Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: SwWbv7lfXwu7j+NNkmC3Lv0e5G9xtqV0QyLPPBdNR+g=
Subject key identifier: 1C:AF:50:49:BB:02:E9:B8:AC:81:CD:62:BF:0F:96:12:00:CB:32:EB
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019A4E18A28EBC8356FC442FBDA202F04FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 1305
Signing time: Tue 04 Nov 2025 09:00:28 +0000
Manifest this update: Tue 04 Nov 2025 09:00:28 +0000
Manifest next update: Wed 05 Nov 2025 09:00:28 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: SuunLpeW9NaaDcVVeDTe3a1sG1enweOzWsDZBp1xRgc=)
2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=)
3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a2:8e:bc:83:56:fc:44:2f:bd:a2:02:f0:4f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Nov 4 09:00:28 2025 GMT
Not After : Nov 5 09:00:28 2025 GMT
Subject: CN=1caf5049bb02e9b8ac81cd62bf0f961200cb32eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:a6:a8:18:79:53:54:4c:ea:8d:b2:58:bd:
16:d8:5f:45:45:94:94:e8:91:9a:70:f5:bd:e7:2f:
bf:33:14:03:78:4e:3e:a1:43:41:25:9a:c9:95:65:
11:c0:01:22:76:cc:0e:49:c2:24:28:b1:67:43:b5:
e0:8b:f8:d8:eb:99:99:81:20:7a:bb:0c:63:80:e1:
9c:14:a8:60:f9:e1:37:ba:c0:67:6d:e9:8d:c7:35:
03:f8:7c:4b:cd:eb:2f:86:64:c0:bc:9d:4d:87:a5:
b2:8b:a0:e5:00:6c:b6:4a:be:c7:21:b7:5a:b6:28:
0f:30:92:d0:02:71:82:c2:39:e3:e2:f7:53:d4:59:
4c:ea:02:8c:07:21:d5:2b:dd:4c:a5:05:26:19:65:
28:52:87:92:85:01:ad:77:cf:2a:99:b4:79:99:a2:
64:57:d5:c4:7f:c9:59:06:cf:30:7a:d3:fc:e6:31:
88:90:e8:6c:01:a3:80:57:30:72:22:9f:1b:29:98:
f9:fd:5a:9d:73:b4:b4:3f:a0:0f:cf:dd:ba:33:6e:
55:99:8b:ca:da:48:81:57:ff:1b:e2:d5:83:a1:58:
8a:e9:05:af:ec:f5:94:dc:87:d8:67:88:1e:3e:8f:
a9:f4:f0:e7:c4:7f:c8:53:9a:10:cd:67:ba:79:ed:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AF:50:49:BB:02:E9:B8:AC:81:CD:62:BF:0F:96:12:00:CB:32:EB
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2c:ce:28:d6:1f:de:1c:21:55:2c:84:58:98:66:e2:a6:55:
30:4a:27:d7:4d:32:a0:aa:ae:7e:cf:f8:b6:e8:39:28:eb:a9:
0f:00:c6:f2:55:cd:b8:40:ca:c5:c1:6b:9a:a3:a5:f5:7f:f7:
f0:b7:93:2c:a3:5b:10:2f:89:a2:dd:8d:86:c4:0d:0b:a5:54:
10:dc:c3:1a:c8:98:23:a0:30:d3:a3:f2:ee:68:23:1e:05:08:
bb:bb:9f:67:41:a8:be:a7:e4:de:c9:c7:ae:63:13:c1:cb:db:
62:92:2e:51:7e:67:99:2f:87:96:63:03:68:d8:4c:df:5b:b0:
1b:42:92:da:f6:0b:86:f7:56:be:44:e3:3b:a0:25:e6:91:e1:
eb:bb:cd:53:ba:25:6f:cd:8d:71:f0:4f:7e:0d:0f:f5:f4:4c:
68:fa:8e:9b:7d:74:ee:e4:e4:a4:b2:6c:e8:52:35:88:44:74:
f3:ea:cc:b7:36:17:b5:06:fc:0e:21:cf:c6:f6:85:9d:f7:66:
8f:3c:e7:99:92:4f:54:bb:fb:c8:a0:f4:55:a7:43:45:a2:68:
e4:05:bb:ba:a1:7f:9b:77:90:d4:ad:f5:52:02:5c:20:b6:ca:
a5:37:c2:35:b2:e7:dd:fe:48:a4:cd:d6:12:53:f3:de:2e:21:
a4:69:35:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:54 2025 by rpki-client