Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: m/qy9SSIrs5tL+U9AGJa6Urbypb9I7DFkyJzon/vXxQ=
Subject key identifier: E7:FF:71:99:40:05:15:4F:88:88:9A:4C:C9:AF:0E:16:87:E7:4A:1C
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 019A50071CC346F74046068C135CA7C59901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 117E
Signing time: Tue 04 Nov 2025 18:00:34 +0000
Manifest this update: Tue 04 Nov 2025 18:00:34 +0000
Manifest next update: Wed 05 Nov 2025 18:00:34 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: Rn3ywHwu8gn2G0ueuKfNsWDa40PE9SmYks9Ho9zz1as=)
2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:1c:c3:46:f7:40:46:06:8c:13:5c:a7:c5:99:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Nov 4 18:00:34 2025 GMT
Not After : Nov 5 18:00:34 2025 GMT
Subject: CN=e7ff71994005154f88889a4cc9af0e1687e74a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:6d:01:f5:a1:e1:73:d5:03:d5:c7:10:88:
a9:69:05:55:0d:81:d6:39:f5:8d:e8:a6:3c:9c:87:
cb:81:ad:2b:0d:c7:d0:65:bb:53:29:04:3d:e5:a2:
cc:85:32:69:bd:e7:4a:d3:c8:90:d2:3d:5f:0d:51:
7c:37:48:68:c2:f3:d9:08:52:37:e5:9c:14:8d:f3:
72:57:53:08:75:52:87:5c:66:81:84:db:59:ed:e3:
66:2d:c8:db:ae:86:eb:f1:a6:0e:fe:c8:64:1c:e6:
5a:ae:13:49:f7:5b:1e:1f:26:13:62:a9:ee:54:9d:
e0:59:f6:d6:7f:2f:b7:38:46:16:0f:71:96:88:5a:
72:9a:a6:25:e9:f6:b6:b2:79:81:c7:8d:e8:bf:cb:
de:9e:a3:71:89:e1:00:3b:cd:c7:c8:13:ba:24:4e:
47:b2:66:a7:3e:39:14:30:11:be:af:14:0c:c3:0c:
b8:6e:d7:70:36:0d:36:c8:ef:54:83:5d:f4:33:0e:
6a:5c:ca:55:62:42:7d:69:1b:eb:9e:69:2d:7b:57:
dd:b8:98:87:40:60:89:9c:d2:2e:80:d7:b4:a7:2d:
c0:5c:17:89:63:e2:ca:14:6c:eb:02:81:a8:77:79:
80:a4:f0:ab:51:82:df:92:e2:98:8e:a2:df:a3:70:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FF:71:99:40:05:15:4F:88:88:9A:4C:C9:AF:0E:16:87:E7:4A:1C
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:72:29:44:34:5e:67:06:80:27:0d:31:ef:44:96:bf:99:da:
cf:34:50:15:04:60:28:f5:f5:a5:88:e5:7d:25:42:d3:e7:30:
19:b0:eb:02:50:37:a0:65:93:f3:fc:8f:1d:bd:9f:54:cb:04:
23:e1:f5:12:64:67:f9:59:76:5b:36:4f:69:e8:9d:d1:5a:73:
9a:6e:5e:85:73:df:e2:d3:6f:42:88:26:ae:dc:09:35:b9:16:
0b:8a:de:bf:d7:83:f2:02:d8:42:80:5f:13:f5:0d:ee:ae:0b:
f8:6e:e9:f5:bf:ac:95:60:0b:55:7b:8f:55:9a:62:8a:8c:f1:
61:5e:cd:22:20:06:3c:c4:80:9c:09:17:ae:9f:c0:d5:1b:de:
f3:2c:fc:b7:31:5a:9f:0c:c0:9b:11:c7:29:c3:32:3c:c4:06:
ac:c4:23:01:6d:80:c0:4a:f6:8d:da:98:a2:32:a9:1a:47:8f:
ab:0b:a0:f1:56:c4:c2:6f:c5:0f:0a:76:a0:d1:f9:82:4c:c5:
39:19:31:16:c6:d3:0e:a8:61:d3:8c:6b:5e:b0:fc:a0:72:34:
3d:cc:36:a6:8e:81:3f:1c:33:40:c8:ad:53:d1:a9:9c:2f:84:
6b:1f:3b:3c:8d:c3:73:97:d3:df:bd:29:6d:6b:d0:18:da:b1:
4f:a0:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:57 2025 by rpki-client