Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: VDDM402gzkL1XxdvyMswmvAxD6OKZip4kdXbdVNF9Pw=
Subject key identifier: 0B:3F:B7:81:5B:25:00:BC:04:7D:11:D4:2F:1B:2E:34:9A:6B:FE:7F
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 019A4EF506B872BAB6D8DB0EB33E6897BF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:12 +0000
Manifest this update: Tue 04 Nov 2025 13:01:12 +0000
Manifest next update: Wed 05 Nov 2025 13:01:12 +0000
Files and hashes: 1: 1kmQygnKJuFomMWscO7_tmV5MPY.roa (hash: 1R7F/hqJ/U8XRXU5qTBNp/iBMwQ2HNOAJ68qC4TlDwI=)
2: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: xpS+7y8oZNVq7QqQ2TVPpmO+h8OIne+HP10oOBWkvRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:06:b8:72:ba:b6:d8:db:0e:b3:3e:68:97:bf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Nov 4 13:01:12 2025 GMT
Not After : Nov 5 13:01:12 2025 GMT
Subject: CN=0b3fb7815b2500bc047d11d42f1b2e349a6bfe7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:f3:85:76:25:7f:1b:fd:7d:eb:be:ee:7f:
7a:91:20:98:7f:13:c0:7d:85:8b:4c:82:62:74:46:
2e:c6:2e:8c:5a:5d:6e:28:7b:01:9d:56:2c:86:9d:
6b:27:55:59:3b:0b:33:bf:66:51:45:36:99:d4:d2:
0c:cc:50:2c:0c:1b:5f:43:5c:94:23:7c:1b:82:ed:
f0:8f:73:ba:9d:e8:20:a3:70:4b:eb:3d:25:a6:5f:
65:30:16:d2:c9:d3:54:5c:d1:de:ed:fc:c0:67:d6:
ff:1a:b1:c0:4e:cf:91:12:1e:d6:2a:dd:c7:bd:1a:
2f:1f:cc:44:1f:a1:62:d4:a1:dd:32:41:d7:39:6e:
60:d5:ce:22:7b:d8:6b:f0:5c:be:2b:ef:44:2f:8c:
21:2d:b4:ec:74:ee:04:83:13:4f:c3:19:b0:e3:e2:
ff:5d:67:54:4f:55:a7:f8:c1:7b:6c:74:b2:46:9f:
4c:67:15:a0:7d:26:85:ae:99:43:08:a7:a0:21:10:
c6:b9:bb:2f:8b:ed:36:a4:3e:49:8f:7a:f6:35:cb:
21:02:6e:3c:4c:82:7a:39:62:6b:de:ec:b9:af:4e:
de:bc:93:44:4b:da:dc:c3:d1:e5:6b:87:5d:80:50:
b5:ad:5a:a4:c9:51:b1:61:8a:96:1d:d7:ec:93:64:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3F:B7:81:5B:25:00:BC:04:7D:11:D4:2F:1B:2E:34:9A:6B:FE:7F
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7d:dc:ee:a8:74:19:45:7e:68:be:20:e7:cb:8a:9d:d8:87:
c3:2c:46:ab:d8:da:29:31:3e:40:a4:c8:73:bc:9f:38:8a:3f:
22:19:8a:9c:3b:c4:3b:bd:93:c4:ea:08:15:00:85:5b:d0:37:
3f:12:05:8a:6b:16:b4:84:3a:17:a1:3b:e1:b0:81:c4:a3:1d:
a1:57:61:de:b7:19:ed:de:7e:3a:a8:e5:f7:6e:72:f5:8e:2b:
93:66:72:03:26:71:2e:72:d4:e4:9c:40:6b:5d:61:10:cb:e6:
16:ef:06:61:ed:b7:aa:a9:5c:ca:0c:c3:55:57:da:91:bb:9e:
f3:50:51:8e:49:e6:11:99:30:e2:36:a5:d5:05:af:e0:f9:8f:
31:23:f0:74:81:a8:a7:3d:6f:b5:bb:31:ba:40:55:46:c4:ac:
f2:ef:d7:e1:82:ff:9e:96:12:81:d2:53:55:d6:af:6f:88:ea:
ae:cc:96:e5:f4:22:cf:47:e0:3b:e4:12:fe:14:f5:9b:d9:20:
87:23:af:78:b1:70:5e:be:7c:0f:56:a9:34:83:f0:57:aa:ad:
ad:56:24:1c:14:3d:5d:bf:9f:7e:ed:83:d8:5b:de:de:e9:43:
b2:8d:a2:f9:4c:1d:ed:20:ef:00:42:0b:79:9b:72:03:51:09:
5d:f0:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:40 2025 by rpki-client