Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
File: 5KVOQra3iNjki0iEQt2RiySFrDU.mft (raw, json)
Hash identifier: 11RqKtEzn6+f0lNc1O3WFlttcOPNDOIOhVWtmkkkynI=
Subject key identifier: F9:B5:4F:5C:AD:66:90:3F:E0:F3:65:6C:99:15:40:A5:FA:DC:4B:4A
Authority key identifier: E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
Certificate issuer: /CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Certificate serial: 019A533F8C8A9060E9EBC9C2A50C8D6314AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
Manifest number: 0155
Signing time: Wed 05 Nov 2025 09:01:04 +0000
Manifest this update: Wed 05 Nov 2025 09:01:04 +0000
Manifest next update: Thu 06 Nov 2025 09:01:04 +0000
Files and hashes: 1: 5KVOQra3iNjki0iEQt2RiySFrDU.crl (hash: aJCfGbBUZ0LLE14KQXcK2NYzAOt16rS+6mbc66M1/qs=)
2: crXLrPic8k9vyE5SxEPR-_3DVks.roa (hash: isyyv0lSga2YsVBxt0riFZT/vQhsYIIC7MEzRQbYvEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:8c:8a:90:60:e9:eb:c9:c2:a5:0c:8d:63:14:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Validity
Not Before: Nov 5 09:01:04 2025 GMT
Not After : Nov 6 09:01:04 2025 GMT
Subject: CN=f9b54f5cad66903fe0f3656c991540a5fadc4b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:a0:a3:1b:0c:85:7e:0c:b2:26:b9:f1:ab:
30:0f:3c:ae:3b:fe:64:8e:36:de:d9:19:62:b0:e3:
b6:ad:14:c8:04:5f:30:f2:36:0f:16:e7:51:6f:10:
ea:cb:39:4b:15:72:8a:5a:90:da:6f:cf:47:65:2f:
c2:3f:b8:9c:cc:ac:f5:e1:0a:21:2d:d1:12:1e:95:
16:45:46:58:70:cc:99:98:23:60:6a:0d:89:5b:f5:
e8:0d:35:37:7a:3f:bc:3e:11:03:1c:8f:da:ae:8a:
a0:29:f8:a7:34:46:fe:32:3b:10:29:c9:3a:f7:2c:
f5:53:b0:8c:71:cd:84:67:b8:f2:93:10:15:32:69:
e1:ec:29:e3:62:80:aa:e5:df:58:94:68:96:06:d6:
5c:84:02:60:1a:8c:d0:de:ad:93:93:53:38:63:d3:
b4:9f:b1:7a:7d:50:dd:fd:ce:b4:ef:fc:1f:5c:41:
66:c3:16:9c:7c:f2:b9:11:96:ab:1c:bc:65:79:21:
e3:db:99:a1:c2:f5:de:d9:3e:2b:6c:20:69:7e:c6:
de:a0:33:d2:85:32:91:84:56:63:1d:fd:79:7b:0b:
0c:b1:ee:8a:b8:d9:22:46:81:6b:9f:08:d1:1e:49:
9d:e4:b5:95:66:2a:96:ec:4d:18:58:f0:ed:38:a9:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B5:4F:5C:AD:66:90:3F:E0:F3:65:6C:99:15:40:A5:FA:DC:4B:4A
X509v3 Authority Key Identifier:
keyid:E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:dc:ba:2c:46:6a:af:53:25:5e:8a:82:47:5f:80:33:c2:df:
11:01:98:84:54:1b:9c:9b:31:ba:39:3e:87:8a:f0:20:42:61:
5e:76:1f:07:4c:02:1e:e7:84:14:f7:4e:65:b7:75:4f:25:c4:
48:95:3e:0b:35:df:5c:e0:d3:40:c4:09:85:7a:15:10:e7:13:
8f:9e:b0:54:3c:66:9e:26:b5:c3:54:71:5a:9d:57:6e:cf:5c:
35:79:7d:c3:b3:d9:06:24:7f:cb:a3:a1:c2:08:e8:70:97:75:
75:24:e4:8e:d5:70:01:86:7c:11:8c:3d:66:d6:e8:7e:e8:c0:
68:57:81:3c:95:bf:46:66:ea:2c:4b:56:87:f7:1d:5f:4a:e7:
53:1e:be:97:3e:02:53:06:1e:c2:39:a5:da:8c:b5:25:46:db:
f2:80:1f:77:51:37:e0:4a:ff:18:b6:e6:4e:db:cc:62:57:12:
d4:d3:ae:20:1d:2f:d5:ae:c2:18:36:f8:16:a2:0f:5e:d9:66:
31:5d:a6:77:e4:1f:d8:2f:ba:9d:c2:72:52:34:a0:ba:0a:e1:
4c:85:fb:52:8a:49:f9:56:26:ba:eb:69:07:bc:7b:e7:a6:ab:
a0:c3:33:6f:b8:bd:a0:a4:ed:0e:73:00:1f:0c:f1:9b:c5:cb:
30:32:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:11:39 2025 by rpki-client