Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File: 5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier: IG/pgEggWHQTh3bqULR9uJSUcyDzDgKIGtHcG2EQuwo=
Subject key identifier: AC:FA:28:DA:3D:B3:77:6D:80:6A:4C:3E:17:E1:CC:73:99:C6:57:18
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer: /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial: 019A4FD000C43451B165DA04D15E4170B664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number: 0D23
Signing time: Tue 04 Nov 2025 17:00:22 +0000
Manifest this update: Tue 04 Nov 2025 17:00:22 +0000
Manifest next update: Wed 05 Nov 2025 17:00:22 +0000
Files and hashes: 1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: 7fmOHtGLrKCjGoZ0R5jmcUlMbE50akGtFr8NBQBxtJQ=)
2: MwlTna0ke4fMkgBxDifihFV6g70.roa (hash: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:00:c4:34:51:b1:65:da:04:d1:5e:41:70:b6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Validity
Not Before: Nov 4 17:00:22 2025 GMT
Not After : Nov 5 17:00:22 2025 GMT
Subject: CN=acfa28da3db3776d806a4c3e17e1cc7399c65718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:1a:70:aa:14:51:9a:db:30:6a:ae:5f:01:
52:2b:a9:a2:e1:e4:22:a8:dc:60:ec:21:20:9b:e9:
68:c3:2c:03:3d:c2:ef:ef:97:02:e4:48:c6:0a:15:
6d:dc:b3:f6:d0:c6:26:46:3e:5b:32:cc:29:0c:70:
6e:e2:37:f3:6f:0f:70:40:6d:52:e7:22:95:ed:1c:
fe:7b:81:ca:9e:8c:ff:2f:53:d1:50:dd:2e:eb:d2:
a7:3f:41:3b:d9:5a:20:53:42:48:e0:08:dd:7d:24:
95:8e:64:d9:68:bb:3c:c2:6c:1b:d5:0b:d0:8a:0f:
35:59:ea:76:23:af:c8:af:f7:0e:db:ab:92:93:9e:
62:c9:e9:72:ee:23:88:64:1c:71:38:1e:da:8a:2b:
66:65:eb:98:39:85:86:f6:75:4f:79:24:6e:0c:a4:
4d:88:10:b3:4e:e1:b8:5b:8e:63:1f:05:9d:33:9f:
ac:74:7f:52:90:fd:ad:5a:93:41:c6:a4:05:4b:52:
94:27:a9:5d:a9:8f:23:17:51:d2:cd:56:c2:f2:74:
6e:19:73:91:cd:50:6e:4e:53:9b:17:ad:6a:b9:8f:
39:14:77:4d:1e:52:7f:ec:fe:41:08:2a:63:d1:37:
e7:b7:1c:70:75:fa:b9:81:13:4f:64:33:c3:1c:f7:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FA:28:DA:3D:B3:77:6D:80:6A:4C:3E:17:E1:CC:73:99:C6:57:18
X509v3 Authority Key Identifier:
keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:03:d9:46:27:b3:fc:95:fb:93:31:83:e4:66:7b:a7:86:d3:
23:03:a1:41:2a:42:d7:08:db:e0:9f:11:5a:01:e0:78:a6:66:
d0:58:93:dd:1d:42:67:25:bd:67:a0:27:bd:af:8a:d6:bf:13:
05:94:5d:20:53:16:b3:ac:f7:a2:f2:60:cf:ec:c6:95:ac:13:
86:19:6a:02:20:0a:f6:5e:9d:55:8d:d4:7d:e1:3d:07:d4:56:
34:f0:4e:48:2a:4b:fd:ee:60:3f:5b:94:79:c9:13:4a:3b:06:
2e:c3:f8:c1:03:55:45:9c:53:98:05:bc:99:96:a8:78:c0:b8:
d0:13:bc:3f:6f:99:4c:d2:de:b2:13:2a:a2:7b:93:3b:a0:62:
52:50:3e:e4:c8:3e:d6:fe:76:09:70:0b:bd:95:31:03:49:3c:
47:af:6b:08:f8:be:c1:31:00:8b:25:2c:e9:da:6d:19:d5:87:
58:9a:54:0a:05:63:fa:6a:d4:06:ba:60:a2:83:6c:cd:ef:ab:
65:d6:f8:c7:e1:47:02:d9:bc:a1:88:ad:08:b5:78:00:c3:e3:
a5:41:65:43:82:3c:eb:32:c6:85:20:83:f3:ca:1e:9a:f1:4d:
46:20:57:74:f3:e5:a9:72:eb:ae:ee:43:7c:a0:4d:7e:33:b7:
b9:cd:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:31 2025 by rpki-client