Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier: DyJR8lVTIL8ugzvgjBO3UTzHGyTIognKXbhqL6CAqkY=
Subject key identifier: 5A:E0:93:D1:24:28:BC:E1:3F:10:DF:D7:82:B4:CC:A5:B8:CA:4E:AC
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial: 019A522C05670E0B5FF878DAE78427A0829C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 04:00:07 +0000
Manifest this update: Wed 05 Nov 2025 04:00:07 +0000
Manifest next update: Thu 06 Nov 2025 04:00:07 +0000
Files and hashes: 1: F3E0kox0yNLNp6GPi3ZmqfgQKTs.roa (hash: UneyfmP6aoU2v1WkHtcA23llsK6rkwb/p+IXrda/FUg=)
2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: hNlkwW2HbdHtyLXy7J+EbzB6i0ilBqdtQNV5fjHO0aA=)
3: jukzQpP3Hs9hT3M_u2swPOcw5vQ.roa (hash: /+E7Xpgo8ugKY85NqX64gyU8Uakmwa+zSPYJruYsfmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:05:67:0e:0b:5f:f8:78:da:e7:84:27:a0:82:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Validity
Not Before: Nov 5 04:00:07 2025 GMT
Not After : Nov 6 04:00:07 2025 GMT
Subject: CN=5ae093d12428bce13f10dfd782b4cca5b8ca4eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:35:34:e6:56:45:a7:5b:74:dc:ab:14:f8:
83:3b:c0:99:0a:c9:5e:e7:a6:10:cd:18:f3:5f:d8:
3a:8c:f9:5d:be:47:b3:c4:00:25:1d:b5:e8:5e:b6:
8f:00:7b:3f:e4:5e:d1:81:49:2f:83:7f:5c:47:66:
74:59:71:c4:d3:a9:f8:05:b7:a7:42:eb:0d:1e:ef:
8a:50:bb:b6:da:bb:64:2b:3a:da:d5:94:70:cd:69:
90:60:92:94:e9:32:1e:c3:a8:82:8d:27:51:f3:67:
dd:35:f6:5c:d3:c2:d1:20:14:d9:b7:a4:70:11:22:
85:2b:58:df:9d:49:6d:08:46:73:51:7b:94:72:af:
56:47:14:6f:c3:bf:b9:c1:9d:40:eb:1d:b1:3c:40:
f7:fd:f9:b8:9b:aa:6d:82:bb:96:78:04:23:09:d1:
0f:ef:ef:62:6d:04:e4:5a:4f:d5:67:0f:a6:cb:df:
8c:33:f5:e8:d2:c5:09:eb:15:f0:a4:75:1d:f2:43:
bc:eb:f5:01:0f:52:57:ab:1c:be:6c:ba:e1:2e:28:
91:07:91:ff:08:21:f5:d8:21:44:dd:8c:84:69:7c:
13:c8:39:52:8d:94:38:05:8b:85:4e:57:37:4a:94:
60:a3:25:ee:a3:9e:2d:03:42:cf:b5:14:83:50:ce:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:93:D1:24:28:BC:E1:3F:10:DF:D7:82:B4:CC:A5:B8:CA:4E:AC
X509v3 Authority Key Identifier:
keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7b:b4:15:9b:64:51:fa:a8:d0:39:40:7a:ce:f3:4d:03:c9:
ce:ba:02:8e:e9:ec:e0:f6:d1:16:2c:04:ac:0a:a0:ab:a7:1b:
5f:42:0a:f5:b3:b3:dd:65:18:86:e2:9c:96:76:f5:f4:29:af:
58:58:d9:3f:6b:49:52:7b:96:6a:5f:4e:58:96:cd:fe:14:73:
0a:b9:70:f9:a9:fb:0e:1d:86:f3:ac:fd:f7:f4:b7:d4:b0:1e:
2e:e0:f7:e8:a7:5c:11:3f:a0:99:35:20:c4:51:1a:8d:36:62:
f5:43:fd:99:df:2c:f6:88:ba:5f:41:a9:b3:f5:86:78:9f:90:
dc:1c:fb:1d:7f:fe:2a:82:85:5c:0a:3d:2b:bc:49:28:bd:f0:
5f:3d:60:dd:63:51:2b:27:b3:ba:24:31:a4:d6:2d:49:ff:b3:
78:b6:d9:51:59:a6:03:08:02:12:46:df:ca:a8:67:63:59:32:
c6:ff:bd:7c:5c:70:38:3e:ee:43:af:56:b3:6a:2f:03:87:f3:
14:0d:f9:ea:70:6a:90:ec:b0:77:db:19:99:6c:94:23:cf:3a:
9b:9c:6b:d0:d8:36:3a:9e:9e:f1:c7:77:28:5e:f9:93:9f:09:
18:d4:9f:74:38:4a:ba:3e:c4:23:1f:c7:d3:e5:15:f2:ec:3b:
3b:28:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:42:31 2025 by rpki-client