Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier: ASHPq2qhPJ5JD0Jc+nvaAbdTWbc3XceGDEOD8NlNO5w=
Subject key identifier: 52:F3:B0:79:94:69:3F:16:94:F7:D0:25:98:71:97:CD:DE:E6:62:43
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial: 019A4E1901469C6403390123D38915807912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number: 0675
Signing time: Tue 04 Nov 2025 09:00:52 +0000
Manifest this update: Tue 04 Nov 2025 09:00:52 +0000
Manifest next update: Wed 05 Nov 2025 09:00:52 +0000
Files and hashes: 1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=)
2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: W6M8P31pP1m4vKU/gwCq1a65utRp/ooq0IqkQjrPqbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:01:46:9c:64:03:39:01:23:d3:89:15:80:79:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Validity
Not Before: Nov 4 09:00:52 2025 GMT
Not After : Nov 5 09:00:52 2025 GMT
Subject: CN=52f3b07994693f1694f7d025987197cddee66243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f8:46:26:63:b2:8d:a8:50:d8:c5:ce:07:fb:
ee:fa:bc:4c:ab:26:90:73:97:a7:3f:c6:e4:6a:80:
b4:f7:fe:df:91:f5:c8:fe:48:09:a4:76:54:ec:be:
71:bb:f6:14:d4:8b:98:b0:7f:10:01:41:91:b8:b6:
dc:a0:79:61:81:ac:40:7f:5e:1d:0e:5c:ac:17:04:
c0:41:d9:91:46:82:8f:c6:22:8e:24:8f:aa:a9:7d:
df:8f:00:e5:42:7d:8c:0b:c5:f2:9e:0b:29:4d:91:
86:96:86:77:73:9e:00:8d:f0:d9:e3:d1:94:ba:72:
23:5e:56:29:57:e2:14:00:e2:a4:b4:e1:c8:21:8c:
61:68:4a:8b:78:7a:59:be:ca:77:9e:82:65:e6:2f:
c0:77:f7:1e:21:a6:3d:11:59:52:af:3c:0f:cf:08:
a2:37:36:77:ac:d1:d1:68:17:ba:b5:00:61:88:23:
06:7f:a0:d6:58:eb:9a:1d:ab:9c:e8:5a:eb:93:b4:
6b:c1:6a:39:ef:b2:e3:45:b8:40:f9:02:b4:b0:d0:
11:b4:0c:b1:8a:94:75:7d:26:81:3f:0d:72:74:74:
7c:4a:b3:a6:6d:0e:6b:d9:67:17:57:37:64:0b:8b:
6a:ce:7b:be:c9:20:f0:47:f4:a7:ea:c1:04:3a:b0:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F3:B0:79:94:69:3F:16:94:F7:D0:25:98:71:97:CD:DE:E6:62:43
X509v3 Authority Key Identifier:
keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0d:de:c6:a4:f6:c6:ea:aa:88:fa:3e:01:16:60:33:39:26:
2c:31:44:52:c1:52:19:07:a5:ab:13:b6:4e:db:46:79:8f:9e:
23:d2:df:65:cc:83:99:cf:bb:4b:55:23:06:b5:c6:7c:dd:6b:
76:54:4c:bf:a4:6a:22:35:67:6d:0d:68:72:37:ad:6a:7a:c2:
f6:02:34:a7:56:c3:8a:59:d2:b5:91:84:a5:2e:e6:9e:f7:bf:
ef:6c:c9:97:03:ff:b4:d9:b1:2d:87:1e:52:86:7d:0a:40:94:
df:01:75:e7:fc:32:94:4e:79:b4:96:79:89:31:96:7f:28:81:
70:fc:34:13:fe:d4:25:eb:6e:3c:89:ee:b0:bb:83:09:fd:de:
3f:9d:80:a6:6a:6b:b4:c7:da:46:04:ec:73:7c:13:61:27:ec:
ed:fe:f3:cb:cf:89:78:2e:5f:df:a2:03:cb:ac:8d:f8:a6:65:
29:1d:77:34:4c:56:c6:47:8e:93:9b:39:ef:e4:73:1c:34:17:
99:a2:c6:46:6a:a9:7a:7e:ec:b8:63:34:76:0b:50:f6:c5:15:
dc:a7:b2:4c:c2:3d:20:12:ed:a4:ff:90:cf:63:11:74:ff:51:
78:8a:bc:3b:9b:cf:5d:ef:47:a3:2a:6e:88:e2:ef:9a:0d:c2:
3b:ca:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:42 2025 by rpki-client