2f:f9:e2:1a:e9:aa:4f:13:dd:61:a7:c3:ed:1d:85:c9:99:4f:
33:17:f8:04:fb:b1:ae:93:00:a6:97:51:13:45:51:00:31:0b:
e1:ab:3f:2b:ca:b9:d8:ae:ac:d7:04:e0:5d:ed:44:3c:f8:6a:
99:3a:af:97:25:f5:80:02:03:c5:d3:55:da:0b:de:65:e3:b7:
fd:32:5c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:53 2025 by rpki-client