Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
File: 5miK6WMjwfz6tUspRVc5e0mwO8c.mft (raw, json)
Hash identifier: 7Ic90lssMgZZzOCp9QhusS9dP4PyjtYU6hjvzI2DHxI=
Subject key identifier: EB:1F:FE:E1:C2:34:C1:62:6A:64:25:C0:2D:0D:14:8F:50:55:0A:F5
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial: 019A5187D59FDF9C3955E9ED1CBFD703E334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 01:00:47 +0000
Manifest this update: Wed 05 Nov 2025 01:00:47 +0000
Manifest next update: Thu 06 Nov 2025 01:00:47 +0000
Files and hashes: 1: 5miK6WMjwfz6tUspRVc5e0mwO8c.crl (hash: OG3BYMg7ITBQOUu0XAJ1OyGLUNtXs6uhm+x5GZ3iae8=)
2: 6d81q_lbBBvU-iMaj2PmLykzsqc.roa (hash: CeNeRZHxa3cGB4BlKcDCcgvych6z2Vt9p5goEzBLjMQ=)
3: RcUSQ0Z3GKFYWJ4WRE1UedcK5Aw.roa (hash: hdoD+wycfWRw3rbXWOc6rZDgH+1OEob47XUZHRAtJR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:d5:9f:df:9c:39:55:e9:ed:1c:bf:d7:03:e3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Validity
Not Before: Nov 5 01:00:47 2025 GMT
Not After : Nov 6 01:00:47 2025 GMT
Subject: CN=eb1ffee1c234c1626a6425c02d0d148f50550af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:ed:1a:1d:48:2e:e4:2a:c8:a8:f7:7b:a8:
28:83:fd:77:d5:ac:10:98:33:de:26:ee:51:5e:3e:
ac:80:c1:1a:e9:9d:68:f6:f8:b1:78:19:88:31:47:
e1:1c:39:2e:d7:b0:90:9d:a6:b3:77:fe:df:de:ea:
a6:2a:95:ca:c8:2f:e4:fa:4c:94:94:c4:84:8a:60:
a2:60:4d:67:fd:b3:9b:e1:16:b4:6b:3b:6f:9a:9a:
6e:19:91:5d:bf:97:94:8b:14:58:69:1f:13:30:af:
74:7d:60:58:1b:db:36:75:26:91:cd:4b:e5:39:19:
43:b5:fe:17:ef:54:ea:74:e3:b8:9c:9c:cd:eb:95:
be:c4:91:22:0b:94:64:22:fc:01:ce:5a:95:29:95:
cb:14:f7:cc:9b:67:21:55:de:2f:b6:0a:d6:47:12:
b1:4c:cd:f6:a2:da:b8:81:3d:fb:27:5c:04:e3:e1:
53:83:f6:08:1d:09:0c:ab:34:0b:52:52:41:93:23:
d8:02:e0:03:82:cd:ad:57:41:cd:9c:38:aa:53:48:
60:fa:f4:38:b9:59:0f:71:9c:51:d5:f8:b5:29:83:
ce:28:c6:5b:d6:0d:63:6c:2d:25:43:51:2c:82:02:
ab:f1:b1:10:54:f2:77:3a:ac:0a:d7:5f:3d:e3:9e:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1F:FE:E1:C2:34:C1:62:6A:64:25:C0:2D:0D:14:8F:50:55:0A:F5
X509v3 Authority Key Identifier:
keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:6b:0a:8d:e6:16:ba:e5:92:2a:d1:9e:12:1f:80:8d:e4:14:
98:7a:7f:2d:11:8e:df:fb:e3:9e:dc:21:13:f3:e9:78:85:be:
13:c3:c5:97:b8:2d:50:dc:2e:20:81:1d:08:e5:24:f9:6e:39:
64:24:d1:92:6e:24:1c:a4:af:11:f6:a2:07:8b:ac:c4:89:c9:
af:73:d2:ca:a3:e7:1e:4a:52:e0:5b:65:da:0c:7e:37:5f:6c:
35:3c:20:1a:56:ef:db:4f:d5:63:e5:f3:7c:fb:c7:4f:28:65:
20:d6:cd:1c:7d:66:73:bf:5d:9a:95:43:c4:6c:8d:a3:c0:57:
fc:00:d7:2e:c9:35:9c:23:80:3f:51:f3:3d:79:6b:2b:f7:d9:
c6:6e:ed:74:5a:4a:44:3a:b0:49:fe:9e:ed:46:ad:3c:40:67:
71:e9:c0:0a:9a:c9:b3:a3:bd:66:dc:8d:28:54:78:f6:fd:df:
52:6a:e1:4a:ad:6d:04:a5:e2:7d:b9:e9:ad:b3:d8:db:f4:21:
35:63:63:b6:e7:16:80:8e:ca:ab:71:38:6e:d7:2c:64:4e:75:
48:f8:67:b1:9f:46:a0:ab:64:f3:f0:fd:b6:7d:b0:dd:20:86:
3c:31:c0:59:8e:78:07:e4:f6:a7:30:c7:d0:cb:e1:ec:8f:c8:
59:5c:65:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:41:25 2025 by rpki-client