Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
File: f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json)
Hash identifier: dVfXCqPLmRbcmGHU//xM38kRJDN6/acHlxLslQkG+HQ=
Subject key identifier: AA:76:5B:B1:53:A7:BC:3E:DC:07:2B:10:12:E3:3F:7F:27:F6:BC:95
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial: 019A4E86C2B43D7F70BF045FBBD3C535893F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
Manifest number: 0CEC
Signing time: Tue 04 Nov 2025 11:00:45 +0000
Manifest this update: Tue 04 Nov 2025 11:00:45 +0000
Manifest next update: Wed 05 Nov 2025 11:00:45 +0000
Files and hashes: 1: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: pqKknIQcZtRRsdPujH6mXAXc/VNBWWEGDDpDAbxblCw=)
2: zalftAHY0_vxWVcBQe7AUMKmyP4.roa (hash: IBVaMGf4826YIxpRZf58g0sJemKA+k9XLc2S0P/3S8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c2:b4:3d:7f:70:bf:04:5f:bb:d3:c5:35:89:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Validity
Not Before: Nov 4 11:00:45 2025 GMT
Not After : Nov 5 11:00:45 2025 GMT
Subject: CN=aa765bb153a7bc3edc072b1012e33f7f27f6bc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:97:62:44:97:38:02:e7:2a:05:ed:9b:5d:
f7:6b:0c:95:a4:af:ea:4e:08:02:55:23:81:7f:6b:
9d:e0:85:ec:9e:77:4e:ee:92:ec:55:6c:af:47:c9:
0c:2f:37:69:ac:ab:b4:c0:a3:93:c3:a6:a5:f8:18:
9d:f5:22:31:d7:83:51:0f:22:25:5c:ac:bc:e7:b0:
a8:2a:11:fc:87:71:6b:46:51:76:4b:ed:3b:49:e5:
12:27:01:45:50:3a:56:cc:31:4f:1e:64:ba:4d:45:
73:db:fe:35:79:9e:9b:f5:c1:bd:6b:2d:05:ee:90:
1e:11:53:a0:ad:a9:13:76:a8:c1:d0:63:87:4e:b1:
f2:34:e7:d1:d0:45:52:d2:65:6a:2d:16:7f:c7:a7:
d2:8a:22:d1:c4:6f:76:d3:4c:17:e9:f9:b5:e6:34:
e5:a5:d2:bb:d5:a0:49:77:45:89:9e:d6:ea:90:a3:
32:28:d4:97:0c:cd:75:bd:ef:f4:2f:d8:e7:2d:f7:
40:2e:f7:05:2f:ae:c8:05:5e:d3:6d:be:74:51:f6:
f5:0e:9a:0d:4b:34:e2:73:4a:11:45:3e:59:e9:97:
23:1f:20:b4:a2:56:e8:79:df:4b:1b:30:80:28:d1:
61:d7:f6:09:14:7e:e1:c3:22:02:0a:a5:24:51:23:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:5B:B1:53:A7:BC:3E:DC:07:2B:10:12:E3:3F:7F:27:F6:BC:95
X509v3 Authority Key Identifier:
keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:98:37:9b:0d:cc:6a:72:16:fd:ce:95:e6:63:ac:ce:a6:ea:
67:bb:71:63:65:7f:3e:3a:5b:2b:de:49:fa:1b:b3:b2:37:89:
f1:de:5a:e6:b1:4a:4d:45:0d:93:39:d8:bb:e9:b3:e2:2e:a1:
e0:a3:5c:75:16:de:15:d8:fb:e2:39:37:ae:6e:a7:e3:3f:c8:
b2:58:86:0b:cd:69:51:40:9a:6c:2e:0d:1c:0b:7a:cf:15:c3:
da:98:21:29:30:4e:27:7e:39:0c:6e:5b:5b:b0:e2:40:2e:cb:
e0:fa:d1:9c:ae:2e:9b:26:02:1d:a1:09:1f:57:45:82:d1:74:
8f:64:ab:1b:05:f2:06:b1:0b:07:07:01:25:85:6e:80:3f:47:
4d:32:6f:fd:e6:c5:61:8a:0f:be:a2:11:fc:df:4a:2a:20:3d:
c2:6f:4a:f2:1c:de:7a:bd:a6:9b:a1:72:7e:f4:6c:93:6f:bc:
93:4f:d7:80:db:b7:d7:66:6e:8f:a0:78:cc:d2:be:fe:9b:db:
d8:a4:0a:61:2f:42:a9:56:1d:e8:34:c8:7c:d4:10:0d:db:f8:
bf:02:4a:10:f3:dc:69:0a:ea:d7:bb:91:a6:da:b8:ed:9c:18:
13:e3:d4:78:f7:84:57:46:7f:38:54:91:94:9f:de:dd:45:ca:
73:00:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:06 2025 by rpki-client