Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier: refTxte87HHssHAx+siiGAWqXd29eGqcS8VpS3tbDwE=
Subject key identifier: 51:DB:C7:1D:15:47:67:DF:35:0D:BE:69:B7:10:1D:05:EA:ED:68:96
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial: 019A4DE177745CDC1853D9ACBE247DECE361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 08:00:13 +0000
Manifest this update: Tue 04 Nov 2025 08:00:13 +0000
Manifest next update: Wed 05 Nov 2025 08:00:13 +0000
Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: cGytAzRhMhZpTij4zbINtW/eyvIINL/2MW/3f3nFXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:77:74:5c:dc:18:53:d9:ac:be:24:7d:ec:e3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Validity
Not Before: Nov 4 08:00:13 2025 GMT
Not After : Nov 5 08:00:13 2025 GMT
Subject: CN=51dbc71d154767df350dbe69b7101d05eaed6896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:84:d4:1d:75:b8:9b:6e:2b:d9:44:22:f3:
02:bc:7b:b7:a9:b9:a0:44:e1:d5:83:ba:b9:a2:76:
84:4f:d3:d7:b0:f2:98:b4:db:80:eb:73:52:74:42:
5e:c4:c8:93:41:62:31:d3:e4:84:6d:fb:97:eb:67:
7a:6f:4f:96:d1:2c:ae:27:5e:69:00:74:9f:2b:58:
3a:54:3a:50:30:34:bc:1b:6c:f6:b6:f7:6f:f4:35:
f5:2b:33:8d:91:bc:34:73:2d:73:eb:53:68:71:1b:
10:40:cf:2d:26:c0:d0:d8:bd:0b:82:c6:4b:5e:00:
4f:ff:8c:83:ff:0d:66:9c:4e:76:15:66:cc:1f:4f:
60:79:4c:c4:31:f3:cf:bc:b5:43:82:6d:63:24:0f:
86:5a:b4:da:e2:c7:45:83:fc:5e:94:f1:c6:61:95:
b0:9f:bb:dc:ee:4d:fd:bc:5f:aa:7f:90:f8:60:01:
de:46:22:d7:b8:48:7a:81:9a:32:10:8f:56:cc:9e:
15:64:e2:58:72:1b:7c:da:3a:2f:66:f0:00:f9:3f:
b2:a6:2f:71:2f:6f:56:94:1a:aa:b7:2f:c6:dc:1b:
31:c1:59:99:97:4d:eb:ce:53:49:85:80:79:18:3c:
46:6a:97:3d:ae:f0:a3:24:9b:f4:aa:f0:40:97:5d:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DB:C7:1D:15:47:67:DF:35:0D:BE:69:B7:10:1D:05:EA:ED:68:96
X509v3 Authority Key Identifier:
keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2d:fd:a0:22:25:44:83:57:15:de:66:fc:55:3d:02:0f:7d:
c8:a9:32:72:d0:73:e8:4a:c5:4a:5e:3b:ac:ad:25:ce:e6:2d:
58:e1:4f:38:d0:28:9d:9a:02:69:09:50:eb:b6:e2:b6:c3:0a:
fc:5c:2e:64:b8:53:46:52:1d:68:d9:75:5e:4d:72:c6:18:23:
bb:2e:a9:31:64:9a:77:1a:f0:34:d1:cc:67:6f:87:d4:63:27:
a6:ca:45:f6:53:42:5d:27:e5:c1:44:8e:a3:4e:b6:40:06:e6:
18:e9:86:b5:60:05:dc:ca:01:0c:2c:e5:7d:45:57:cd:61:f3:
f6:b4:40:9d:62:4a:7a:74:c0:d9:62:4d:6e:68:bb:2e:ec:82:
46:36:62:7e:d4:63:9f:9a:0c:40:f1:6e:63:6f:20:81:6c:2f:
9e:1b:89:3d:f9:7b:ea:1f:5f:db:e5:0f:4f:26:ed:cf:07:78:
dc:d9:b7:3f:81:c0:af:7c:1d:15:44:8b:f6:5d:f0:08:61:b2:
4e:43:17:ad:a8:e0:7e:8d:f4:47:ec:d3:36:bb:73:29:72:f8:
22:89:a4:79:b6:8f:1a:78:0d:c7:0b:d7:5e:f0:9c:2c:24:c8:
e3:d8:da:0f:b7:55:4c:94:f4:85:6f:4c:7e:b9:15:41:bb:81:
0b:98:d3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:36 2025 by rpki-client