Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier: xEiHxPiyGKWDNQb34AVQblRZJDy825vVYeTxBxZ8v5A=
Subject key identifier: 03:00:4E:24:D0:93:F4:25:F6:FA:D0:3D:14:09:5A:91:92:16:22:95
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 019A4EF448C4B6A84D44AEFA73A005D65E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number: 16C6
Signing time: Tue 04 Nov 2025 13:00:23 +0000
Manifest this update: Tue 04 Nov 2025 13:00:23 +0000
Manifest next update: Wed 05 Nov 2025 13:00:23 +0000
Files and hashes: 1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: HOwoNjeIMVubP1XFSOirU/SKr5jBjNe7iXD2CP0431k=)
2: KRSzUBxyLebIHKF4Pc56YInJ7G4.roa (hash: bYjIh5qsMD47j13Dp6UvpgvAJLXcSZU6nC4Ef8AfKgY=)
3: twkvRlKBbWGvXorm0QWgUQL2aXw.roa (hash: RdMA83SLaDMkPV3ykgU6NQ7K1hlLuBXMiacxW37ziVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:48:c4:b6:a8:4d:44:ae:fa:73:a0:05:d6:5e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Nov 4 13:00:23 2025 GMT
Not After : Nov 5 13:00:23 2025 GMT
Subject: CN=03004e24d093f425f6fad03d14095a9192162295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:69:7f:1b:ab:84:67:8f:72:b5:0d:b3:53:
12:4e:2d:12:8e:34:e9:14:54:b6:4c:90:e9:e3:76:
fa:62:2d:08:44:07:2e:7b:33:c5:ae:50:e7:90:bc:
be:99:7c:f1:76:5d:e3:f7:50:fa:7d:2e:e3:c0:46:
e1:65:5a:9e:f0:8e:f1:35:e9:64:94:2d:7c:b5:d9:
6d:c2:9d:6f:27:36:c0:df:9a:fc:95:d8:ca:20:e1:
d3:61:76:c6:1f:46:1e:0e:c9:be:14:98:43:69:4a:
0c:31:99:cf:54:3c:2f:58:bb:89:a5:57:72:ef:13:
01:20:52:e7:c0:63:20:f9:d8:4f:98:44:ba:40:27:
66:ca:7b:3a:4d:89:eb:c6:ae:b5:c6:1b:8c:80:b5:
2a:7a:d5:b4:f8:85:ab:a1:e1:9c:7d:ee:6c:8b:a7:
cf:f2:a4:20:31:c9:2b:f4:81:83:55:36:f6:fb:6b:
20:ef:9b:06:f9:5a:fd:cd:fc:56:bd:e4:06:a1:68:
a2:7d:93:bc:6b:77:e9:02:bd:d8:5d:7b:b3:be:28:
db:3e:2b:f7:29:d0:f1:e4:7e:7c:65:e4:f4:f2:b7:
bf:1f:02:41:68:66:ce:d4:8b:cd:70:49:12:92:d9:
c5:bf:85:8e:1d:5c:6d:e3:a4:2b:f3:c5:17:65:4b:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:4E:24:D0:93:F4:25:F6:FA:D0:3D:14:09:5A:91:92:16:22:95
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:93:a1:37:61:dc:3e:30:78:a9:68:23:c4:95:c9:52:ff:8c:
d2:d1:df:cb:b0:e4:4b:45:75:2c:2e:c5:a4:3f:84:3c:10:2f:
56:ab:c0:15:11:00:a0:bd:56:61:12:44:9a:c7:7e:f3:ee:67:
20:5b:38:8d:67:67:9e:30:d4:27:a4:ae:07:f8:e6:88:76:94:
e9:09:6c:d9:b6:d8:48:69:c5:a2:5b:1b:ce:b6:58:fd:71:44:
cb:5b:61:f3:fa:61:b0:57:8d:8c:b2:b7:78:ac:9a:82:20:46:
ea:2b:ee:bf:1b:91:87:d1:f0:9e:10:8b:94:17:9e:f6:c2:0b:
e5:15:e3:fc:26:65:c4:b3:37:de:e1:21:d6:33:e7:c4:92:c3:
24:40:9e:12:a1:85:3c:ef:13:86:6f:a1:8b:8b:bb:0c:22:26:
95:c2:b1:09:4b:06:32:c3:8c:4d:e5:c2:9f:93:fb:cc:29:2b:
13:a0:d4:84:16:96:aa:9c:bf:80:e7:54:dc:c7:8e:42:36:36:
7a:e8:24:ed:3b:66:fe:d3:4b:27:c2:17:15:b9:b4:f8:f4:9e:
32:f3:c5:07:dc:0f:6f:f4:2e:44:f1:08:f3:06:b4:c1:2f:f9:
4a:38:51:be:0d:11:aa:cb:6f:53:54:03:e8:b6:88:e7:09:2c:
ec:69:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:22 2025 by rpki-client