Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File: 5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier: +HC9K93qbzaFC3VNMjJJjT8VsdUN3XQYHBOh1k7LV4M=
Subject key identifier: 0D:A1:AD:03:F7:DD:E3:D4:FE:6A:03:4B:3E:28:7F:4B:AC:43:34:46
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer: /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial: 019A4D73804A4FF30D59FC096FC39B49DDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number: 03CB
Signing time: Tue 04 Nov 2025 06:00:06 +0000
Manifest this update: Tue 04 Nov 2025 06:00:06 +0000
Manifest next update: Wed 05 Nov 2025 06:00:06 +0000
Files and hashes: 1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: e5e7Ek2hrznqYfYYakqVNEyDveI7jnPGowx6N7MuNk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:80:4a:4f:f3:0d:59:fc:09:6f:c3:9b:49:dd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Validity
Not Before: Nov 4 06:00:06 2025 GMT
Not After : Nov 5 06:00:06 2025 GMT
Subject: CN=0da1ad03f7dde3d4fe6a034b3e287f4bac433446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:e2:27:5f:5e:0f:96:13:92:56:07:e1:03:
4d:9f:35:31:46:86:68:41:26:44:a2:66:af:37:ba:
05:43:c9:d7:64:64:51:f7:08:3f:a3:d9:5a:14:18:
08:f8:1b:6d:6c:fe:e2:9f:76:28:e7:94:5f:75:4b:
75:4e:2f:45:29:95:c5:7a:05:be:3c:ff:e1:0f:c6:
61:d2:13:7d:84:64:be:d0:b6:1f:a7:c9:f7:4b:08:
08:36:0f:f4:fc:8f:36:eb:46:a3:e5:de:ac:5a:9e:
a5:e4:cc:7f:41:2c:bd:d3:a2:59:40:36:ea:76:2e:
ca:aa:38:9f:16:a1:53:43:98:32:c1:4f:2c:dc:1a:
30:1f:3e:28:79:8f:a2:e0:14:42:ce:52:d2:39:b2:
0b:57:a3:1a:56:5c:14:4b:0d:78:6b:35:1c:0d:f5:
d3:af:b2:6e:b5:01:8f:27:a8:89:fe:40:25:8b:e9:
31:af:bf:a6:07:66:fc:86:d1:44:0b:e9:70:08:af:
b8:eb:6c:c8:02:26:fe:e6:23:d3:72:83:df:0e:1f:
f4:9c:a4:3e:f9:db:6d:1f:84:03:21:ac:a6:47:df:
86:23:6c:a5:ee:83:17:22:3f:6d:5f:4a:91:e5:04:
83:1f:b9:56:96:21:be:aa:0d:1a:36:99:50:c3:59:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A1:AD:03:F7:DD:E3:D4:FE:6A:03:4B:3E:28:7F:4B:AC:43:34:46
X509v3 Authority Key Identifier:
keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c8:2d:26:89:4b:9c:87:31:75:65:72:6e:c5:e8:a9:19:57:
83:8b:3d:02:e3:8c:de:61:47:2c:51:48:8b:a5:78:b0:6a:3a:
8d:a8:01:61:76:e3:2b:73:61:33:5f:52:92:e0:68:e8:67:b8:
fd:cb:88:37:a3:bd:c7:ec:f0:fa:1d:e2:f1:15:f5:fb:98:b9:
a6:9f:03:fb:84:38:05:b7:b6:b7:a0:87:4c:0b:25:9d:d8:72:
94:6b:e8:5a:f9:41:ce:d5:9a:49:f8:e5:b1:a4:1c:3d:26:25:
53:e0:2b:90:2d:07:a4:b1:62:7f:e0:3f:74:e6:65:5d:4d:dd:
8b:de:20:a7:05:2f:20:12:54:df:c9:b6:6e:7f:45:c7:b8:32:
01:02:56:e5:c7:92:3c:28:70:a0:b1:59:3e:2e:29:52:19:7a:
ab:fb:c6:2d:44:c6:68:a6:32:49:06:4a:1f:4f:49:e7:7f:6c:
e6:7b:e6:6e:44:ea:38:70:37:c8:82:4b:5b:bd:93:4f:21:f5:
eb:45:f9:25:c4:cd:e2:15:53:e9:ed:1e:0c:6c:d7:23:64:8b:
21:05:04:77:44:2e:db:23:a8:c8:4e:2e:25:44:24:8d:7c:6c:
61:f8:61:30:66:a1:8a:96:17:9a:39:90:d9:01:01:23:86:4f:
60:5e:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:23 2025 by rpki-client