Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier: Jq3f98HAiG7Ieg5V7o0Ac75idycZQa24j1mH6Pwuckk=
Subject key identifier: B1:8C:4D:2D:A5:C1:27:50:27:BB:1C:DD:D7:74:D7:E7:2C:6C:4B:00
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 019A50E38F90282E3062970A45C32F07AD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number: 11FF
Signing time: Tue 04 Nov 2025 22:01:21 +0000
Manifest this update: Tue 04 Nov 2025 22:01:21 +0000
Manifest next update: Wed 05 Nov 2025 22:01:21 +0000
Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: bTMYh8rnWCDbZmNvnoahvZ4YXKxVRDHNxDVnmCw37eY=)
2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:8f:90:28:2e:30:62:97:0a:45:c3:2f:07:ad:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Nov 4 22:01:21 2025 GMT
Not After : Nov 5 22:01:21 2025 GMT
Subject: CN=b18c4d2da5c1275027bb1cddd774d7e72c6c4b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:df:aa:3f:60:d0:f8:55:7a:4e:08:27:d8:
d8:db:72:3a:fa:81:cb:4d:c4:66:80:23:15:b2:c5:
b4:83:16:ff:96:19:36:78:2c:53:77:72:f9:7e:40:
70:54:36:62:b0:9d:20:36:02:aa:45:b9:3d:39:0e:
8a:c9:8d:e8:09:0e:a6:6e:37:45:b1:8e:41:24:9d:
2a:76:7f:d5:63:f7:c2:37:13:4a:c5:be:be:fe:bf:
91:8a:39:66:c6:ec:50:2c:00:af:cb:35:c1:4d:7d:
88:20:0e:86:e6:0c:7e:6b:ae:52:a2:86:8d:a1:ab:
53:e0:4b:22:bd:d0:90:26:53:c0:aa:63:bf:30:b4:
32:9b:b4:38:7a:e5:e0:67:f5:fa:8e:eb:1c:25:55:
22:d6:a2:93:fe:31:bc:c4:59:ed:81:d0:d9:55:46:
06:e4:9c:e3:b7:8f:dc:c6:ec:a3:2d:03:cc:25:b5:
da:21:5d:e6:cc:e0:02:83:f6:19:19:50:81:e6:d3:
7e:a3:01:ff:f4:1f:7e:a5:a2:b3:00:75:f6:48:3f:
26:66:9f:08:7c:6f:96:ed:e9:b2:79:65:d0:9a:0c:
4c:53:47:19:b6:21:62:bb:cb:fd:f3:68:68:4a:27:
dd:b1:e0:1f:85:f1:cb:d7:7c:7f:23:65:20:b0:26:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8C:4D:2D:A5:C1:27:50:27:BB:1C:DD:D7:74:D7:E7:2C:6C:4B:00
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:83:06:5d:69:11:c7:09:e7:36:b9:88:b8:c7:cf:d0:15:3c:
23:aa:8e:4e:d4:dd:72:28:d0:30:db:f6:61:ad:53:bb:8f:48:
5f:05:8b:af:1d:35:15:4c:db:ee:42:34:bc:14:0f:58:a6:26:
e1:1c:c6:83:f2:a9:58:60:12:48:8b:bd:58:1a:27:1a:6d:d8:
cf:58:a5:32:24:10:13:42:dc:81:be:12:d5:2d:43:a6:7c:35:
a5:97:5c:8b:74:f7:48:40:78:b7:9d:26:ed:6d:66:25:a0:f8:
cf:6c:c8:90:e0:fa:de:ca:9e:80:72:5e:10:95:ad:51:99:d6:
88:44:b4:c6:aa:96:d7:2a:cb:bf:59:c7:95:29:dd:46:99:0c:
ac:ed:ec:96:ab:3a:3d:b6:34:f9:70:22:d4:20:32:2c:07:d5:
a7:01:a8:64:13:8e:3c:ff:93:62:35:17:e8:ad:40:6c:ad:0f:
5b:27:a6:81:29:1e:a1:4b:05:ff:e2:d4:ae:ca:61:5d:41:8f:
77:d4:a6:f3:dd:e5:37:c1:71:3c:61:de:92:db:8f:e0:70:ca:
db:e0:f2:65:e2:85:e8:38:dd:2e:93:62:a1:85:83:26:40:96:
4a:1f:5b:b7:09:7a:15:f2:ef:9a:34:2d:55:38:83:29:7a:b0:
c6:91:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:58 2025 by rpki-client