Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: xFZEzZP4NXM6Tl30/p3fhWDryG0NxmL4FSEtkP8JX3I=
Subject key identifier: E6:58:D8:32:69:E2:02:81:D8:D5:6F:51:37:49:C7:85:87:5E:60:55
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019A541B13E16144FCBCC2F4F365656B793B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0E1C
Signing time: Wed 05 Nov 2025 13:00:51 +0000
Manifest this update: Wed 05 Nov 2025 13:00:51 +0000
Manifest next update: Thu 06 Nov 2025 13:00:51 +0000
Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: x+dAPPZ5esYU+mUwr9cJ8QIev1RLmckcjcI6ckx0QFs=)
2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:13:e1:61:44:fc:bc:c2:f4:f3:65:65:6b:79:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Nov 5 13:00:51 2025 GMT
Not After : Nov 6 13:00:51 2025 GMT
Subject: CN=e658d83269e20281d8d56f513749c785875e6055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:8f:48:6b:10:73:13:a0:89:6c:ef:fe:b3:
48:75:d7:f5:f0:dc:d8:b6:b9:bb:c9:27:12:ae:37:
f5:93:7c:f6:66:84:6e:f5:01:87:a0:62:74:94:99:
f9:75:2b:b5:ea:ce:aa:55:dd:e3:3a:ce:42:c9:6a:
41:de:16:fd:33:2b:29:22:bf:3f:84:0f:9e:d7:0d:
ea:f4:67:6a:4e:91:d2:8d:b6:c4:d7:9d:cb:56:b8:
7f:9a:10:17:9f:98:72:58:a3:74:9a:1e:d5:61:7d:
12:6b:53:00:04:c6:ea:d8:1a:90:0a:a6:9f:81:3a:
93:43:8a:f0:94:40:02:e1:f5:df:eb:07:07:87:d8:
3c:74:c4:1a:74:0c:5d:40:fe:1e:18:90:91:9d:7d:
6c:80:62:66:19:52:7a:9c:b3:bc:7f:31:86:af:34:
a1:2b:5d:74:37:8e:49:af:b7:90:f3:ce:6f:f7:12:
03:7d:39:16:67:88:e2:4d:51:c1:a2:83:b8:91:00:
62:f6:c5:5c:02:bc:e6:2c:fc:6e:aa:8a:b6:38:d0:
c5:0e:a8:2e:71:32:9d:82:10:83:44:1b:a5:ba:63:
e0:0e:83:ea:2f:89:42:1e:4d:32:8c:83:e5:83:b6:
ea:34:b8:be:af:0e:f5:c5:df:0c:83:43:53:45:ca:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:58:D8:32:69:E2:02:81:D8:D5:6F:51:37:49:C7:85:87:5E:60:55
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:15:06:62:49:a9:ff:c0:9b:df:5c:f2:c7:bc:3e:10:5f:75:
3b:96:b8:27:84:30:14:a7:87:8c:bc:48:cb:9e:8b:a7:3b:cf:
5e:d3:f1:b4:9a:74:8d:8c:3e:c8:b4:8f:48:91:6e:a5:9a:62:
64:04:37:fe:7e:e8:e2:38:47:0d:bb:4b:a8:98:a2:5b:2c:f0:
63:f3:5d:bd:6a:eb:a9:d9:db:0e:9c:99:a3:f4:ed:1f:01:1a:
3b:b2:c1:c1:03:82:5c:76:13:3f:60:e5:ed:2a:20:79:a5:56:
41:4e:21:a4:df:2f:26:4b:d6:06:24:20:ad:0d:bd:1b:fa:95:
76:ce:ba:64:f4:35:94:09:bb:fe:f2:04:b0:dd:e4:f1:1e:40:
08:de:d0:30:4d:16:d3:ca:62:fe:28:d4:c1:f8:5f:15:f6:49:
a0:15:35:02:aa:2a:af:bd:49:61:32:21:bf:c3:e8:4c:27:e4:
41:ef:b2:ce:c1:b7:ab:ba:75:5f:08:a6:38:5a:b6:be:ec:77:
97:29:83:44:4e:82:9f:65:6c:8c:46:6b:9f:0d:ed:2d:2f:98:
14:37:88:a7:4c:54:5f:88:07:d2:a2:5e:e1:20:c4:92:5c:76:
5e:28:32:a2:ec:d1:35:dd:a7:f2:76:2f:cc:85:c0:ce:09:d8:
da:3e:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:14 2025 by rpki-client