Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
File: R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft (raw, json)
Hash identifier: k7i5XXHpxzgwYzEPWaLNwate0jZr0InBErhJF0w+lRc=
Subject key identifier: 40:A7:D4:64:2C:3D:CF:61:9D:B5:82:18:AA:18:E4:72:5E:A4:A8:0B
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 019A4D07821A105EA060A6E6776DA423852E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
Manifest number: 1158
Signing time: Tue 04 Nov 2025 04:02:08 +0000
Manifest this update: Tue 04 Nov 2025 04:02:08 +0000
Manifest next update: Wed 05 Nov 2025 04:02:08 +0000
Files and hashes: 1: CJKrvfEV4R_0NA2HlWLn1iaa5nI.roa (hash: E29tOWrPsjSif11h8zQtcjAftAPpTUltP2Sbayy6/Is=)
2: KdtZNUXdFelPbJtHE7AST6ZA0X0.roa (hash: UOWlHeXTHlSYHeOJT7Yelw3uceAWL37s8H8oFtXwEWM=)
3: R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl (hash: ThMnnhKhoUFdZVzG+khYi2UFF8nLYuCgHr9jnHDJqZo=)
4: v05yfGi9C_17HLObMwDo5FEICGE.roa (hash: /OVS3c7m1p/c35QFzc0QWZFHRzFKrme9OTRuEH9/X8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:82:1a:10:5e:a0:60:a6:e6:77:6d:a4:23:85:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Nov 4 04:02:08 2025 GMT
Not After : Nov 5 04:02:08 2025 GMT
Subject: CN=40a7d4642c3dcf619db58218aa18e4725ea4a80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:99:76:f3:48:55:b7:6a:59:ce:fb:da:c0:
3f:f4:8b:f9:36:55:b9:c8:8f:d3:d9:59:13:af:40:
ac:83:89:e5:9e:73:e2:d9:91:84:69:ae:8f:96:54:
af:47:98:fc:10:e3:d1:07:7c:ee:29:a4:32:04:a2:
f3:41:da:b7:16:66:c7:0a:d5:c2:11:c2:c5:b0:69:
ed:8b:55:d8:3f:dc:62:c6:a6:7a:3d:ad:28:60:35:
a3:5b:d8:f0:26:87:fa:ab:12:41:6a:86:57:f6:d5:
d8:42:12:da:96:85:7e:ee:dd:58:a6:b3:ac:be:f3:
19:0f:49:d7:c2:64:f0:fb:cb:57:3b:2b:5d:dd:6b:
f5:b3:b4:5a:1a:69:b3:e0:23:7e:a6:e7:61:7e:ff:
fb:58:3d:ff:c5:75:28:79:56:91:3d:bd:93:60:ae:
9f:93:ab:34:24:f7:21:07:64:83:28:1d:22:4b:88:
dc:fc:4d:fa:70:48:5e:87:6d:f9:ed:58:bf:a4:05:
68:16:16:8f:67:7d:6a:d2:3e:0c:c5:47:df:e2:9b:
16:93:41:f8:ba:60:f6:95:5f:44:a0:50:4c:25:5a:
cf:d7:aa:f0:3a:fe:9e:29:df:50:67:75:90:e4:a8:
77:f0:d5:dd:85:cc:6c:8b:7b:89:56:27:96:ce:9c:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A7:D4:64:2C:3D:CF:61:9D:B5:82:18:AA:18:E4:72:5E:A4:A8:0B
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:30:1c:eb:7b:dd:e9:b5:e4:10:a6:af:a6:38:c2:7b:4c:30:
66:cf:27:40:1f:bf:31:b1:cd:e3:57:04:f9:5c:a1:cf:d7:a5:
5f:f2:e7:b7:28:b2:12:67:e2:58:14:0d:fd:42:88:c4:26:74:
c2:2b:b3:33:e4:d4:b2:7c:db:7a:c3:fe:42:6e:fd:1c:93:84:
69:9e:60:a7:78:15:d2:01:6f:b4:60:d3:3e:a6:25:2e:62:eb:
91:bb:33:19:50:61:48:b1:2f:2b:d9:2c:64:f6:c9:1d:3a:12:
36:6d:dc:7f:cb:44:8c:92:ce:4e:9a:e3:62:d9:b7:02:42:5e:
86:cb:1a:ca:4c:ae:ef:d0:12:38:00:a6:f2:2a:63:7c:8a:44:
da:0b:39:06:dc:70:97:04:d7:d4:2a:f7:77:34:2e:3c:94:1f:
9d:72:69:83:7c:c3:9b:96:fc:16:ff:c9:c8:2b:30:7c:ae:70:
32:e2:f6:78:07:9a:d9:0e:cf:d4:e9:9b:96:01:92:c8:89:69:
a8:21:8c:f5:67:81:62:bf:0d:a0:1f:16:76:5b:d3:0f:ec:83:
77:15:98:0f:59:d2:d7:76:17:6a:31:84:92:12:ed:86:ee:c7:
b8:d5:84:ab:1c:cc:7d:30:e3:41:dd:6a:e3:83:38:13:94:1b:
9b:db:58:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:50 2025 by rpki-client