Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: Mc6zTrSGGyOG+OhBx/gfkaG57DuI4cJsJFmps/VbezM=
Subject key identifier: 62:C2:7E:8F:44:59:B0:96:81:FC:97:EC:98:2B:C5:67:02:93:D8:3E
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019A4EF53AB50A84F80CB664443AA030D227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:25 +0000
Manifest this update: Tue 04 Nov 2025 13:01:25 +0000
Manifest next update: Wed 05 Nov 2025 13:01:25 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: 1gScAuiOm3arJ1q5LNjfSQ8LqhUAV2SurMi+5F/fx94=)
2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3a:b5:0a:84:f8:0c:b6:64:44:3a:a0:30:d2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Nov 4 13:01:25 2025 GMT
Not After : Nov 5 13:01:25 2025 GMT
Subject: CN=62c27e8f4459b09681fc97ec982bc5670293d83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:f3:44:6c:47:7f:97:78:de:35:5f:ec:42:
78:67:7f:38:35:e4:0e:ee:16:e5:fc:d1:30:e9:37:
a6:be:9e:6b:42:83:aa:ea:3e:96:e7:93:ae:4c:b3:
09:f6:15:c4:cc:21:18:c6:5f:25:5c:d7:25:21:cf:
82:9c:6e:79:bf:47:9c:46:72:aa:56:53:60:8e:32:
10:e0:0a:18:d4:d5:61:d6:7a:02:90:25:90:dd:b1:
e5:f3:5a:b4:56:83:6e:6e:c7:1d:f0:c3:9f:d5:55:
40:ab:19:81:db:6f:0a:b5:90:29:42:98:95:63:3e:
1c:4e:7e:33:81:ab:24:4e:9f:81:55:89:c8:62:b4:
d6:4b:cf:b2:88:24:f7:17:86:8f:3b:09:66:c5:a6:
7a:3f:ba:3f:84:ea:11:a9:3b:51:41:82:6b:2c:e2:
20:27:fc:31:ed:bc:cd:66:ae:7d:61:62:a5:30:c9:
3a:55:43:65:5c:0b:ab:2c:10:78:72:a6:13:7a:cc:
da:ca:0b:c7:88:0a:4b:92:b7:3c:ef:98:ae:fa:cf:
e6:3c:22:3a:4b:d1:e5:f3:b9:ec:87:43:58:32:c1:
ce:0d:52:cc:e5:5c:4e:be:f0:33:4b:8c:67:af:ef:
b1:00:ee:0d:4a:9c:89:13:58:42:05:1a:54:a7:8a:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C2:7E:8F:44:59:B0:96:81:FC:97:EC:98:2B:C5:67:02:93:D8:3E
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:28:cd:9e:72:01:6d:51:16:24:55:78:4b:40:18:72:9a:c7:
0e:e6:b4:84:a4:4c:da:1c:6a:04:a7:0e:bd:9e:32:3b:37:42:
5e:97:a0:43:6e:9d:df:f6:de:a8:c7:a2:ec:93:11:77:fd:6d:
c7:d1:7b:5d:f3:a0:4f:2b:03:29:2f:49:75:ab:0d:76:60:ff:
cd:b9:46:c2:a7:6f:02:f1:58:a0:38:1c:b7:7c:3e:c9:3e:bc:
81:14:ba:b1:97:22:6a:b9:b2:b3:b7:b5:be:91:69:ea:36:af:
c4:86:c7:e7:b0:fd:a5:d4:2c:a5:50:e7:c7:e5:d8:b7:ff:f9:
e2:cb:7a:84:1c:84:aa:d3:22:d4:f8:5e:8b:3d:78:90:48:58:
7c:5f:94:a1:dc:ad:74:34:2b:59:34:0e:38:4d:5c:f4:22:5d:
76:ce:1e:11:f2:ba:51:13:bb:6c:3a:df:5e:7a:a5:f7:a3:e0:
f6:f7:16:4b:0c:0a:11:e6:9d:e5:43:3c:7b:85:79:20:db:8e:
75:2f:df:25:10:ec:68:c5:b9:3a:88:79:4b:20:d9:d8:f0:37:
65:42:9b:61:78:b8:a1:58:d0:63:43:c6:f2:dc:42:f4:1d:a0:
f9:dd:71:4f:71:26:03:68:70:99:77:b1:00:be:97:12:53:68:
a1:c7:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:33 2025 by rpki-client