Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: wOSW69WRq3VhjOOGmdOtJjEXBRVqPCsmkQ373BetN1A=
Subject key identifier: 76:21:D2:50:1B:CE:1F:5F:BA:85:68:6F:27:CE:5C:87:2F:FF:9C:D1
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 019A4FD04E405D9693142CB9E75047CAF333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 149F
Signing time: Tue 04 Nov 2025 17:00:42 +0000
Manifest this update: Tue 04 Nov 2025 17:00:42 +0000
Manifest next update: Wed 05 Nov 2025 17:00:42 +0000
Files and hashes: 1: 4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa (hash: ZVBB3cjYOT3VqfWQ4/A+wZjufx+V4UWOyQ4pBr48oC8=)
2: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: 6X67hOiA7qYCibe5AWEd2fDNa3zPOYA+qTYOVta9Vus=)
3: W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa (hash: BRMekWIhLsWnxOA/bB8odlVJv4hlD7aXq4PRDSkGzkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:4e:40:5d:96:93:14:2c:b9:e7:50:47:ca:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Nov 4 17:00:42 2025 GMT
Not After : Nov 5 17:00:42 2025 GMT
Subject: CN=7621d2501bce1f5fba85686f27ce5c872fff9cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:b0:1c:30:52:e1:61:45:f7:0b:a8:d3:1d:
e1:dd:8f:26:0d:fd:f6:f3:e5:5f:d4:4e:e3:b2:7f:
3f:90:98:d6:b8:77:51:58:e6:83:31:27:3d:9b:41:
7b:23:a3:c9:c4:3f:69:14:34:52:7b:9b:73:c0:2c:
f7:0f:04:ce:c6:f8:ce:2d:51:fc:cc:16:67:d5:fa:
a7:0f:f2:bf:da:63:28:c2:20:2d:2e:47:77:c2:36:
c4:a9:4c:f0:9d:87:61:7b:14:9e:c3:4a:f3:67:8a:
1b:fe:0d:71:47:7a:4f:47:f8:1d:e4:7f:51:c6:73:
b6:48:be:04:32:03:44:cd:50:85:ef:e8:8c:1c:3e:
a3:b6:c4:08:d9:4d:b0:a9:75:db:f7:e3:a6:4d:ab:
1d:6d:af:c5:4e:f8:53:28:18:2e:80:f5:84:aa:74:
fc:70:15:c0:e3:50:39:77:62:75:c6:16:34:be:6d:
fc:cb:89:9a:84:67:99:72:72:85:24:9e:be:b0:d7:
6c:c1:12:19:64:2a:4b:07:5a:33:46:b3:ac:72:7c:
63:2d:a9:1a:22:c8:13:a0:d6:27:bb:cc:8a:00:69:
10:c8:7c:29:11:74:4c:a4:96:0d:f7:97:d9:5b:28:
34:86:c2:49:b5:c8:b5:4b:b3:9a:e1:74:e7:be:89:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:21:D2:50:1B:CE:1F:5F:BA:85:68:6F:27:CE:5C:87:2F:FF:9C:D1
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0d:42:a3:8b:5e:d6:57:45:9a:d0:c4:33:20:a1:21:9d:5f:
50:3b:d8:97:03:ef:b0:bb:8f:a5:8f:f1:5e:db:a4:4d:24:82:
63:3f:1d:48:f7:b8:eb:14:43:72:59:21:c6:16:74:06:64:58:
6b:32:01:0d:3e:0f:17:f5:81:47:06:d9:94:6e:46:df:ee:b0:
f5:1b:ed:aa:39:87:72:b5:42:eb:52:da:da:d0:6d:34:68:f0:
44:6e:b6:c1:35:0a:6e:46:ea:13:e7:78:21:7c:66:3a:07:65:
e3:5d:27:bd:ba:91:bb:45:c1:32:58:bd:57:2f:b3:80:07:09:
3e:b9:8c:f1:e7:70:53:e9:37:b6:73:61:d6:e8:a5:bf:83:e0:
9a:ca:db:b2:d5:8a:21:66:f2:f6:c4:1f:33:a5:ec:eb:d5:52:
35:e0:e5:38:bb:81:91:0d:22:5c:39:b0:f0:2f:7a:08:28:b8:
9d:2c:73:20:52:54:ed:57:61:18:ea:18:ef:7f:9f:36:6e:98:
a4:8b:9a:f3:84:3d:ba:91:ba:fc:e5:d0:22:d8:68:32:8a:0b:
05:04:46:51:3a:29:96:60:d9:74:ba:29:fd:79:d5:11:f4:27:
4f:07:e0:7c:fa:9f:4f:56:a2:64:1d:97:99:22:91:91:e4:b1:
8c:3f:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:40 2025 by rpki-client