Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: HNH0qlBspsixIfVUOzxGAZ5gUQoA9eFkXS0GfMwiU6o=
Subject key identifier: 9D:F5:46:DF:7C:CC:5D:9D:5D:43:D8:1B:03:3C:B7:AC:68:CB:4C:56
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 019A4EF42D21B89AA8A8C28E54DE8196982F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 10E0
Signing time: Tue 04 Nov 2025 13:00:16 +0000
Manifest this update: Tue 04 Nov 2025 13:00:16 +0000
Manifest next update: Wed 05 Nov 2025 13:00:16 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: uTvxErJkmYbkx7itgLCk+zC/rIC1vjW6rHOuNVGa+W0=)
2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2d:21:b8:9a:a8:a8:c2:8e:54:de:81:96:98:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Nov 4 13:00:16 2025 GMT
Not After : Nov 5 13:00:16 2025 GMT
Subject: CN=9df546df7ccc5d9d5d43d81b033cb7ac68cb4c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:be:44:71:09:42:54:6e:c2:ac:82:0d:dd:
82:be:41:82:fc:57:a2:44:b2:c8:f5:c9:45:f0:0e:
8b:4c:67:ce:b3:05:cb:95:57:3a:4d:76:0a:36:73:
ac:68:a1:62:eb:c6:af:7c:77:dc:7e:82:bc:6c:b7:
0d:3a:20:3d:e2:15:b3:25:bb:08:fc:b6:5c:46:eb:
14:02:00:4c:b5:00:90:f2:e4:15:5d:93:2f:cf:7e:
b0:4d:e3:24:61:48:c6:35:a0:70:70:48:8c:1a:e4:
08:13:a9:44:f3:91:ce:a2:3c:ce:48:85:d7:9e:1c:
df:ec:67:75:e4:11:a6:95:76:e6:81:44:19:8f:ae:
44:b4:ed:0c:bb:2e:31:b3:40:ed:1a:ef:bb:5d:02:
a8:be:ee:57:c8:b3:6c:16:c1:91:93:2b:64:1d:e2:
92:0c:d8:f8:b8:59:50:96:0d:fb:e4:d5:38:ba:54:
19:a7:00:47:bf:27:bf:e7:a1:8d:4a:08:13:c6:72:
c6:49:06:81:14:2c:6f:6c:fe:e7:44:21:22:26:27:
09:f4:f6:f9:9f:b2:e5:47:37:5a:b5:16:31:a2:2b:
46:49:2c:24:31:8b:f0:85:28:1c:19:22:7a:40:28:
b8:c3:e0:40:5a:9d:90:7a:5b:41:a1:bf:80:69:22:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F5:46:DF:7C:CC:5D:9D:5D:43:D8:1B:03:3C:B7:AC:68:CB:4C:56
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6f:f8:59:6d:32:96:b5:20:65:97:87:c6:4d:47:e5:b3:30:
7b:fb:91:72:f2:01:8a:21:b1:0f:c9:99:74:1c:41:a9:92:76:
05:f3:48:4c:ae:8a:53:13:08:89:10:e3:b2:b3:50:09:65:e8:
d5:27:bb:2c:05:66:a8:03:23:b4:6b:f7:9a:62:a2:50:51:17:
d7:16:11:21:61:f6:05:0b:9c:c5:d8:ee:e7:fc:fb:fc:47:11:
fa:b2:df:6a:f4:85:01:c7:3d:6b:d6:71:f9:5e:42:eb:37:5f:
35:df:37:5c:aa:d2:0e:96:a4:84:16:51:cd:ab:d2:ed:eb:e8:
d0:f0:da:d3:1d:cf:48:de:8b:6b:fe:c4:49:86:59:2a:59:9e:
0d:98:39:91:69:6c:e6:37:ff:51:25:2f:87:1e:b3:d6:08:c0:
24:f4:a9:d5:af:23:2b:d6:ad:89:90:58:52:5c:1c:32:4b:ef:
87:59:e9:cd:45:7b:76:b0:79:27:c8:16:e8:83:b4:a9:a1:88:
76:02:7e:61:f8:ba:13:93:d0:cd:63:4b:c6:5c:f8:85:1d:6c:
cc:5c:ab:8a:4c:07:16:e6:13:87:9b:ed:32:ad:e5:e0:4c:d7:
71:61:b7:6a:b3:a7:c4:b1:5e:8a:2d:41:93:8c:e4:dd:7e:78:
b5:35:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:26 2025 by rpki-client