Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
File: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft (raw, json)
Hash identifier: YQ1q1LNwvKXJSYn4ETHDZBnZDJOAmT0r6tREjdBQ50M=
Subject key identifier: F9:D8:32:63:B3:1A:2C:3E:64:C1:3B:66:1E:A5:22:9E:95:17:90:58
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 019A52D1F30B2D17D483CB0670D7EB84A00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:01:22 +0000
Manifest this update: Wed 05 Nov 2025 07:01:22 +0000
Manifest next update: Thu 06 Nov 2025 07:01:22 +0000
Files and hashes: 1: 1xvntgtwN598Xt12Wp30p-iFY40.roa (hash: Mu8yYMtQaTf8Y5ca71Jrhca8f7JY0TOmjgZFuk/22tE=)
2: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl (hash: My1JBhMC9y165Tn7wglbdi51AHDAn1DkFKcOOC1uxh0=)
3: V_bFPJiZiN3dn69rtGf2PU2V_7s.roa (hash: yf/Df7sBD+Bl6bPwS7+5B7VNWvnFlcA8NvL0Ry+NDTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f3:0b:2d:17:d4:83:cb:06:70:d7:eb:84:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Nov 5 07:01:22 2025 GMT
Not After : Nov 6 07:01:22 2025 GMT
Subject: CN=f9d83263b31a2c3e64c13b661ea5229e95179058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:6c:30:39:9b:17:d9:98:9a:b2:34:13:e0:
4e:42:71:bb:72:3e:c9:c3:fb:c5:c8:f3:22:53:0f:
e4:25:31:a4:ae:f0:0b:a9:a3:26:2a:16:aa:b7:8d:
77:44:71:a0:96:39:ea:6b:57:5a:da:94:81:39:b6:
5a:4c:05:1a:81:8e:dd:c8:3d:d6:a4:d2:8a:5e:a4:
df:07:d7:f0:42:22:6d:76:52:55:a2:e2:47:e7:37:
06:4d:6b:0b:60:1a:c1:54:af:ec:b5:7d:20:85:07:
73:bb:32:e9:f3:cf:d3:13:fa:c1:ee:f6:6e:62:eb:
ac:eb:e6:df:6c:10:54:ca:ab:13:d5:9a:e9:87:90:
34:0f:32:bd:06:50:40:ab:81:a2:6b:fb:af:c1:06:
65:86:9c:fd:e7:01:a5:2f:6c:b0:d6:3f:30:03:ff:
f3:85:f4:af:37:8f:60:65:8a:da:78:3c:48:2e:d2:
3b:b3:84:81:60:e6:80:f5:ef:a8:40:2e:93:6f:cb:
45:fe:db:7a:96:97:8b:c9:b4:fe:7d:3d:ef:b4:71:
d8:9e:db:4d:f5:11:81:74:0c:bc:3c:eb:0d:6a:6f:
6a:f9:e7:7a:41:f5:9d:49:3d:57:4c:0c:08:c2:84:
8b:4c:f5:6e:65:ee:5f:05:55:e0:51:09:23:6b:56:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D8:32:63:B3:1A:2C:3E:64:C1:3B:66:1E:A5:22:9E:95:17:90:58
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b3:68:85:ca:13:3d:3b:04:37:a3:a7:d2:a9:cc:ec:49:64:
49:62:ff:d5:17:e4:9d:ba:06:7f:cb:03:56:9d:ff:fe:56:26:
9b:5f:83:f0:82:a3:ba:8f:cd:69:86:73:5a:fc:7e:57:30:d9:
2c:82:56:21:df:13:93:bb:48:0d:29:39:ff:24:d2:e2:e4:ee:
30:f8:4e:15:d0:76:7e:b5:61:9c:70:fc:39:f1:99:aa:0c:5c:
3e:86:3b:1a:65:ec:17:c4:f2:90:f4:47:c6:69:22:cd:cb:18:
52:0a:97:4d:ae:d8:40:03:dd:08:0d:fd:f7:ec:cb:b4:16:da:
d6:54:7f:68:aa:8c:23:89:06:02:a3:59:3c:6f:93:4a:ac:a7:
cd:7a:bd:fc:2e:01:10:7d:5e:9c:5f:d0:9f:64:30:86:d1:8f:
8c:23:92:f4:35:8b:24:73:e8:c2:9f:79:07:29:fe:30:5f:05:
fd:4d:e2:78:48:2c:87:d4:fe:d6:64:eb:27:53:6c:72:ac:89:
60:8e:b8:2b:3a:08:e2:07:70:4c:5f:29:6d:d4:9b:cc:ad:7d:
6f:8d:37:06:31:6c:64:ef:9b:e9:6e:41:58:45:7c:30:ac:ef:
35:f8:db:07:5b:99:60:f8:91:3b:fe:eb:37:7f:b7:4f:d4:b9:
a8:ae:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:06 2025 by rpki-client