Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
File: mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json)
Hash identifier: 29zKg/SnrDBFaMwiynUgGBvAKZvtCsmzSo+aNBwNL0Q=
Subject key identifier: A0:44:88:1C:7E:72:D2:C3:55:1D:82:35:E3:5B:F0:B9:7D:5E:30:B0
Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Certificate serial: 019A4E864A42D9FA33FDCCB745ED892AFFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
Manifest number: 1451
Signing time: Tue 04 Nov 2025 11:00:14 +0000
Manifest this update: Tue 04 Nov 2025 11:00:14 +0000
Manifest next update: Wed 05 Nov 2025 11:00:14 +0000
Files and hashes: 1: PbBhRej558nP-vCP2i5bq2vF02I.roa (hash: k4y0Lkz3mWSRjZ9l7iXnliVmD502EHJIpmvxtHIQNOU=)
2: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: U7L72H7fksdm1zNmu7PaDpow7ibMyzQ+DA1nX/8R2Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4a:42:d9:fa:33:fd:cc:b7:45:ed:89:2a:ff:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Validity
Not Before: Nov 4 11:00:14 2025 GMT
Not After : Nov 5 11:00:14 2025 GMT
Subject: CN=a044881c7e72d2c3551d8235e35bf0b97d5e30b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:93:d1:57:16:83:03:bd:14:22:b3:b5:ee:
5a:84:86:36:ea:92:a4:55:a7:d5:8b:d9:06:07:90:
35:0f:c8:b2:ff:f4:3b:91:7d:1a:46:eb:c0:0c:41:
28:69:8a:cb:6c:ea:7c:b7:45:12:ba:e2:e3:84:73:
99:14:8e:4b:06:e7:ba:b1:73:3c:9f:d3:81:1f:59:
17:85:bb:72:af:51:82:08:47:92:65:a4:35:ce:d8:
fd:fd:79:e8:95:eb:2d:1a:20:24:de:d8:67:81:cc:
08:5a:76:6a:48:5d:ae:5e:56:b2:96:aa:f3:66:3c:
01:1f:09:6a:c1:73:ad:40:88:60:42:65:d7:9e:5b:
92:45:53:82:05:29:1c:27:2b:00:1e:a9:06:67:e7:
3d:bc:c5:58:5f:70:e6:78:1b:45:18:ff:e0:73:35:
33:21:ed:6e:24:ba:dc:79:be:8d:ef:4b:c5:46:5a:
82:ee:af:25:9a:ba:8c:2a:68:19:27:24:6d:24:d9:
a7:b8:03:d3:82:a4:20:9f:78:76:57:05:e0:f2:e6:
9d:30:55:d7:62:67:16:f9:18:b8:3a:7e:68:e6:f4:
5f:98:73:4e:ab:04:47:b1:08:f9:0e:f2:fe:94:20:
83:8e:8f:f7:b0:cb:f4:dc:9e:aa:3e:bb:0b:8b:5c:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:88:1C:7E:72:D2:C3:55:1D:82:35:E3:5B:F0:B9:7D:5E:30:B0
X509v3 Authority Key Identifier:
keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e9:77:0f:36:50:8a:ae:c0:5d:ea:54:77:a6:1e:e3:69:05:
9b:45:33:69:9a:bd:ab:8b:d8:57:64:82:bc:e8:63:d9:cf:6b:
ea:07:bc:64:2b:3c:10:68:9e:24:98:c4:a1:48:4a:be:39:44:
6b:c0:1c:0c:35:49:fe:5b:b8:e2:55:1e:8c:c7:de:d3:76:d0:
c3:28:ec:5e:b7:4a:d0:2d:5c:41:40:fc:7b:ae:86:c6:4a:b3:
9f:e5:ff:0e:fb:fb:a4:a3:e6:e2:94:4d:3a:2f:68:80:d3:b6:
08:37:ca:54:66:d1:51:7c:2e:c1:bc:e7:3d:0a:21:c1:8f:08:
67:fc:c9:aa:7c:97:ed:7c:ee:84:51:d6:76:d5:35:70:dd:f2:
3a:fb:8e:36:fe:bd:52:8f:c9:5b:21:49:52:4b:63:39:e3:85:
fa:07:b4:11:21:c1:95:1a:b4:41:b0:85:2e:e1:bf:dc:66:58:
d1:28:7a:81:a3:d1:12:22:ba:7a:52:a3:d9:7b:c0:f9:68:98:
3a:10:84:5f:06:3b:ae:cd:10:b3:fa:f0:2c:8b:0e:d9:70:da:
38:05:41:2f:c3:7f:04:5e:09:3f:b2:89:80:f2:41:2f:a8:40:
90:d4:7a:4d:cf:9c:ec:dc:82:db:5f:7c:15:53:78:15:9c:a6:
e6:79:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:55 2025 by rpki-client