Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: SSQK9kjDs4vWNlQdWSjA0WLgG5Qt4+3qfoJBidnBbU8=
Subject key identifier: 84:2A:C5:8E:55:F1:8C:A3:99:EE:BF:5F:98:BD:36:D1:03:36:74:46
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 019A4D7462593D2716C7F1EBB2CD0F48BA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:01:04 +0000
Manifest this update: Tue 04 Nov 2025 06:01:04 +0000
Manifest next update: Wed 05 Nov 2025 06:01:04 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: 1Bjxdhta5jFkds/Z9LsfNh4JzWdHSDneVq5hQ+Xsmuo=)
2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:62:59:3d:27:16:c7:f1:eb:b2:cd:0f:48:ba:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Nov 4 06:01:04 2025 GMT
Not After : Nov 5 06:01:04 2025 GMT
Subject: CN=842ac58e55f18ca399eebf5f98bd36d103367446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8e:be:07:bb:ae:7a:c4:b9:cc:d3:ef:95:b5:
0d:81:5f:e5:55:df:c7:34:34:27:c9:09:08:cf:af:
b9:15:5f:65:03:c5:ea:bf:e9:40:03:9c:79:dc:c5:
0b:6a:d4:57:c9:5a:b8:cf:f1:68:69:15:d9:aa:2e:
ca:50:79:2c:f0:77:53:12:ce:8f:8d:3a:d4:9f:17:
7b:d4:d6:1b:06:c6:86:88:07:5b:34:e5:69:50:f3:
0e:f5:69:23:f5:d7:4b:fe:f2:93:7a:26:84:85:a3:
17:3a:35:0a:db:2b:65:a1:52:38:c2:be:ac:86:bf:
5e:2a:ec:3d:ca:7d:ae:f0:5a:01:0f:d3:5b:f8:e0:
2b:03:4e:b5:46:94:68:f9:e0:a4:ae:e6:7e:f5:a6:
1f:54:84:06:11:98:f4:31:6a:ac:4f:75:1f:a3:35:
8b:7e:54:85:75:75:b5:97:55:12:12:3b:dd:94:4f:
d5:6d:57:d5:80:de:76:4f:da:0d:38:68:80:60:d6:
9c:33:a8:17:26:95:79:43:14:41:2e:79:88:c8:22:
22:ec:af:c9:bf:4d:c9:8d:12:75:3a:ff:e8:bb:fb:
a1:ea:da:10:15:a1:2f:19:5a:f2:37:91:23:d7:79:
96:02:62:bc:eb:f7:09:c1:69:32:a8:ae:f2:9c:eb:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:C5:8E:55:F1:8C:A3:99:EE:BF:5F:98:BD:36:D1:03:36:74:46
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a0:6a:72:d2:95:18:4f:84:73:91:f5:19:29:08:bf:2d:c2:
35:3d:52:58:53:9a:8f:0c:7a:01:a5:07:c1:cd:fc:5d:33:3c:
bb:76:32:60:ab:c8:0d:d0:e6:3d:29:4e:28:bf:97:73:c9:f8:
90:2e:0f:25:6a:c7:67:bd:4b:25:fb:5d:af:85:54:0c:96:d5:
64:2d:c5:da:58:3b:e6:6b:61:0f:2d:95:cb:d0:3a:0b:1a:68:
6f:da:15:63:d9:59:c7:38:62:8e:ca:0c:bd:bd:64:20:46:eb:
48:4b:94:c9:d1:ac:5c:90:4d:14:e0:2d:90:91:40:23:25:4a:
67:6a:ce:5a:b5:8c:68:db:cf:e2:3b:a4:99:15:af:40:6e:39:
f1:47:5f:72:de:79:e0:6b:dc:aa:00:e7:2d:3e:9a:8a:36:1a:
66:86:ab:44:9b:d2:47:63:79:29:eb:4d:99:3c:1a:67:06:e2:
90:f7:b5:60:47:1d:9f:53:90:c5:f6:c8:fc:d7:8b:81:5e:f3:
f5:1d:f8:ab:3d:d7:98:d2:c5:89:56:95:e9:88:9e:5c:50:29:
ea:fb:9a:ba:3a:f6:3f:70:80:1a:3a:36:27:87:03:e5:37:e6:
f2:e7:0d:37:be:84:85:17:5c:21:44:fa:cb:57:86:db:bc:22:
fe:1a:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:00 2025 by rpki-client