Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: lKYrMV6jLKZNBSQ8MW5PQMMMhi7OoI+y5InL3Foobtg=
Subject key identifier: 70:D6:83:32:56:E6:36:B4:41:C3:B4:1D:FF:B6:2A:94:66:C6:30:28
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 019A4EF5A46914E0C589211BF174C13ECE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: QRhzVBqYE0fgubA3Zb4foVucpMfXXaO0bnYVDp5mXi4=)
2: uu25l9W5gSZu_tAy5o8jy6VhkvE.roa (hash: Mo0sHJu2Fpws6Go/Wkd7BWgvp/SCXCkUPd0a54ZzbWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a4:69:14:e0:c5:89:21:1b:f1:74:c1:3e:ce:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=70d6833256e636b441c3b41dffb62a9466c63028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:82:70:51:c1:55:06:de:90:ae:b5:b7:11:
6b:e9:ef:ba:b8:17:3f:44:72:10:12:17:79:f1:1e:
df:8f:41:23:7b:23:c1:6f:8c:e8:37:c9:16:04:de:
af:70:af:fa:8e:95:ce:f7:29:b0:bf:59:b3:45:90:
72:5c:7f:7a:8e:88:1d:cb:1d:03:0e:f2:25:fd:1f:
b9:c5:ee:4c:bb:28:ad:28:58:71:0f:3a:15:a8:26:
14:df:a0:54:14:2d:d5:91:34:8f:c6:db:76:30:48:
bc:b9:8c:93:ef:bd:56:40:1e:7e:4b:ae:93:f2:71:
78:ad:79:5e:23:d9:26:5b:06:07:cd:b8:3e:ac:fc:
85:6e:40:f9:33:09:50:a2:69:cd:62:f3:5c:5c:22:
4b:04:bb:fe:a9:c4:bb:1f:67:09:60:38:c9:89:d5:
09:8c:71:72:b5:79:a5:57:f4:a8:7e:c3:b1:37:57:
f1:37:1e:9e:8b:c6:40:8c:28:9f:9b:88:be:02:dc:
94:67:8e:c9:28:aa:ce:3b:b7:1b:d4:36:96:6f:7c:
b0:77:90:f6:fd:b0:a1:44:fe:9f:c1:04:ac:22:2c:
4e:45:06:49:6a:9b:4e:07:b0:ea:b9:09:4e:3e:9a:
a8:e9:57:22:e8:68:a7:92:69:45:59:92:15:8f:85:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D6:83:32:56:E6:36:B4:41:C3:B4:1D:FF:B6:2A:94:66:C6:30:28
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0b:79:43:b3:ba:67:cd:b5:31:28:4a:a0:28:62:00:01:42:
79:e9:ec:eb:ed:99:ea:ac:bf:8b:19:0e:e5:be:de:46:b2:96:
98:90:e4:f1:3e:e4:e9:d1:4e:2d:4e:f4:8e:5a:aa:fb:93:b1:
86:87:f1:e2:ef:1e:3f:cb:cc:46:43:9b:10:d8:68:26:84:f7:
f5:f7:e5:9d:25:eb:c4:83:9e:16:a8:29:84:93:8b:e1:8b:3e:
1f:4e:6a:c6:d7:ac:c9:6a:88:ce:15:2a:7c:e6:1b:a6:b1:b0:
5f:dc:b9:1e:e6:c9:33:34:f1:7a:99:bc:07:1e:fd:b9:a3:15:
a1:8f:ed:a4:b6:4f:77:3b:03:ad:66:71:c0:b0:30:0e:d6:e4:
6b:5b:74:e4:e4:ef:9c:d9:a0:2b:00:37:0f:e9:81:a1:41:77:
7e:ce:24:66:de:ec:87:bf:ae:bb:ec:e1:92:d1:c0:01:c2:29:
ba:85:d1:bc:04:91:e8:ab:94:aa:ab:42:de:20:8b:7b:6b:bc:
7a:4f:b4:8c:b3:d4:ed:f7:4c:ec:05:31:cc:cd:c2:89:62:50:
2f:7c:a1:4f:2e:6e:68:e4:11:a0:fd:8d:be:0e:7a:d0:ce:75:
f9:14:e4:cd:25:93:af:ca:7f:a1:67:ef:e1:e7:af:e2:3d:d5:
c8:aa:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:06 2025 by rpki-client