Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: 03ai4aRuqZwgaG9+q4W3B+CL8UyGdQepywYi8Eihgvw=
Subject key identifier: 67:B2:57:E4:65:A2:35:30:B8:63:65:07:0D:25:F6:38:D0:66:39:9B
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019A4E18DD85185675D897C6CE6D81329887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 03C6
Signing time: Tue 04 Nov 2025 09:00:43 +0000
Manifest this update: Tue 04 Nov 2025 09:00:43 +0000
Manifest next update: Wed 05 Nov 2025 09:00:43 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: ezQus4aB34RmJG2FnAaOIJqxaJJpklfcQEXYBJx/DjQ=)
2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:dd:85:18:56:75:d8:97:c6:ce:6d:81:32:98:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Nov 4 09:00:43 2025 GMT
Not After : Nov 5 09:00:43 2025 GMT
Subject: CN=67b257e465a23530b86365070d25f638d066399b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:08:99:11:bd:1b:69:23:b9:fe:09:ab:8f:
48:0d:37:a3:09:26:bd:19:2f:6b:4d:db:81:a1:ca:
2a:a6:d3:da:7a:fc:2b:13:64:a9:56:36:5c:fe:11:
0f:5f:85:51:cc:76:eb:44:75:65:1e:9d:5e:83:24:
b1:47:4a:4c:74:55:8d:0e:cf:f8:7e:b8:82:79:1e:
ac:32:4a:28:66:ce:60:ed:cf:d7:d1:d7:7c:5a:e9:
aa:a7:5a:8c:43:fb:12:26:da:17:71:8e:f3:59:32:
cc:66:86:30:e4:e5:79:eb:e0:92:be:50:e8:62:74:
57:bd:72:b9:8e:f3:08:f1:28:d8:5b:34:08:89:cf:
c4:ba:26:99:10:31:bc:48:76:8e:e7:32:97:80:dc:
6b:f1:b4:57:69:df:05:00:27:8d:3e:a2:6d:2c:6d:
93:be:7d:f7:1f:61:b8:d5:f4:4b:bb:f7:c6:b6:4c:
a8:f3:cf:22:9d:92:6a:60:51:1d:02:a6:f2:be:31:
cd:c9:d7:a6:7b:98:32:86:b4:57:a8:ff:95:f8:fc:
97:f7:9e:65:39:9a:a8:13:cd:fc:80:94:4f:74:87:
96:1c:fe:d3:aa:4b:82:8f:e9:c0:6c:17:45:e4:de:
d3:79:99:17:38:32:5f:4d:91:f9:59:6b:1b:35:10:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:57:E4:65:A2:35:30:B8:63:65:07:0D:25:F6:38:D0:66:39:9B
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c1:79:13:e0:f3:26:8e:7a:3b:28:f7:5b:d4:36:a2:2f:de:
05:0b:56:bf:0a:87:6b:0b:bb:80:e8:08:d3:6f:5d:ee:47:61:
0b:b4:3f:d0:b0:2b:b8:c2:55:f3:f0:f6:0c:5b:c3:9f:37:78:
c7:91:e7:f8:0a:41:47:1c:29:b1:03:4b:84:70:20:a1:36:aa:
09:9e:8e:49:69:ad:11:2a:fc:5e:98:34:5f:8c:75:ff:d5:e9:
80:c4:c6:69:12:b8:81:c2:b1:aa:0a:0b:23:98:b6:0d:e7:a5:
f1:c2:22:41:16:04:68:0c:d5:07:b8:9a:46:92:ca:62:21:88:
1c:f2:2e:9e:ae:a7:b9:a3:51:e0:dd:6f:71:6c:c2:58:d1:52:
0e:6c:65:a6:af:90:49:05:bd:8d:73:2d:8e:35:c1:af:fe:c5:
2b:c1:a8:3c:72:6f:d1:86:bc:5c:a2:6a:f3:2c:a3:e1:7f:9b:
1e:8d:0e:48:95:6b:23:2a:bc:21:91:f5:29:7a:f8:41:d7:9d:
5b:b2:65:32:f3:a0:56:7f:0e:63:5b:ed:7a:77:42:3c:bd:fc:
5b:54:ee:49:4c:f4:fa:09:0f:9e:9a:af:e8:04:38:8f:8b:78:
44:d3:1a:9b:cd:f6:04:11:1b:d3:2e:0b:f6:40:44:f1:17:41:
bf:f5:20:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:18 2025 by rpki-client