Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File: 5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier: Ez1kY7Ymsc0E8VKMEbtbsLThjOIVVki9v2raUF1PLVg=
Subject key identifier: B6:A9:14:63:53:C5:B5:CD:B6:68:0F:82:6E:CF:C2:EE:92:1A:1F:25
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial: 019A4E5010BE0C3D51F60A650311577DFFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:01:01 +0000
Manifest this update: Tue 04 Nov 2025 10:01:01 +0000
Manifest next update: Wed 05 Nov 2025 10:01:01 +0000
Files and hashes: 1: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: Es8+48sqmbD/d6kPZofQiYvGmLtLLjExnLAT+NtbPEo=)
2: KAeDRZYtk4gQYh2zbQ0HADYpjok.roa (hash: 3b5QOxzEttRmMN1A9txJTsvRVrohslbNkzlikXbgEz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:10:be:0c:3d:51:f6:0a:65:03:11:57:7d:ff:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Validity
Not Before: Nov 4 10:01:01 2025 GMT
Not After : Nov 5 10:01:01 2025 GMT
Subject: CN=b6a9146353c5b5cdb6680f826ecfc2ee921a1f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:9e:65:9a:49:de:66:c5:aa:56:d3:9d:fb:
a6:ba:9d:e3:54:24:4a:f7:32:22:3d:d7:63:a0:c7:
2b:71:94:8b:f9:dd:4d:01:93:bc:1e:df:fd:f1:ef:
cb:bb:e5:18:73:7f:f3:16:bc:90:8a:6a:c2:c9:37:
31:0b:3d:c8:0c:39:5c:19:0a:84:66:01:a8:d6:0c:
69:ea:bc:9a:ea:8a:00:23:62:50:5e:2e:ec:d8:6e:
f3:84:24:23:37:33:55:6c:69:85:d4:99:88:43:6a:
90:72:1f:04:7a:1d:73:bd:8d:be:e5:10:63:0a:fc:
ff:e8:d9:50:e3:f9:37:8d:a8:fe:73:c5:7a:4e:d3:
1d:a3:33:c9:af:af:bd:2c:44:a1:42:74:08:09:66:
8e:d5:8c:17:c5:4a:a4:51:5f:bd:0f:8d:44:7d:c3:
63:c8:62:17:d1:d7:35:c0:82:c3:e0:ff:ca:c3:fd:
bb:8f:18:04:9b:f4:28:95:47:64:fd:37:19:88:a2:
e7:9f:b8:ce:ec:98:a9:fb:87:58:0c:10:32:5f:fc:
54:ed:1d:e5:81:5f:d6:c9:fe:8c:ec:c0:60:76:41:
84:57:b0:25:5b:16:09:74:5b:0c:23:7c:c0:5e:4f:
4d:3b:da:4f:65:2f:93:94:69:f8:a4:28:1e:d7:54:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A9:14:63:53:C5:B5:CD:B6:68:0F:82:6E:CF:C2:EE:92:1A:1F:25
X509v3 Authority Key Identifier:
keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:34:9d:af:71:be:9c:72:a9:1e:eb:a7:89:3f:48:c6:ea:05:
a6:a5:86:b5:b5:b8:d9:4f:73:d2:b6:24:b5:95:74:dd:ea:33:
d0:86:0d:6f:ac:f7:92:c9:6c:7d:36:62:e6:4e:71:b9:9f:da:
3b:d2:61:d6:fa:68:f8:61:03:3f:36:4f:7e:b0:2d:84:86:1e:
7f:91:48:64:8b:99:90:cc:56:a3:ff:28:71:66:77:aa:82:26:
f2:be:34:5c:9f:54:40:b4:f1:e8:51:5b:ea:8c:bc:16:90:07:
69:5a:a4:bf:3b:58:5e:61:73:cc:f8:8a:ca:a5:c0:aa:a9:33:
29:d1:93:88:71:6c:4f:db:d9:54:ef:6f:f5:dc:08:0d:ef:7f:
54:a9:ca:f2:a5:86:86:77:77:0c:cf:49:64:f1:d5:08:72:81:
5e:e0:80:3c:86:6f:ea:d9:c3:cb:96:1c:a7:de:48:d9:fc:05:
25:a9:31:a8:27:8f:7e:1e:aa:2d:f0:fa:92:d9:28:7b:b4:e7:
13:59:a7:3b:4c:8c:a8:e7:23:41:78:af:a4:1c:1d:47:6f:71:
26:e9:b9:d0:5c:b1:41:47:03:fb:53:42:df:9c:25:30:75:10:
37:2d:58:a4:e7:0f:a7:73:36:f1:e9:d2:16:a8:01:41:66:16:
39:1c:ad:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:32 2025 by rpki-client