Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
File: 5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json)
Hash identifier: g7kSuHJFmej0okRlkj6WM6t+FNxodwarJCwYc+xNaT8=
Subject key identifier: 65:32:16:21:49:1D:8C:BE:B9:A9:5D:FF:4F:B6:7F:19:55:37:C3:F1
Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
Certificate issuer: /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Certificate serial: 019A503E6F1A13CF1C9EDD8E64E666F49B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
Manifest number: 1554
Signing time: Tue 04 Nov 2025 19:01:00 +0000
Manifest this update: Tue 04 Nov 2025 19:01:00 +0000
Manifest next update: Wed 05 Nov 2025 19:01:00 +0000
Files and hashes: 1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: WZPQb/sKtY8Ql1TpF7mzkfZwiQ7x1WWg2TLX+ID6nXQ=)
2: taYmShyZEWW4U8j1R_6KnQDOweM.roa (hash: GjJYuf7T9BVgN+aam1ca3lpMWRi293GWW2n+eayTU5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:6f:1a:13:cf:1c:9e:dd:8e:64:e6:66:f4:9b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Validity
Not Before: Nov 4 19:01:00 2025 GMT
Not After : Nov 5 19:01:00 2025 GMT
Subject: CN=65321621491d8cbeb9a95dff4fb67f195537c3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:54:70:4a:7b:d1:28:f2:29:8c:6c:16:0f:
f5:01:5b:36:10:7d:eb:aa:c6:13:34:fc:f9:2a:09:
da:e1:44:ed:13:3e:74:b6:81:6b:f1:1f:8d:da:7b:
a2:28:a7:9a:50:c5:07:02:97:a2:c1:e2:c6:0f:04:
e4:cd:ca:9c:7e:a7:57:fb:49:5e:c0:b6:80:5c:ae:
21:b7:0b:2e:d1:ed:a2:1f:ba:72:4b:08:58:64:a7:
a4:f4:8b:57:6c:44:76:91:48:ca:a2:18:57:a2:82:
c0:e0:9d:67:66:95:18:5d:bd:da:5f:eb:4a:9b:f6:
fb:94:85:c5:3f:9a:ac:ab:b2:04:79:e2:52:cd:71:
d8:f8:35:12:c1:e6:7a:c2:33:ef:cc:e8:f8:f8:79:
25:4c:7e:eb:7b:06:21:ba:92:4f:da:04:6f:3f:a6:
90:66:04:e5:3c:e8:d2:e5:b8:32:fe:46:37:a9:0e:
6d:1e:ca:eb:ac:67:a2:f5:14:4d:cc:d4:b9:69:ec:
68:f0:70:e3:d9:bb:c2:16:cf:6a:2f:0a:88:7e:16:
82:2f:4f:c1:e1:0c:7d:46:7c:b9:7f:d6:fa:dc:f5:
5e:18:91:2e:8c:6f:06:01:9b:4c:26:5e:06:97:e9:
f9:73:1f:09:a2:12:99:c4:d3:2f:b2:54:08:43:4d:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:16:21:49:1D:8C:BE:B9:A9:5D:FF:4F:B6:7F:19:55:37:C3:F1
X509v3 Authority Key Identifier:
keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:26:b6:2d:f4:c6:27:14:7e:71:a5:ac:ee:f4:ed:63:89:02:
96:96:bf:99:75:b9:77:f1:a5:5b:7a:8a:db:93:ed:53:ca:f0:
d1:98:48:72:d4:a7:a2:0b:8f:7a:75:fe:ce:d7:9b:24:32:3d:
8e:c6:3f:b6:02:c1:14:43:0c:c2:f9:eb:fe:37:fa:a4:dd:4a:
97:ae:37:e4:7a:e7:f1:37:1d:45:ee:91:62:fb:45:11:0b:2e:
9a:bc:1d:79:13:a1:de:ec:33:78:59:1d:b7:c1:ae:81:38:1d:
d7:3d:8a:98:85:1a:fb:c7:5a:92:1e:1e:96:68:35:65:1b:df:
e3:01:56:7c:7e:5f:62:29:de:5a:77:1a:de:7d:2a:06:e7:36:
11:95:30:13:55:ee:30:cb:5e:42:63:82:24:17:0d:9d:b0:61:
a3:3f:97:61:7f:fa:36:10:d3:69:31:f7:ca:48:78:9b:e9:69:
61:2e:b6:1f:77:ab:fc:f3:4a:14:a1:24:a3:9e:2b:ca:67:88:
5e:ff:96:03:d2:b2:67:e7:ae:a6:be:6a:10:b1:5b:74:60:4c:
84:a3:bf:7d:38:89:42:f3:31:1b:ef:f1:77:ef:7e:55:36:e4:
d6:b8:52:96:ba:54:06:e2:98:46:36:07:43:f9:07:ea:8b:fd:
82:61:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:13:37 2025 by rpki-client