Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: adTY4qdT86E9mFAH/CKIIsqkErvC+A8RuRnMhzvLMFg=
Subject key identifier: 9D:63:69:07:48:FA:92:FA:4F:70:CF:6C:56:0E:28:F7:3D:9E:2B:06
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 019A518770869210E47C02194E4FC5A5AA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 01:00:21 +0000
Manifest this update: Wed 05 Nov 2025 01:00:21 +0000
Manifest next update: Thu 06 Nov 2025 01:00:21 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: V1+HgNuUMHiTIZlncy8ls2F3RPjl7AYYemC8Q/psVaQ=)
2: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (hash: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:70:86:92:10:e4:7c:02:19:4e:4f:c5:a5:aa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Nov 5 01:00:21 2025 GMT
Not After : Nov 6 01:00:21 2025 GMT
Subject: CN=9d63690748fa92fa4f70cf6c560e28f73d9e2b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:e7:c3:c8:61:f2:21:18:e3:cf:f3:57:95:
57:1d:ea:40:9c:58:e3:c7:95:76:8f:ef:8c:f0:ad:
d1:f8:b9:13:a7:1c:15:ed:37:73:f2:40:07:97:e6:
62:22:e7:18:f7:df:17:36:3c:2e:a1:0c:d5:ae:9e:
a9:eb:56:23:63:42:89:a2:44:b0:4b:6b:cc:c7:31:
39:c5:f2:90:aa:a5:6b:ec:a7:06:de:19:56:7b:29:
fe:0f:44:4a:fb:fa:ae:bb:38:38:a7:88:db:73:2c:
d9:eb:8b:bd:d5:be:01:96:56:8f:a9:5a:87:55:ef:
27:50:31:c8:9b:72:43:20:5a:c5:6a:0d:b1:35:d5:
e3:20:44:b4:27:37:7b:a7:59:b9:0d:c7:83:a9:ee:
07:5f:e8:d7:e6:24:ae:5e:71:c9:58:25:b4:a6:3f:
db:f8:44:6e:47:1a:bc:82:9d:3d:6c:ac:ce:51:6e:
45:f9:da:52:48:db:38:f1:40:aa:87:3f:80:72:f7:
27:84:70:67:42:8c:4f:9a:46:2d:77:7c:fa:f2:68:
21:8c:f2:09:4f:0b:51:74:77:31:a0:bb:47:53:2e:
17:0e:a3:17:f2:e4:87:28:24:46:91:2b:31:06:2c:
8a:6d:a1:be:e3:1c:25:11:fa:a1:0e:8b:f6:26:b8:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:63:69:07:48:FA:92:FA:4F:70:CF:6C:56:0E:28:F7:3D:9E:2B:06
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:43:68:2e:da:9e:85:e0:cf:b5:a9:16:07:10:5d:a5:f2:3e:
82:a9:68:36:90:3b:81:34:38:43:3f:5b:0d:89:e9:68:b2:fe:
06:43:3f:57:b8:77:cf:6c:74:fb:6a:9c:82:6d:2d:1c:f3:50:
95:21:86:34:72:c1:7b:45:ba:72:1f:a7:50:d6:64:df:09:88:
35:6f:7f:9c:8f:4b:4d:83:c3:8f:a2:11:08:59:b9:08:19:dd:
17:bf:90:55:fc:cf:6f:b2:bc:40:95:47:e1:fd:fb:8d:78:fd:
86:84:37:eb:28:50:e5:b3:3c:36:59:ff:cf:49:d4:d9:6a:40:
9f:32:18:62:2b:aa:a0:e0:a4:97:a0:2b:9b:aa:ee:80:e4:48:
41:5b:f1:fe:dd:92:f9:b4:f7:96:f3:23:87:14:b7:ee:24:c3:
49:3f:ca:91:fc:25:e9:c1:ef:66:72:0d:de:84:40:56:a8:e8:
22:5c:6e:e5:b0:9c:23:38:4d:68:f3:ad:15:af:26:8c:ee:af:
ca:82:4f:9c:ac:62:aa:ed:dc:76:4a:a7:d9:18:f2:63:56:ce:
d4:db:7f:d8:80:76:c7:69:a6:04:7d:61:d3:2b:fa:36:34:e8:
56:d2:29:40:0b:9c:35:dd:48:70:d1:91:c4:6c:2b:74:e5:15:
5f:e5:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:43 2025 by rpki-client