Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier: 1A3Yjr68l9lDeCCrI3mWxHyTPqSgdDfOB1t4PPcX7dc=
Subject key identifier: C4:45:70:9E:84:8F:2A:32:EF:9B:10:7D:20:C5:A0:ED:4D:05:B8:BA
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial: 019A4C97E736325A16BF777563F67B50E921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number: 169B
Signing time: Tue 04 Nov 2025 02:00:14 +0000
Manifest this update: Tue 04 Nov 2025 02:00:14 +0000
Manifest next update: Wed 05 Nov 2025 02:00:14 +0000
Files and hashes: 1: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: 1q4ZSUJawtwkUO8Z0Ynm3nJicgFlBEkYuh2EQ69/pLQ=)
2: 9wh4IjR2WdijxIEialrBfGScnoA.roa (hash: aGpT2hqWZX/M5kbSljEdFZvRHYfWgQ/Qc0ertXxiLJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:e7:36:32:5a:16:bf:77:75:63:f6:7b:50:e9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Validity
Not Before: Nov 4 02:00:14 2025 GMT
Not After : Nov 5 02:00:14 2025 GMT
Subject: CN=c445709e848f2a32ef9b107d20c5a0ed4d05b8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:80:8f:8d:41:09:48:79:65:63:8b:ff:91:
c7:7c:a2:d4:1c:9c:3a:cc:fa:0e:20:fc:dd:5e:6e:
64:29:10:bb:e1:23:68:a9:e9:31:2b:43:12:3b:f8:
62:3d:23:bc:2d:a9:1e:7c:7b:0c:b0:dd:68:4d:03:
e2:9b:85:64:84:02:d8:e4:87:fc:5e:15:f8:e9:3e:
93:12:8a:c4:17:c3:28:e2:72:58:30:88:17:ac:2a:
f9:8d:12:58:96:84:0c:1d:ae:4f:29:ed:91:21:a3:
0c:69:84:60:60:cc:6f:49:22:2b:11:93:1d:16:50:
63:d3:ba:5f:72:a9:25:79:15:75:95:ae:1c:8c:2f:
f1:7e:80:2c:7a:02:96:a0:ac:38:8d:59:77:26:05:
6e:96:02:e1:9a:e8:6a:eb:c5:8c:c7:c9:a2:c3:47:
bc:03:f1:1e:b1:8e:5f:fb:36:e4:86:dd:52:f8:c1:
ea:38:ba:8f:ed:e7:26:8e:0e:fa:fa:ff:9c:17:5f:
2c:63:29:28:f1:70:0a:88:6c:08:48:3a:1e:66:69:
dd:07:12:8a:b3:ee:c9:a2:15:f5:63:46:fa:cb:fd:
6f:c2:5e:27:a6:4b:f6:8a:91:c8:db:d9:ce:6d:3d:
4b:57:cc:25:d6:f9:a7:9c:53:40:a6:57:0f:88:42:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:70:9E:84:8F:2A:32:EF:9B:10:7D:20:C5:A0:ED:4D:05:B8:BA
X509v3 Authority Key Identifier:
keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:83:4e:3f:1b:3b:04:6a:e4:0a:66:a6:93:42:dd:50:66:1e:
28:ef:0f:4f:22:4f:29:1d:81:d0:f1:83:ee:a6:39:48:dc:b5:
31:46:72:51:e8:3a:41:26:09:12:5a:e8:61:10:2c:ec:53:55:
77:10:4c:8b:34:84:81:40:4a:dc:16:29:c5:9c:c2:40:ba:72:
c9:f2:71:ae:2b:81:e4:63:ae:97:8b:56:62:69:7b:cd:0c:27:
24:c8:04:33:9b:06:f1:d2:98:58:70:46:5b:86:ea:fe:b4:09:
8f:81:84:70:1f:2f:02:6c:11:2e:e3:f1:a3:b8:e5:b6:00:c0:
70:bd:7e:3e:36:91:d5:59:a8:c1:d3:20:91:14:b3:bd:47:0b:
97:79:30:b4:40:95:70:ab:cd:3d:4f:90:7e:ef:1c:9a:2f:c8:
e2:e6:a3:7c:76:f3:87:88:02:85:db:c7:d3:ad:43:28:32:f7:
e8:8b:80:f2:57:5c:b1:e6:b8:3b:ba:f7:f8:05:d5:32:01:ed:
92:ce:6e:23:a0:d3:3e:b5:f3:b6:73:05:16:8d:b9:2d:dd:b8:
3f:83:2d:aa:99:3f:8d:70:46:0d:43:25:84:c3:4d:33:c5:4f:
87:a3:54:af:32:96:7d:57:eb:0d:18:81:40:37:c4:a8:a6:bc:
01:1f:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:57 2025 by rpki-client