Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
File: 5S2LXLp8LSuK8EbrfzEBBawMCaw.mft (raw, json)
Hash identifier: MhqYxRxT/80Rczz89FTc4Y9+hWpjTM9DqJQ2weZfACY=
Subject key identifier: 2F:E0:22:6A:91:CF:7F:C8:3B:D3:82:FD:C7:1B:40:F6:58:74:3F:A4
Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
Certificate issuer: /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Certificate serial: 019A4D7410F0087F700C5B52980A421229BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
Manifest number: 0508
Signing time: Tue 04 Nov 2025 06:00:43 +0000
Manifest this update: Tue 04 Nov 2025 06:00:43 +0000
Manifest next update: Wed 05 Nov 2025 06:00:43 +0000
Files and hashes: 1: 5S2LXLp8LSuK8EbrfzEBBawMCaw.crl (hash: 3l4UVMjW9zXNU6e8Vf8eY0tMak0k5lU3ywMsQOg7mQ0=)
2: GuglbdgQwP1s68zPxpBUKeDH1GE.roa (hash: Sf12fpSS/gSIfCrOMCQf0QxlhogqDHOYf+4YlIW4mDA=)
3: bXAo7mVEmX8iLg6GBEHUZO92vHY.roa (hash: VzCJRz8Ej6xsupU4wBQwIcnAcaQ/S8QtaCA4CMwW82M=)
4: xXGe4wyq05lrsF2tc38x8ySFe-g.roa (hash: ILPVEPIY9D2xyNF63XsnQpEMnM3xKobt0LuSW1aSmX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:10:f0:08:7f:70:0c:5b:52:98:0a:42:12:29:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Validity
Not Before: Nov 4 06:00:43 2025 GMT
Not After : Nov 5 06:00:43 2025 GMT
Subject: CN=2fe0226a91cf7fc83bd382fdc71b40f658743fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:e4:f1:02:c7:80:7c:f6:c1:9a:e6:cc:f7:
f9:03:d3:13:6f:44:37:e6:92:24:80:f7:6e:89:e2:
ed:6a:33:68:ab:75:7c:a5:f7:21:ca:99:0c:c6:b0:
d9:90:a4:bd:40:dc:7c:fb:ab:37:20:a9:3c:d1:56:
06:93:8e:2c:47:cb:b5:76:b0:de:6c:08:e2:7b:4d:
78:21:4c:4d:92:12:b6:a1:db:20:e9:45:90:f7:9e:
1a:73:30:eb:dd:39:30:8f:1f:48:82:2b:79:c8:86:
0c:ba:f6:6f:49:94:79:dc:b8:d3:df:b9:c1:96:00:
4a:f6:4f:06:09:43:89:1b:75:91:c0:84:4c:a3:df:
a6:ab:ae:f6:ae:74:d4:ed:18:60:d3:c2:8e:79:7a:
09:c1:f0:3e:54:a7:fc:10:16:66:d7:19:9a:59:b5:
cc:36:11:0f:4f:3e:17:05:a9:76:64:b6:35:fb:32:
71:c3:e9:77:22:02:85:9d:3b:6a:5b:6c:e0:8f:74:
b3:25:90:9a:f6:4d:62:f9:52:ec:ff:33:40:5c:b7:
d0:69:15:dc:61:48:00:ed:f7:3d:06:63:c5:22:ef:
3d:36:f6:29:9e:7e:4b:a5:00:18:59:00:1c:f8:64:
c9:41:86:a4:64:b7:cc:c6:c3:3d:51:f2:46:92:2f:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:22:6A:91:CF:7F:C8:3B:D3:82:FD:C7:1B:40:F6:58:74:3F:A4
X509v3 Authority Key Identifier:
keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:20:3c:48:77:85:6a:dd:cb:e3:5c:16:47:f5:70:0b:29:50:
04:cb:00:09:30:de:b9:4e:22:c4:cb:85:95:5d:23:9a:32:a4:
0a:f9:df:2e:b7:4c:42:4a:d5:0a:5e:74:e6:57:74:b9:4b:6f:
10:f4:1b:e8:32:4d:7a:2c:d2:40:b8:66:bd:6d:40:e9:59:79:
07:dc:c1:ce:8a:d0:69:64:32:e5:d2:23:82:6e:8b:e8:b4:43:
51:d7:00:94:4d:8f:34:42:15:49:8b:5d:81:31:a7:68:8b:d3:
4a:6c:b8:1f:9a:ac:52:9a:4e:92:58:70:40:7e:bf:37:14:90:
d8:b2:90:f8:34:64:d1:a8:50:14:3e:5e:59:24:17:c1:a7:b2:
3a:54:fa:3c:37:2a:95:de:4b:27:af:2f:f0:3b:35:9c:c0:1b:
df:d0:b4:2c:56:64:90:30:51:fb:ad:cf:07:dd:61:d5:f1:75:
77:78:a8:12:6f:29:3d:82:a9:8c:52:c3:07:39:a9:cb:ed:70:
f0:56:08:20:67:62:e5:09:fd:ff:50:15:d0:eb:ed:3d:3a:aa:
80:cb:b1:87:48:1f:2d:f9:36:5c:67:b8:03:3e:6b:aa:e3:80:
2e:b3:b2:d6:58:93:5e:ee:94:9a:ca:d0:4d:2b:1d:65:a9:d1:
e7:fb:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:23 2025 by rpki-client