Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: D8KdEMW7uEZEfuVjVFQY0W+STwefdMOK356R6cJK/Ck=
Subject key identifier: 5A:00:E7:2E:80:11:E2:DC:F9:FD:B8:39:8C:BC:6E:4D:EB:E4:EE:D2
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 019A4EF48872918144C31A563A53F53B8CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: T6EVaFgjwF8fPINr+j1cJGSz92/Hj/Ucmhc+d+YV4tk=)
2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:88:72:91:81:44:c3:1a:56:3a:53:f5:3b:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=5a00e72e8011e2dcf9fdb8398cbc6e4debe4eed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:7d:4b:2a:7b:84:d1:5c:e1:a2:91:9b:d9:
fc:cb:fa:ab:87:83:d3:3e:3a:f5:52:c8:b3:ef:44:
f2:da:bd:53:4a:b7:ca:9a:71:0f:64:3a:6b:92:55:
a0:1f:ee:f2:7a:c9:2e:71:0a:dc:45:8c:b5:30:d5:
08:18:60:bc:8e:14:e2:12:6c:42:fb:51:9e:8e:a7:
fd:3d:b1:f6:04:0c:cf:fd:92:59:1a:ad:c6:0c:1d:
8f:19:98:75:8b:e0:fc:38:91:6d:7d:68:41:27:a2:
14:87:d0:71:e5:76:50:7e:e8:da:63:58:a0:5d:a3:
3d:d8:de:eb:fb:06:fe:22:26:1c:b4:94:da:ff:44:
b2:93:a1:3c:ec:16:e4:9e:e2:66:e4:9a:8f:0f:f1:
d5:08:7f:46:78:41:44:24:9f:4d:95:72:a7:13:f3:
20:ec:ae:4c:25:fc:79:1c:19:9c:6b:1d:d0:93:b1:
3e:fc:0c:68:c0:71:e8:21:bc:40:5a:5b:b7:d0:0e:
d8:76:08:d3:d6:b5:48:53:49:5a:f0:d4:d3:fe:47:
27:57:9f:59:69:96:8f:59:de:5a:72:c5:02:cf:1a:
44:e7:63:37:f5:1f:72:9c:38:16:17:45:49:41:1c:
aa:62:30:b2:15:9f:41:98:9d:86:5b:89:dc:4d:33:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:00:E7:2E:80:11:E2:DC:F9:FD:B8:39:8C:BC:6E:4D:EB:E4:EE:D2
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1b:79:9d:e7:8f:c7:df:cb:cb:0c:30:34:22:1d:d9:95:50:
a7:e9:36:7b:68:e2:59:fe:7b:b8:cb:c1:4c:1a:4b:b5:59:5b:
08:58:58:e3:33:e9:23:60:4f:79:d7:09:20:83:b0:75:25:08:
73:4e:53:b5:94:ed:b1:9f:3e:17:fc:28:e3:ca:1b:45:2b:ae:
95:89:f3:cf:fa:a2:79:3f:81:25:7d:bc:21:01:00:ef:7f:57:
4b:42:7d:f2:2e:0f:27:1e:1c:86:c0:24:73:93:fa:01:30:84:
b1:9b:e2:7c:47:69:87:87:32:b6:21:d1:8b:af:25:2e:be:82:
f2:b0:2a:67:59:16:40:94:b4:b6:0b:aa:ee:cd:d4:20:a2:54:
66:b5:71:58:5f:77:50:57:59:ac:f3:34:2f:9f:91:35:d2:9c:
3a:45:e8:d3:21:3f:13:01:e5:83:e0:c1:4a:c0:0c:fd:f2:0d:
17:c5:e0:9a:c2:3b:1a:9f:5c:e0:5d:d0:61:7f:e0:fd:2f:35:
e1:4c:44:c7:71:6c:d6:7f:42:d9:86:b9:2d:09:b3:6c:9b:e5:
a4:24:05:2e:3d:60:51:ea:c1:5e:3f:6a:c2:00:35:ad:51:55:
e2:a5:3c:f4:fa:92:bc:ed:a4:01:2c:10:0f:e1:fe:6c:63:4d:
6a:4e:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:04 2025 by rpki-client