Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
File: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json)
Hash identifier: 2Qk/Jrh/TH6Bdj3hCra+RTxJVol061yH4wbyfTAROZY=
Subject key identifier: 5B:1C:6F:57:69:D8:F9:1F:F4:83:D4:12:60:AC:BA:B7:1C:F4:9F:BC
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Certificate issuer: /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial: 019A4EF4DD6DE9E435155FA60D407C0A2CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: VCB3B9/xdNFnJ88dEAE7+xzaZjWDC2dfO9h0oPNjzc0=)
2: N5B5WcceOX8-5008CdVB5Z2Yf_U.roa (hash: N6x2VI2LM0pBE2WvbvROlXs2jZlgeDuNmVuOamFJP3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:dd:6d:e9:e4:35:15:5f:a6:0d:40:7c:0a:2c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=5b1c6f5769d8f91ff483d41260acbab71cf49fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:92:f0:ac:c4:dc:2b:c4:26:41:74:18:ee:
50:25:d1:a6:3e:3a:1d:f4:1a:71:9d:6f:ca:3c:bd:
b2:13:8f:98:70:6e:3e:b9:f3:a6:f5:81:9c:8e:d1:
b3:36:08:7c:ff:33:5b:d2:0c:6c:d4:87:06:0a:f8:
ea:4a:10:ae:8f:b7:13:4c:32:96:8d:40:92:a0:16:
4e:f9:d8:42:df:8a:01:39:28:d7:51:67:a6:ae:c1:
2b:c9:23:f9:a1:23:0a:bb:22:ec:53:e6:ca:46:06:
2a:28:6e:a0:b3:d9:76:80:36:0d:92:08:32:60:26:
94:ce:11:f4:ed:33:46:70:00:b5:0b:6d:0e:ca:12:
9f:d6:95:a3:c9:d2:1c:78:bb:6f:9f:fe:3d:4b:31:
23:75:be:9a:0d:a9:9a:ba:60:10:1c:e4:f6:ce:1a:
d5:e5:5f:64:80:68:23:6f:2f:0a:59:38:8a:51:f0:
df:01:13:9e:54:ba:2b:27:6b:58:1f:11:dd:3f:b7:
0e:bc:31:56:df:7b:fe:cd:7d:24:d3:fa:f7:00:22:
81:b5:bb:25:a2:25:ad:7e:f1:c1:fa:cf:af:9f:70:
c6:2a:df:d8:69:9e:75:a2:d7:e5:f3:ca:9b:2d:9b:
c2:48:a2:af:20:86:6d:05:8c:8d:18:94:a3:d9:db:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:6F:57:69:D8:F9:1F:F4:83:D4:12:60:AC:BA:B7:1C:F4:9F:BC
X509v3 Authority Key Identifier:
keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f8:7b:c7:a0:4d:41:86:b7:7a:dd:85:66:ee:64:50:17:6a:
04:4d:b8:f8:f6:a6:b1:9b:16:d9:d1:93:d6:f6:f3:d1:b1:51:
37:f2:39:dd:40:38:08:ef:30:f1:cc:3c:23:b2:1a:75:51:51:
50:d5:c5:fc:c5:8f:5f:9b:2a:ab:b9:36:e1:f7:7d:72:5f:83:
8a:bf:6d:94:14:2e:66:fb:d3:59:9c:c2:07:18:c8:81:be:3a:
f1:5d:5e:41:d1:e4:36:e5:92:aa:97:e2:d1:e5:f0:b2:61:62:
f0:6d:a6:9d:a0:1f:2b:6e:bd:f0:a3:74:08:dd:a7:8d:ea:dd:
44:c7:fa:be:66:74:50:5a:af:07:5b:a2:36:97:33:e9:64:d2:
cb:da:3c:93:a5:be:9e:e6:57:96:89:b7:08:55:9b:96:73:7e:
40:b7:cf:01:92:f2:f0:bf:fe:3c:7c:2f:5e:cf:dc:fe:a7:e6:
81:91:14:8f:2d:96:d4:10:ea:75:4d:78:ef:90:02:62:38:69:
77:15:2e:f5:13:71:4c:b5:96:d0:1c:9e:f4:02:be:c4:9d:2e:
2c:e0:5a:ef:3d:ff:6f:83:3f:50:7c:77:8a:dc:49:60:c3:62:
58:16:7f:4c:8b:4d:33:e5:c2:11:7e:d1:5e:1c:ee:06:ea:fb:
d6:fd:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:03 2025 by rpki-client