Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File: Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier: 4PJtiEDKgMKyG2fYrx5VkB3G0kb/BlHrKRG8k6NfUaA=
Subject key identifier: 5D:A1:1D:76:D5:A6:54:0D:3E:41:E3:C0:5B:FC:DC:F4:55:D1:F8:C1
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 019A4E1918979D58AF03EDEC16279E9A4A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number: 123D
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: 2LJ9Npk+frr1MKosedWC5EqMvfirGd2y61E4+++VIMQ=)
2: ZGBhJljS8KnY-Xp380jYPgu_YWc.roa (hash: XaigNLjbkBWceAdjZHr6JxQ6JpZUt5een+y961cXdhI=)
3: eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa (hash: SbV9Jwp6gb0UYygbvF7Pu8rOJFj6ngCnppNVj1jujp0=)
4: rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa (hash: R4Ngvgh5fuVLcZ/zh+Z03ttWp7anw1RKceB2P7tYlDo=)
5: ykZMTFlSJCE6g1HQBFJEj0yh9lE.roa (hash: yTgovZsEnOISpJIgzu2owD01yBh+ryJFnZun9TCD92w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:18:97:9d:58:af:03:ed:ec:16:27:9e:9a:4a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=5da11d76d5a6540d3e41e3c05bfcdcf455d1f8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:e5:e6:52:ea:19:ea:5b:ae:cd:9f:f8:45:
cb:82:1b:b1:00:5a:bb:20:d3:af:17:76:78:66:78:
67:09:95:5c:9e:df:e2:77:dd:f0:2b:b9:fe:a9:83:
92:29:24:6b:44:55:7f:cd:9b:d1:35:45:74:8c:3c:
73:4c:22:db:05:0f:ad:4e:96:7f:f4:99:a9:76:18:
91:0d:f6:41:8c:d5:78:0c:b7:81:1d:7a:ad:4a:59:
7b:92:5d:b1:a4:cd:93:e9:50:7d:49:8a:bc:03:f9:
40:b3:9f:71:36:0d:7b:ea:88:2e:78:80:05:b8:a7:
69:d3:e3:5e:87:6d:d8:43:56:b5:81:17:b1:cd:90:
a9:0a:64:60:ad:2a:d1:3c:78:98:9d:09:76:e2:01:
32:25:b9:69:b5:7c:01:8d:e8:0d:e1:b0:34:fa:05:
e0:9e:4b:00:32:23:f7:af:cd:09:61:93:5e:61:29:
3a:72:d1:80:14:2a:e6:a2:9d:b6:32:d1:d7:a2:a1:
82:35:c8:75:6f:d1:8a:2e:2d:09:27:70:9f:95:95:
49:eb:12:52:4a:e7:70:6d:6b:b1:76:07:02:1f:94:
6a:15:a4:df:ad:84:94:b3:70:31:64:86:51:d5:50:
ec:80:5f:cb:47:6b:1d:97:24:18:9b:ff:12:91:e8:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A1:1D:76:D5:A6:54:0D:3E:41:E3:C0:5B:FC:DC:F4:55:D1:F8:C1
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:57:07:4d:09:26:cb:2d:f4:37:16:87:9b:9d:01:a7:7e:4f:
cc:07:87:43:22:09:3d:18:75:84:33:1e:bd:e3:8e:e4:fe:d3:
af:08:62:cd:0b:e5:5c:9f:46:14:e5:b0:07:26:b1:aa:95:f7:
a5:06:59:c3:5d:a5:e4:9c:37:ab:2f:45:ef:c2:a3:c3:43:0c:
e8:6f:f9:92:c6:d7:f4:1f:2d:a4:67:62:6a:8e:fc:3e:af:f9:
69:9d:69:9b:d8:e2:17:91:01:6d:74:3c:49:91:ec:d1:c1:55:
60:57:c2:b0:50:77:3d:ed:68:2c:59:da:b6:89:99:a1:1a:ed:
4b:aa:6d:4f:7c:ec:23:ed:c6:2a:1d:b6:91:b3:b0:a1:33:58:
60:cb:40:04:c2:02:ab:4d:87:b7:89:c0:bc:b0:6c:02:ca:49:
85:7f:9e:26:ed:4c:ce:9d:5b:29:cd:ef:4f:21:1a:95:31:a4:
54:81:62:39:54:49:34:ae:c0:fd:ca:5c:cd:9d:ae:84:e0:52:
15:7f:58:b4:a7:1a:ea:a7:fd:5f:e9:9f:1a:1f:60:b6:70:f7:
2d:85:cd:3b:15:75:d1:17:bc:f5:d9:e2:4d:16:44:f9:bc:07:
21:9d:a1:3d:fd:d6:33:08:ef:4c:e4:a6:7f:d1:62:24:77:3a:
d0:d7:44:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:48 2025 by rpki-client