Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
File: 5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json)
Hash identifier: On64JHxPrCVzpNFhfYVQgP64FLp5NZCrNH7B2sDO7dI=
Subject key identifier: 53:5B:4F:79:59:D9:A5:2E:01:55:2F:67:CD:FC:8E:1D:C3:3F:A9:37
Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
Certificate issuer: /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Certificate serial: 019A4FD07C86B5DA4906DB89A3D33746E798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
Manifest number: 0E2B
Signing time: Tue 04 Nov 2025 17:00:54 +0000
Manifest this update: Tue 04 Nov 2025 17:00:54 +0000
Manifest next update: Wed 05 Nov 2025 17:00:54 +0000
Files and hashes: 1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: SsFBmCsXsuwWh/gGcUQUcADzMx+QqIUjmqlkauXU5aI=)
2: kUe56rRopp_KQsUYDln6H32rpVA.roa (hash: Nqm32SYb89EX8JBzdHqkHyeFXZStjUKylm9CZ3PRcrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:7c:86:b5:da:49:06:db:89:a3:d3:37:46:e7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Validity
Not Before: Nov 4 17:00:54 2025 GMT
Not After : Nov 5 17:00:54 2025 GMT
Subject: CN=535b4f7959d9a52e01552f67cdfc8e1dc33fa937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:d1:0b:aa:66:74:9a:1c:d8:03:b9:7b:4b:
a6:a7:75:04:6e:75:03:c5:9f:8d:ff:ab:08:58:c2:
a2:c8:5d:82:32:19:90:9b:1e:8c:c0:b0:f3:91:40:
93:10:35:4b:57:29:61:88:75:e6:cb:8c:49:a7:dd:
28:eb:56:05:5f:d3:7e:10:7b:2d:38:8c:a6:ea:0d:
8e:20:e1:8e:dc:99:fb:98:99:96:75:b3:9a:1a:53:
fe:0f:a9:4b:01:e5:41:94:db:79:55:52:f7:c2:ad:
78:9f:ea:3e:4a:e3:c4:8a:37:49:08:4f:4c:56:00:
38:b4:a4:71:97:8f:1b:d0:2b:66:13:6e:3b:d9:5c:
7b:29:0d:9e:27:ac:75:4a:7d:d6:81:8c:52:5f:6d:
ed:ad:49:86:44:a0:9c:3c:e2:53:f8:17:57:f8:3a:
12:6a:52:b1:29:9b:de:b8:a4:c7:06:b2:f1:8e:ee:
99:eb:f8:da:22:28:1d:ec:41:ff:24:c0:a8:df:84:
50:53:1a:2d:14:be:bd:ee:fb:0f:26:32:c5:af:4c:
4a:d6:56:ed:62:ea:23:72:18:88:2d:12:3e:50:50:
9a:64:07:b1:d3:c1:93:0e:13:f2:1a:53:75:53:81:
5f:fa:00:04:c5:85:38:45:e4:9e:d6:4d:41:b5:f1:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5B:4F:79:59:D9:A5:2E:01:55:2F:67:CD:FC:8E:1D:C3:3F:A9:37
X509v3 Authority Key Identifier:
keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f0:76:dd:d7:47:5b:4b:86:18:ba:00:76:9b:e6:e7:42:79:
2d:1b:55:7b:74:37:db:4e:12:14:11:3f:44:42:ac:68:1e:3e:
29:6e:e5:14:9e:af:d1:c1:97:7e:10:fb:8a:4e:c8:f0:71:09:
34:6b:2d:66:03:5b:86:43:fa:44:c7:e1:3b:24:d8:8a:94:dd:
16:ca:b3:ab:81:e7:3d:ff:3e:f7:b1:6c:e3:cb:c9:4f:e0:a4:
2c:97:07:09:ba:db:f4:b2:4b:78:30:e1:63:22:74:fd:ec:5e:
54:d3:da:1e:23:b8:b1:d9:dd:64:d4:d5:2a:72:7f:02:26:4f:
32:37:69:85:52:5e:90:0d:23:fd:9c:64:7e:22:21:ce:0e:29:
e1:78:36:c2:af:8e:93:8c:86:8e:7e:9b:81:d2:83:82:15:25:
1d:69:3f:c6:bd:67:6f:8c:34:db:8f:39:05:6c:6b:19:6d:d5:
5f:ac:43:5a:85:a6:dd:6b:be:1e:98:54:be:fc:20:fa:03:88:
1d:9e:67:8d:68:fe:ab:b7:0c:26:4d:59:fc:26:ad:e9:c8:b5:
fb:ed:2b:dd:5f:8c:e5:9d:bc:7e:b6:7e:7b:2c:33:5b:55:f5:
1b:da:00:cb:4b:a7:f8:91:6a:8a:78:7f:b5:53:3e:eb:af:6e:
5b:f3:15:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:09 2025 by rpki-client