Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: azUcRldXa4LAs4XoePPWkBqq13ITMx06fk6R+E0ecgI=
Subject key identifier: 2C:46:94:9D:14:B0:B1:15:D0:0F:6E:22:9E:80:0A:F4:34:C8:AF:2D
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019A53764008BEECAD3444D9CE0E24EFD0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 1469
Signing time: Wed 05 Nov 2025 10:00:49 +0000
Manifest this update: Wed 05 Nov 2025 10:00:49 +0000
Manifest next update: Thu 06 Nov 2025 10:00:49 +0000
Files and hashes: 1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=)
2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: R7OCBN0HZxsZ2M8S5I5kAQgxeXg56iUMuUS5iBP8Mdw=)
3: 9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa (hash: zTkYPMu8h5Z/txGXaV3nKQYC/0+0sqJF536VnkSLAUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:40:08:be:ec:ad:34:44:d9:ce:0e:24:ef:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Nov 5 10:00:49 2025 GMT
Not After : Nov 6 10:00:49 2025 GMT
Subject: CN=2c46949d14b0b115d00f6e229e800af434c8af2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:cb:8d:91:51:30:bb:a5:68:4c:04:2b:56:
5b:9d:b3:38:c9:ad:10:ea:fa:4f:02:69:ee:7b:bf:
1d:73:0e:25:ff:96:97:fc:be:6c:fd:c2:05:ca:7b:
03:2f:b9:44:77:75:4d:ff:b9:d3:39:5b:ec:3a:d9:
5a:38:5d:fe:17:cb:a4:86:b9:5d:d3:9b:19:8d:93:
63:e1:cf:bc:4e:45:28:57:2d:77:32:f1:ef:2b:e4:
7a:8a:33:b8:3f:cd:43:98:b2:07:05:be:de:ab:7e:
43:da:0d:ef:3d:0c:f0:da:e5:a1:a7:ce:75:68:be:
4b:bf:65:15:67:72:9c:70:f1:19:1e:8f:a6:27:d2:
9b:5a:d5:06:51:35:6e:28:91:6b:36:e6:94:96:65:
59:52:e4:7f:5d:e1:8e:78:10:87:f1:81:24:f0:44:
af:d7:3c:da:36:c2:ae:e0:4e:a5:10:c8:29:c2:5c:
5e:ea:0c:fd:38:ee:78:40:37:b2:1d:19:e2:f7:00:
bb:b6:23:fd:18:96:24:b2:09:6e:49:75:36:7f:bb:
5c:96:3a:4e:b4:9b:6c:8b:1e:97:2b:0e:2b:59:16:
f7:19:50:5c:87:19:d5:8d:4e:53:a3:1b:15:cc:6c:
97:19:49:4a:3d:65:a5:e8:57:f7:78:16:ef:58:87:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:94:9D:14:B0:B1:15:D0:0F:6E:22:9E:80:0A:F4:34:C8:AF:2D
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a5:0e:4c:d9:c2:ba:28:f8:1e:4a:03:54:26:7b:84:c4:49:
e1:5b:39:03:45:eb:10:ae:53:45:8e:4c:14:a4:10:fc:82:d1:
5f:ab:04:8e:d7:74:69:78:b1:16:74:07:6b:40:d9:61:af:00:
da:8e:32:3e:04:65:b5:69:14:2d:37:92:43:1f:96:ae:0e:7f:
19:6e:7f:b0:b4:a4:da:30:59:ab:90:20:75:5d:49:4a:dd:13:
8a:8d:a8:86:83:90:26:05:71:ed:9c:35:c2:ce:c7:57:8e:a6:
29:0c:4c:66:51:a7:58:54:d1:49:1b:b4:b3:e6:af:35:9d:19:
d2:58:38:f2:ab:28:06:1f:e2:25:ab:54:9f:42:4a:5e:3d:36:
28:42:b0:75:9a:07:25:ef:6f:54:4c:1b:80:d3:9f:4b:9f:62:
87:fe:0a:26:fe:4a:e4:29:c0:2c:70:8c:fb:c0:44:c1:4e:3a:
ce:f9:d6:d2:77:23:8e:16:82:ef:f8:7c:05:d9:b6:cf:86:4b:
7e:32:79:60:3a:22:5a:0e:1d:ce:22:c2:3b:c2:31:33:8e:b8:
d0:6b:7a:bb:d3:45:57:8f:b4:03:3a:d9:80:bd:79:e4:dc:2d:
28:0b:65:6c:d0:a2:9d:36:bd:9a:eb:eb:1e:6b:4d:7e:69:76:
5c:04:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:20:54 2025 by rpki-client