Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: h3oOF+5U+2cp4UWLm8qDoKpZfpFwCI3QhMAXF5WuaJo=
Subject key identifier: B4:3A:DC:15:B2:71:43:EA:58:BB:FD:8C:64:6D:AD:6A:9C:64:C1:A1
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 019A5375BB5127C8C026F3E4768EB31059C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 10:00:15 +0000
Manifest this update: Wed 05 Nov 2025 10:00:15 +0000
Manifest next update: Thu 06 Nov 2025 10:00:15 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: A7MgDT9H9b1rfEwAv2SmWXYqlfeC5fVrYTNSjrT7kqw=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:bb:51:27:c8:c0:26:f3:e4:76:8e:b3:10:59:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Nov 5 10:00:15 2025 GMT
Not After : Nov 6 10:00:15 2025 GMT
Subject: CN=b43adc15b27143ea58bbfd8c646dad6a9c64c1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:bb:47:d2:44:ff:4d:7c:49:5e:d7:11:fb:
d1:37:a7:d8:7b:57:31:0f:05:38:86:6f:6e:60:cc:
a8:88:0d:07:78:b7:12:bd:a7:c4:e5:f9:42:a3:4a:
c4:28:81:0a:ac:47:30:2b:f1:4d:35:d4:9d:36:b3:
4f:76:cc:92:e5:c8:5a:23:94:16:2b:8d:ad:fb:f6:
fd:56:81:95:3b:f4:ac:03:5a:44:23:91:07:d7:42:
6b:e3:4c:9c:ba:1a:0e:33:05:11:8b:41:9a:80:b2:
03:77:1c:63:87:64:bb:6f:c4:36:c9:be:98:af:95:
1e:f8:cd:86:7b:34:58:51:bc:35:3e:57:f8:ca:a8:
3c:7f:2e:8d:df:49:4e:ae:22:91:86:59:d0:c2:e1:
a7:6e:22:a0:cd:f2:c3:75:87:f0:0a:32:ca:40:25:
01:1c:a3:ba:ce:ac:a9:15:92:e6:31:96:e8:52:d9:
27:88:a0:0d:69:d6:92:90:7c:8e:66:f0:e1:7e:fe:
9a:c3:9b:7d:bc:3a:9e:8f:8a:bf:6e:9e:50:c3:b3:
0b:c8:0d:92:d4:91:d3:47:b9:7a:1d:69:45:ed:7b:
4c:07:ea:b6:7b:81:d5:38:80:b3:25:db:8c:ae:35:
57:d6:e2:cc:3e:65:e0:a4:d8:16:8f:1d:c6:26:a9:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3A:DC:15:B2:71:43:EA:58:BB:FD:8C:64:6D:AD:6A:9C:64:C1:A1
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c3:e4:13:e3:9f:ce:9c:cf:e2:2a:56:85:fe:48:60:1e:ba:
1a:ca:4a:ac:9b:7f:a2:c6:81:3c:0e:0a:d7:08:48:4a:51:23:
3b:b8:4f:1f:f1:c1:11:ed:be:c8:26:ec:7f:1e:e0:23:ea:0d:
fb:f5:6e:48:70:18:01:ed:03:05:51:6c:12:43:71:f1:ce:a4:
82:57:ee:29:4b:23:ea:64:2d:f0:66:46:3d:94:1e:c6:85:03:
cf:d8:4c:0f:e4:88:2b:78:fd:ab:83:01:6b:46:82:40:8e:85:
e8:87:da:dc:ad:fd:04:9e:09:41:88:0a:4b:a1:fb:ad:9e:7b:
d3:c6:7c:c6:12:60:37:4f:6f:9c:21:60:29:9a:e0:8f:1d:c8:
10:24:4e:05:ba:c2:50:ee:37:5a:80:ee:13:7d:11:84:36:2f:
3c:be:50:ed:c9:2a:c4:83:67:ac:ff:26:35:15:f5:bb:50:df:
54:ba:25:ba:e5:c9:78:55:b7:ff:f9:27:c1:0c:e5:d2:f1:1f:
02:0a:fe:a9:80:4d:a4:91:ec:74:79:d9:cf:05:a0:c1:0d:98:
0e:0e:5e:ef:a5:60:25:6a:76:7f:9f:12:78:6a:f1:eb:b2:b5:
17:6c:79:83:f4:d6:a3:a9:11:8a:a1:29:16:ee:f0:46:cf:ce:
00:2a:37:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:08 2025 by rpki-client