Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: KqLmYbq8hNuIvT509BwURWLvAddflKzE6oJb87atXAU=
Subject key identifier: F4:89:FC:79:F5:28:BB:39:59:6B:EE:26:F8:01:FC:98:6D:0F:99:4B
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 019A4E4F8ABD9CAF3B1DD35C0B956AA8225E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:26 +0000
Manifest this update: Tue 04 Nov 2025 10:00:26 +0000
Manifest next update: Wed 05 Nov 2025 10:00:26 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: MwiQ75+n/XBX0TnSi0282/0uq1I60v5uPQv2uvtYX9Q=)
2: kenow9ooVwL0t4IuHSVvvQIsN8M.roa (hash: tJkXtVd1TBPTWkBnhiKcyLiHlQeoQgvy5+UbWV83vUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8a:bd:9c:af:3b:1d:d3:5c:0b:95:6a:a8:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Nov 4 10:00:26 2025 GMT
Not After : Nov 5 10:00:26 2025 GMT
Subject: CN=f489fc79f528bb39596bee26f801fc986d0f994b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:df:aa:57:1c:a0:1f:ec:e1:8e:48:08:3f:
fa:6e:e4:26:df:29:cf:b8:59:12:5f:8b:46:b6:68:
7b:8c:62:bc:b5:61:55:7c:9f:0b:3e:ac:b7:05:3b:
9e:d4:c2:10:2d:28:1e:a3:5d:4e:09:ea:ed:55:e2:
df:d9:41:98:89:c7:4d:13:eb:db:7f:4b:eb:0d:4f:
65:a5:99:2a:13:c4:a5:ff:f1:5d:2e:a6:bf:6d:9a:
1a:19:e8:33:bb:c5:8b:92:9e:da:b8:ed:41:32:4c:
8b:c9:c0:46:6a:b7:2e:62:b0:f3:2b:46:14:e0:64:
9e:9e:c8:7f:90:13:fb:5a:c0:9e:65:b3:8e:e5:63:
ff:fc:ab:a7:ab:2c:e3:3e:60:9a:85:b7:9f:08:52:
88:00:a4:af:ce:a0:36:4b:9a:74:32:9e:ca:53:2a:
c6:99:65:c0:3e:8d:e4:a7:77:c6:4b:51:0c:39:9a:
3c:73:0b:98:2b:1d:84:ec:5e:98:22:fe:95:c0:25:
32:a0:41:50:50:6f:c2:b3:86:21:de:bb:ad:45:55:
77:4b:78:9a:47:15:dd:28:73:00:de:62:98:93:4e:
5c:8b:19:79:fc:98:05:f9:55:b6:bf:09:18:30:8b:
45:01:bf:01:da:97:b7:89:67:36:f1:20:a9:49:76:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:FC:79:F5:28:BB:39:59:6B:EE:26:F8:01:FC:98:6D:0F:99:4B
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1d:50:f2:5c:94:7e:50:46:05:1c:5e:bf:2e:f6:3c:ec:75:
e7:e7:76:a3:78:71:2e:84:57:aa:c4:53:59:e6:2c:ba:44:29:
ec:f3:aa:e5:fe:f7:af:19:85:08:54:58:77:32:b4:13:d1:d8:
d1:3c:10:5d:a6:df:4f:95:55:a1:69:b7:8f:76:29:6d:e9:ca:
31:25:ef:f9:ca:14:47:b0:6f:99:46:c5:5c:44:3f:fc:c3:66:
a2:d1:28:71:f6:d1:c8:49:f1:f8:c4:4b:bd:15:94:1f:a1:a2:
45:7c:60:b6:f1:0f:cd:eb:38:7c:81:27:5e:ad:60:58:d8:f6:
f1:ca:2d:7a:69:dd:a2:db:f6:93:be:fb:ab:dc:d1:22:0c:e9:
a5:a7:80:90:50:e1:dd:e0:0f:53:57:86:bf:e0:47:3e:de:f5:
68:12:39:43:8f:e6:16:8d:cc:c0:39:88:71:b1:27:08:be:ee:
28:bb:8f:07:52:4d:76:5e:79:9f:40:f9:e5:a7:d6:c6:a1:76:
6d:99:65:f7:f3:2b:8f:37:c0:54:7c:24:b9:af:ec:4e:39:5c:
97:dc:31:c9:4d:a5:25:c1:db:01:f2:b8:af:cf:d1:2c:97:0f:
ab:a6:a9:f0:a2:52:81:7a:93:c6:a9:61:89:46:be:a0:11:2b:
e4:fc:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:25 2025 by rpki-client