Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier: 7jYObAyqepcuauKGi+XsOli8lpNTlbtEcWHCGWgL5qU=
Subject key identifier: 83:1C:2D:E7:5C:79:22:89:14:0F:D9:6E:A1:09:13:27:38:D4:B1:DC
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 019A53E3BCA6AE522C408E678C2321D2A2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number: 4D
Signing time: Wed 05 Nov 2025 12:00:25 +0000
Manifest this update: Wed 05 Nov 2025 12:00:25 +0000
Manifest next update: Thu 06 Nov 2025 12:00:25 +0000
Files and hashes: 1: 4T1bySiGudbsbv8Y6SYMT68IAlk.roa (hash: j45Gs5R+QR12QMbnB1e3ALfJJc32d03rqtj+AWZZhSU=)
2: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: AHZlnwb94UHPAVqZ+NBIyTCQL8QUgFjLcg26agCjDnM=)
3: rD8reJf-xFp9NkhhBOaHbdsK8CQ.roa (hash: vWwQMoE/PcCmAMEjuRLL+8UidHSYOb6QmW8QLct4Gd8=)
4: yLhKfT4WYSZkn2VNCGfPfTmwkYE.roa (hash: 8tnnWUxQ+gmE22xkxlM/+md2moZokj3FfemqmCXdm1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:bc:a6:ae:52:2c:40:8e:67:8c:23:21:d2:a2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: Nov 5 12:00:25 2025 GMT
Not After : Nov 6 12:00:25 2025 GMT
Subject: CN=831c2de75c792289140fd96ea109132738d4b1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:73:51:ef:d1:e6:4c:08:1e:9e:2d:80:9f:
d9:cc:f3:6b:ce:c4:f2:61:aa:ca:36:d5:4b:b1:da:
0c:92:70:3d:8f:63:f2:05:63:b8:a8:0e:ab:72:5f:
21:4b:04:b8:f3:41:c1:07:73:b0:ee:3a:7d:7f:8b:
40:af:5e:93:7d:fe:5b:65:89:d7:cd:db:45:a4:de:
9a:11:a1:a7:eb:ff:35:b9:3c:08:6a:52:f1:3f:2c:
8a:17:85:3f:c3:24:7e:a8:f5:d4:9e:3f:96:d5:2f:
e3:ab:d3:42:90:69:a4:d6:80:ae:0e:71:a1:44:e6:
69:b5:6f:d9:05:98:80:40:de:af:12:9b:8e:cf:64:
b0:f2:69:f3:1b:c6:42:41:c6:f1:bf:54:e4:d0:14:
88:40:0e:fc:18:92:98:a1:cd:4e:89:46:5f:cb:fd:
83:c1:92:f8:6a:3f:89:c4:ea:71:ca:5b:a3:c7:74:
13:03:dd:fc:1c:56:c0:19:cd:5e:ab:f5:61:7d:12:
66:31:75:d8:a3:4f:4c:63:05:41:d3:37:1d:fb:ff:
87:7e:92:3a:32:2d:ee:b2:91:1b:bf:89:8b:ad:3c:
88:9d:29:fc:1b:21:03:47:86:a2:56:85:6b:ed:ac:
dd:ca:e6:d2:f0:cb:d3:cb:92:94:3e:bf:95:3f:40:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1C:2D:E7:5C:79:22:89:14:0F:D9:6E:A1:09:13:27:38:D4:B1:DC
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4f:5c:c9:9d:5d:6e:6e:46:9f:f8:18:a4:30:0e:cf:5d:40:
85:0e:dd:ee:b4:c1:db:f5:53:5e:20:4d:0a:d7:9d:78:c2:80:
54:fa:00:f7:a3:dc:56:32:d6:c1:64:98:e8:25:a8:25:39:45:
1f:f0:c7:81:41:cb:89:fe:e2:ae:d3:a9:82:e1:9e:2f:fa:af:
14:af:57:0a:d1:d2:c7:15:0e:12:c0:ed:0c:02:ef:71:c5:16:
95:ac:ea:93:41:81:53:33:ef:6c:48:13:14:c8:67:d8:25:f0:
ac:e6:b7:bb:e8:1b:7b:e2:70:25:e4:40:ae:82:9d:a2:83:77:
97:88:7b:5b:55:ed:e8:00:41:69:44:13:32:2e:42:ed:55:0d:
a5:e8:12:8b:88:8c:80:6b:0c:61:d8:a9:32:db:1c:b2:8e:2f:
58:8a:46:6a:43:aa:ec:c4:97:63:29:f4:52:06:18:c2:3d:c7:
0b:33:e4:f0:3b:a3:b4:b2:d1:fa:6a:d3:b1:00:1b:05:b3:42:
38:6f:60:c8:a3:b4:f1:42:58:96:ed:f3:c0:08:77:f5:f0:06:
ba:42:aa:40:41:92:43:2a:e9:ad:15:fa:19:12:69:0b:ea:fa:
89:9c:11:6a:1f:d5:2a:f2:29:0f:8b:93:31:88:0f:db:57:4b:
b5:ef:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:57:11 2025 by rpki-client