Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: K+iZFcwthjRnUVGLXq6EjvLiaKmr2QgtrLrWeH3J+kI=
Subject key identifier: E4:8C:B5:33:44:05:A0:2F:4C:BF:2B:F5:35:14:24:B9:F4:DC:62:7B
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 019A4EF5C850796F5DBCC8C1F1CC9BC35797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 11C3
Signing time: Tue 04 Nov 2025 13:02:01 +0000
Manifest this update: Tue 04 Nov 2025 13:02:01 +0000
Manifest next update: Wed 05 Nov 2025 13:02:01 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: dA+ny06JpVWx9RyuDN6Aw5frPRntD74t3U56ek852hM=)
2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c8:50:79:6f:5d:bc:c8:c1:f1:cc:9b:c3:57:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Nov 4 13:02:01 2025 GMT
Not After : Nov 5 13:02:01 2025 GMT
Subject: CN=e48cb5334405a02f4cbf2bf5351424b9f4dc627b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:a2:8a:16:75:93:25:9d:e4:97:99:80:50:
64:a2:53:aa:14:50:18:a2:b7:8d:8e:e4:28:09:c9:
a9:f7:a0:a2:68:c6:82:f2:68:26:8b:3c:a2:41:ae:
42:92:43:22:f6:33:06:8c:4a:dd:6f:c5:b5:70:63:
e9:de:c3:1c:1f:d8:ba:94:23:28:9f:b6:0e:ad:65:
aa:cc:a5:df:7a:e2:2e:fc:6c:9a:87:7c:fb:ed:b4:
87:98:dd:73:5b:c4:f5:fd:84:6e:25:6b:58:58:33:
02:78:b5:af:bc:8e:94:e0:4c:16:92:67:cd:a5:bc:
a8:9a:72:46:38:82:2b:7e:73:06:d2:f7:46:e7:56:
3b:3b:00:cd:91:29:a0:5a:d7:13:ad:94:ce:d0:d2:
62:b2:4c:c8:d3:f2:84:dd:1e:c8:4b:19:17:dd:2f:
0b:fe:c8:dd:6b:5d:3a:5e:08:6c:2c:74:8d:79:c5:
26:50:be:4f:79:e4:75:c9:bc:ee:19:74:d3:f4:4c:
44:b0:e6:ad:56:fc:25:51:17:8f:a5:46:01:73:80:
ab:1b:cb:a2:97:5d:38:f8:3c:fb:e1:80:6c:a7:a8:
4e:b7:ad:37:e5:3d:49:4a:eb:83:3c:43:84:3d:34:
dd:c8:b8:ac:b3:c9:bb:63:a8:72:dc:a2:d7:ef:f7:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8C:B5:33:44:05:A0:2F:4C:BF:2B:F5:35:14:24:B9:F4:DC:62:7B
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:08:2f:5f:a1:62:2f:ae:d7:a4:b5:52:42:ab:4b:c4:5d:82:
40:e3:76:86:83:18:c0:d7:30:72:4c:0e:6d:99:3e:30:dd:99:
cd:da:e2:08:c3:06:7d:c3:19:30:a8:e5:7e:a9:98:98:84:ea:
a3:85:c7:4e:ad:de:f8:64:6d:bf:0d:ac:05:52:73:a6:94:8c:
ee:1c:33:53:f1:6a:88:af:64:28:c2:9b:96:2a:ce:05:cd:5b:
b3:40:07:2d:cb:49:20:93:b4:39:10:4c:ba:95:fc:2e:ff:d5:
9c:1f:e6:40:e8:42:63:41:ee:a6:04:51:68:6d:3a:1b:b4:bc:
e3:49:25:4d:12:0a:bb:a3:83:07:83:54:6f:56:23:95:cc:01:
c7:a9:bc:75:1e:63:07:e9:68:e4:70:f9:c1:d6:54:71:56:b2:
b6:35:7f:21:ab:dd:64:07:33:38:21:1e:0c:b9:8a:84:6d:89:
ed:dc:d7:00:b4:66:a4:7c:46:34:1f:16:79:f7:28:ca:00:c2:
83:57:de:32:7c:9a:37:8d:9b:90:70:1c:fa:55:69:6e:39:5e:
4e:d2:1d:b9:4d:8a:a6:66:d5:40:cd:14:ea:07:a7:61:e5:c4:
3e:1f:9d:f3:4d:85:55:77:35:e8:eb:95:d8:0d:c8:ca:a4:e8:
df:39:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:47 2025 by rpki-client