Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File: 5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier: tJfR7p8MQrjqY5Y8OsvaJgv3XlPG9BzMWSeYBguSM4k=
Subject key identifier: 08:81:8B:58:54:2F:29:89:23:FE:7F:B8:6C:F2:0D:6F:29:56:49:66
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer: /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial: 019A4EF5094E6D8AE0352E1FD32C7094BDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number: 0E6D
Signing time: Tue 04 Nov 2025 13:01:12 +0000
Manifest this update: Tue 04 Nov 2025 13:01:12 +0000
Manifest next update: Wed 05 Nov 2025 13:01:12 +0000
Files and hashes: 1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: 8tNRmKeXhRoUAtmUDcgpPWbzGrzqOkYFlEC6d0GW9Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:09:4e:6d:8a:e0:35:2e:1f:d3:2c:70:94:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Validity
Not Before: Nov 4 13:01:12 2025 GMT
Not After : Nov 5 13:01:12 2025 GMT
Subject: CN=08818b58542f298923fe7fb86cf20d6f29564966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:dc:af:b2:45:4e:d2:49:68:a6:07:bb:86:
44:a7:fe:fe:29:29:aa:cc:be:41:e7:30:b2:9d:0b:
f5:10:c0:7c:9d:e3:79:43:49:71:92:fa:be:ac:3d:
5e:88:82:60:6b:8e:f8:89:e4:68:62:7e:a5:17:41:
35:a2:f9:43:cf:83:ac:09:6a:75:78:81:9f:de:ca:
99:56:69:be:2e:83:5b:3f:a5:e2:1b:7f:88:99:ea:
a8:07:81:1f:3f:50:7f:14:f4:19:ba:15:53:0a:d9:
47:2d:ca:69:ee:98:63:1b:3f:28:99:67:71:e4:72:
aa:4e:e8:41:b9:6d:09:b2:a4:16:b0:e2:43:ee:9c:
e1:57:2b:18:64:ec:f0:93:d7:5d:90:84:6e:a7:3f:
af:65:f4:dc:4d:a1:df:ec:d5:a5:c4:15:2d:93:99:
d2:ed:f9:2d:8f:7d:5f:c0:e8:8e:e0:61:15:2b:00:
5c:cb:a7:83:5f:d1:1a:a0:e2:e8:33:3d:72:91:02:
39:13:ee:a4:7d:85:8f:ad:cb:fd:6f:95:49:cb:e0:
a6:72:50:cf:b7:a1:f1:a9:b7:80:e7:69:77:4c:77:
90:cd:54:4b:5a:b4:4b:4a:0f:c3:95:fe:a4:7f:e4:
a6:46:06:39:35:df:71:b2:7e:af:11:c5:46:89:ea:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:81:8B:58:54:2F:29:89:23:FE:7F:B8:6C:F2:0D:6F:29:56:49:66
X509v3 Authority Key Identifier:
keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:17:25:1f:a6:68:df:15:ce:54:60:cc:3f:60:f4:1d:0a:66:
d8:a2:f7:43:96:10:04:18:c0:50:18:eb:3a:6c:85:db:48:89:
27:2b:d2:b1:5a:00:3f:04:94:6f:25:52:7a:a9:75:ba:31:75:
c3:d1:4e:d7:76:cf:88:9a:cc:a0:33:cb:4b:60:65:cc:aa:b1:
96:fe:b0:e1:be:2f:6a:fa:b5:d5:42:bf:0d:4f:3a:2d:9e:ff:
4a:45:ac:6e:0f:e4:ae:5b:79:83:12:1b:bd:09:d3:71:51:31:
fe:04:64:ef:f9:86:f5:6d:b3:8f:dd:39:e6:f0:96:5a:c2:0a:
a3:e4:f1:31:af:c9:eb:a2:a8:dc:d7:e9:f2:d0:94:29:a8:31:
8e:7c:3b:f9:64:bd:8d:b1:b2:f8:1c:8b:18:21:fe:cd:6f:a4:
81:13:c7:6e:a4:3f:6e:cb:4b:aa:f1:e9:23:83:25:03:2f:a4:
c7:a1:d9:17:7f:fa:83:c3:4b:6d:26:67:02:2b:64:c6:a8:eb:
f4:69:b4:26:72:c5:a5:fb:15:24:04:27:56:1f:9e:21:47:7c:
ce:38:3f:7b:08:14:4e:9b:4f:60:38:b2:90:ef:ed:3c:0f:9b:
66:f8:72:6b:6a:b4:89:f9:b2:94:f6:9a:f0:9e:83:f4:0d:d9:
c8:1f:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:52 2025 by rpki-client