Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: 2ofgzopsQ3s0MVi9wZAP3UD0td91ViSRLQ0YiqgZskk=
Subject key identifier: 9E:62:65:8D:8B:75:E3:94:07:23:02:1C:51:E3:81:51:ED:DA:66:57
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 019A51513AE6D7694F447291AF8A5E674C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 0E8F
Signing time: Wed 05 Nov 2025 00:01:09 +0000
Manifest this update: Wed 05 Nov 2025 00:01:09 +0000
Manifest next update: Thu 06 Nov 2025 00:01:09 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: XKC34KTYfikzBGhqcFv/vNrSUgvN9kYoMMhNZuQgNH0=)
2: vhYKMa2Z6sRh78styyEQC2ay13Y.roa (hash: q6ISR7QoOYSfixxm6mwluVodtW8Dzcm/t68jGp50cGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:3a:e6:d7:69:4f:44:72:91:af:8a:5e:67:4c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Nov 5 00:01:09 2025 GMT
Not After : Nov 6 00:01:09 2025 GMT
Subject: CN=9e62658d8b75e3940723021c51e38151edda6657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:43:2a:dc:97:d2:16:c0:c8:51:4d:b6:34:
e5:c3:85:70:b9:1e:e2:7f:f8:47:3c:93:bc:f4:28:
2a:da:4a:c3:1d:c8:a3:68:5b:76:d6:1c:9c:d2:11:
71:ed:3e:eb:50:c6:b6:00:e8:d7:fa:b6:f1:ce:8a:
ab:b2:ec:5c:40:3d:14:16:c5:9f:7d:be:02:8c:b5:
7a:2f:92:af:a1:ec:02:7e:f8:9a:16:2a:d1:5c:88:
c5:c3:70:a5:e9:1f:9e:d2:3a:8d:82:fb:9c:e5:3a:
82:c2:1d:00:e3:0c:cf:9b:ee:ff:a5:76:3f:43:56:
80:f3:74:83:d8:11:93:2a:d6:78:c5:af:7d:5f:c8:
3c:de:22:fd:5e:03:41:c9:a6:8a:4d:d5:f9:c4:81:
70:83:8f:ca:73:33:50:1e:f7:62:55:85:bb:df:c9:
6b:0c:b8:25:75:b6:f9:97:71:e5:f1:e3:2b:34:47:
61:20:cb:59:82:3c:44:b2:0d:bb:48:88:93:67:c0:
f8:c8:36:75:65:d5:92:fa:f9:be:c3:4a:c3:2d:a3:
32:ed:6d:f9:8e:d4:69:57:82:ae:0c:08:26:0e:1f:
28:eb:34:02:7a:d6:c1:17:a6:10:c4:5f:0e:2e:15:
77:5b:c9:40:b1:77:ec:fd:4e:b9:0c:c0:ce:56:ea:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:62:65:8D:8B:75:E3:94:07:23:02:1C:51:E3:81:51:ED:DA:66:57
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5a:c2:f0:6d:8f:40:74:e6:99:75:4e:bb:ab:69:2a:a9:7a:
49:fb:93:eb:64:d4:e6:cf:e5:0e:c9:0a:e6:ab:95:33:41:54:
ac:13:a8:8f:8e:9b:12:b7:29:1c:48:e6:ec:b7:32:35:75:99:
68:e8:f4:a6:50:c1:5f:2c:65:87:40:a6:ca:28:c8:d1:01:84:
13:44:9c:f0:96:6e:04:72:0d:ae:38:e0:2b:3a:cb:f1:ec:7b:
b1:46:73:f7:3c:34:d1:43:33:e4:f5:db:07:24:42:ad:6d:33:
b6:58:30:55:d8:cb:de:47:e4:e1:97:ae:03:4b:ce:08:50:7f:
21:a3:26:dd:94:d2:46:db:f2:17:24:cd:f4:e9:2a:f5:c4:94:
97:01:b4:d0:2f:d3:29:3e:80:96:5d:d4:d6:17:16:10:36:05:
81:40:ae:36:8c:20:5e:2a:fb:3c:ab:8c:17:d8:0a:b9:45:5f:
86:2d:7d:c0:49:c7:6a:fe:87:4d:3d:00:09:f9:4a:5d:32:3b:
ad:34:d3:df:b3:cd:8c:ab:ca:ac:8b:bb:d2:96:6a:6f:26:96:
2f:39:f8:f9:c3:3a:dc:e3:65:64:a9:39:4d:51:52:e4:80:a9:
bd:5e:15:db:7b:17:26:cd:23:1c:bf:19:9f:eb:9a:15:80:3a:
c0:b6:63:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:06:51 2025 by rpki-client