Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
File: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft (raw, json)
Hash identifier: VUxiH7LQPRvzy+ORRR6t3CznTjazQ9EApFFr1CBAV5A=
Subject key identifier: 17:DF:8F:DF:3E:9E:4A:F9:5B:CB:18:9C:48:65:65:E3:A6:62:26:C1
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 019A5074B1F3228EEB106A40CA4B6D6C2520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
Manifest number: 11F1
Signing time: Tue 04 Nov 2025 20:00:16 +0000
Manifest this update: Tue 04 Nov 2025 20:00:16 +0000
Manifest next update: Wed 05 Nov 2025 20:00:16 +0000
Files and hashes: 1: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl (hash: 9TC1gXxHK3hR0ydjPscswJBTjMASwVVHtj5sNPdxxvk=)
2: WFOxXq8-woghob55sftxvTt6FdI.roa (hash: hwAy54H63vrYPhBgVny9CWYFBq69ABYXgCXp7pxF/eQ=)
3: nMthV73xKQot_nDw1BjaSeVp1wM.roa (hash: TYeby9qItlQuzOaWwKV9Jy5leKuAxnH4NPibMj98Eco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b1:f3:22:8e:eb:10:6a:40:ca:4b:6d:6c:25:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Nov 4 20:00:16 2025 GMT
Not After : Nov 5 20:00:16 2025 GMT
Subject: CN=17df8fdf3e9e4af95bcb189c486565e3a66226c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:7c:4e:b4:2a:97:da:7f:a0:dc:60:c4:f7:
74:8f:f5:41:55:1e:44:41:36:ee:7d:39:0f:35:cd:
fc:9f:3b:1b:f5:34:5d:27:9b:e5:0b:e2:4b:01:9c:
ae:f9:1f:c3:38:fa:78:67:f8:6b:10:3a:21:e3:12:
4c:70:58:3b:99:e3:49:1b:7b:dc:ab:35:8e:3e:62:
35:4f:80:59:3e:1d:2c:f0:c7:6a:f7:7f:eb:cd:93:
60:0b:6d:8a:d9:2c:61:7b:e3:b8:19:56:4a:a4:c4:
15:cb:8f:41:a2:c1:83:8e:0a:24:1f:63:86:81:8d:
67:74:13:37:3d:1c:1a:d7:4e:f0:ac:d3:96:dc:66:
7d:9f:d9:6a:0b:c6:64:20:ed:1c:d5:58:05:14:4e:
9f:2c:ab:0e:aa:25:ed:4e:55:f3:28:bc:5c:c4:8f:
dc:ae:36:2c:3d:20:f7:0c:53:e5:94:a2:d3:e8:ae:
15:09:07:f4:cc:e1:a7:57:35:ac:ce:f0:66:04:3b:
c2:75:ea:40:eb:51:d4:55:a7:e8:a5:0f:20:1c:88:
dd:7d:3e:97:cd:2b:bc:60:0a:53:05:e8:6a:04:d5:
14:47:0b:fc:58:ad:1d:d7:ea:c1:0a:9b:1a:5e:7f:
0f:80:f0:22:a3:76:a3:a6:0d:35:59:0d:01:6d:34:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DF:8F:DF:3E:9E:4A:F9:5B:CB:18:9C:48:65:65:E3:A6:62:26:C1
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:41:2b:ee:4c:1b:9d:f4:60:43:13:38:4c:de:04:43:a8:
f2:c1:6d:ed:68:1c:5a:d2:16:c0:dc:03:dd:45:87:5c:b4:58:
fd:9d:97:b5:d6:df:5e:e3:9d:8c:94:3a:ed:02:72:28:e1:fd:
37:7e:27:2b:81:cb:71:cf:50:e3:b6:1a:1d:12:78:2c:23:aa:
0d:c9:ad:a5:fe:26:2f:93:ed:7c:ea:48:7a:1a:d0:16:61:39:
25:2f:64:38:44:5d:6b:07:23:50:44:c9:e0:7a:02:cc:60:e1:
6e:ba:0f:7e:48:83:f2:16:ec:0b:e2:06:64:07:5a:59:26:a4:
0e:ba:03:ed:e0:8f:ad:3a:4f:2a:7d:5c:0d:7d:81:6e:be:cd:
c0:9f:a9:8f:a8:86:a2:7b:db:68:92:0c:c6:aa:26:0b:12:82:
d6:72:e3:17:5a:1d:c0:0c:63:d7:1f:de:f1:ac:4b:bf:d6:14:
1a:0e:39:45:bf:f8:f5:2a:61:09:32:22:bc:83:5e:2d:c1:0b:
ed:e2:f5:83:31:32:9b:e3:e9:d7:87:b2:f3:48:17:35:79:7f:
31:c6:ee:f8:ec:b5:2d:aa:dd:15:23:01:9d:4c:19:00:9c:d2:
d0:08:c6:41:82:60:13:4c:c4:4b:db:91:0f:6f:76:fa:e6:dc:
ae:d4:1e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:35 2025 by rpki-client