Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier: rDs7SPSfgeQxLgF97fnpKZSzDFWZAaLf19HK3jBTsNE=
Subject key identifier: 8E:03:D8:5A:37:85:89:63:FB:E7:B9:55:6D:3A:B5:EF:9D:2E:55:B6
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial: 019A5263918E9C32FCEFED63611450B7523F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number: 0C83
Signing time: Wed 05 Nov 2025 05:00:48 +0000
Manifest this update: Wed 05 Nov 2025 05:00:48 +0000
Manifest next update: Thu 06 Nov 2025 05:00:48 +0000
Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: KwEnDNNVLCxc+NTtXE0ia6MLT36awGgfljdIZsoQAoE=)
2: rf8xmxH0lxQMZaEoNGLhxRtMOZM.roa (hash: 8uXylOlK6BkO3v7SWg2Pp+uIEZNpg7MPKeK8yn1WMAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:91:8e:9c:32:fc:ef:ed:63:61:14:50:b7:52:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Validity
Not Before: Nov 5 05:00:48 2025 GMT
Not After : Nov 6 05:00:48 2025 GMT
Subject: CN=8e03d85a37858963fbe7b9556d3ab5ef9d2e55b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:ad:37:56:b2:d5:e0:cb:11:76:93:88:cc:
92:55:47:1f:50:f5:57:7e:28:78:1f:e9:09:04:76:
e7:38:8c:e1:16:a5:11:f8:c7:7f:5a:6f:58:a7:1a:
67:55:2f:d0:45:7f:74:be:99:50:62:f8:83:e5:93:
bf:4f:a6:1c:e6:4e:a5:d3:f1:12:fa:fd:ab:54:b1:
6b:a6:a4:0c:8d:46:4e:b7:73:fc:82:1b:c9:89:1d:
bc:bd:dd:2c:70:ac:dc:3b:b5:91:29:fe:84:8b:e0:
ff:78:94:19:bd:6e:81:d9:3b:30:41:5e:ec:94:96:
98:ed:a5:cd:73:c2:8b:d4:5a:cd:ab:e5:8e:9f:d4:
89:8e:47:9e:72:b1:4a:5e:7f:77:4c:c3:ba:b9:22:
c1:a6:de:99:90:1d:d5:55:1c:6d:34:15:00:fa:bb:
10:6d:3b:44:40:17:f8:47:f0:18:e5:7d:25:ed:79:
48:b9:53:6d:93:3a:ac:c5:44:13:a1:72:e0:6b:9c:
97:68:65:9b:dc:f6:47:2d:06:8a:34:6a:9e:34:bc:
31:69:23:64:43:aa:ca:22:92:d4:29:e7:cb:33:d6:
13:e7:e2:a6:ab:56:7d:78:50:ab:1d:d9:f7:67:4a:
c9:63:bc:a9:0b:a9:50:5a:56:4a:e2:79:0f:a9:85:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:03:D8:5A:37:85:89:63:FB:E7:B9:55:6D:3A:B5:EF:9D:2E:55:B6
X509v3 Authority Key Identifier:
keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7f:fb:eb:97:71:01:14:2d:23:90:3a:5f:f8:63:0e:f9:d6:
02:af:0d:53:0f:93:e2:ab:81:dc:21:c4:95:58:15:73:bc:9e:
a9:56:1f:f8:55:b4:00:90:2f:92:25:fe:1c:44:2c:98:5e:49:
99:ef:92:8a:a8:59:74:b0:ff:a1:f0:87:de:7f:40:9d:a7:0b:
3f:cb:44:0c:4f:f9:57:6a:f8:57:39:6c:f7:99:0a:b7:41:14:
05:e9:54:ab:de:ea:ab:3a:33:b8:fe:68:49:65:11:e6:95:bb:
2a:ab:32:d5:39:a1:63:cb:93:2a:29:61:d0:7a:47:ba:7a:81:
2c:e5:c4:5d:f0:0f:1d:1e:4b:b0:e2:64:0a:f7:f8:3f:c5:0d:
8a:f5:90:cf:78:ba:dc:5c:ce:75:9c:68:50:55:61:33:ba:a5:
48:08:5f:7e:74:eb:d0:43:d8:4c:b6:e4:96:a7:96:57:43:ef:
fc:88:85:f6:b9:34:f1:52:e6:8a:eb:52:58:fb:96:f3:21:e2:
6a:cc:3d:dd:92:88:f1:7a:6f:c6:a8:77:6b:8f:a1:cc:c1:c7:
83:04:7f:02:42:57:d8:e5:c5:5d:00:9c:ca:fe:ce:ff:b8:5f:
96:f9:60:10:ce:8b:8c:ea:3d:29:75:46:aa:22:5e:2b:7c:ac:
54:8c:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:26 2025 by rpki-client