Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier: aVBRfX1i25G59fQwBFNRgxWXuzf1NBxz5W+UVxADFao=
Subject key identifier: 5E:3C:49:A1:6F:85:AD:44:EE:2E:3B:43:7A:3A:91:B3:EE:9C:68:AD
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer: /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial: 019A4DE1F0BFD66D77CEF8866E920ED9E042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number: 06FA
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: kRJX50P95SvPpmxW36QacIvUVeie5BScZbBIB8JF2Uo=)
2: zwhatF5o3yk6nLXIa0yxqzP0ZTc.roa (hash: 9S00G7VwkBsXnXA2C5JQWmhqMbRgsqzBdUuOpwkdR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f0:bf:d6:6d:77:ce:f8:86:6e:92:0e:d9:e0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=5e3c49a16f85ad44ee2e3b437a3a91b3ee9c68ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:ac:48:b4:80:01:0c:6a:e2:8a:8e:5b:90:
de:56:5e:b2:53:8c:6d:e6:ef:78:d1:ba:fb:9e:02:
11:3b:c3:d5:2a:e9:d2:15:09:79:05:b6:91:fc:ec:
05:f2:3f:0c:c4:ff:34:42:2c:90:2e:d4:2b:e6:b6:
90:da:a6:bf:1e:c1:53:fa:c9:0b:3f:b3:f9:c2:fb:
19:f6:27:b3:75:5a:96:07:bc:0a:18:38:eb:93:1f:
91:7c:06:8f:dc:ca:c4:74:55:20:14:f1:40:02:09:
b4:a5:12:57:34:0d:45:64:69:03:26:a8:d1:54:f0:
92:8e:49:81:e0:b0:c2:a6:0b:cf:b3:bf:3a:24:75:
75:1d:f9:5f:a1:ce:24:f6:0b:17:1b:a7:99:de:a5:
9c:ed:15:55:f5:83:0e:e8:27:37:e5:64:95:8a:0c:
0a:f4:2b:9e:1a:26:a7:fa:94:ba:fd:6b:03:96:06:
55:8b:04:2d:a6:f0:6f:3e:c9:36:c3:42:47:72:95:
5e:30:9b:24:4a:b3:55:ca:62:5c:f4:75:31:de:56:
01:1b:cf:c8:f4:f9:23:98:0e:b1:db:ff:f3:55:63:
cf:e7:93:0f:4e:c2:cc:ed:28:6e:c1:07:05:8f:af:
e2:f5:e6:6d:b2:ad:80:31:9c:d2:bc:76:79:7f:1c:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:49:A1:6F:85:AD:44:EE:2E:3B:43:7A:3A:91:B3:EE:9C:68:AD
X509v3 Authority Key Identifier:
keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bb:c6:a0:3b:94:db:ea:6d:b5:1a:e5:19:e0:5e:a5:7d:4c:
82:04:87:2b:c9:f2:f8:5e:30:8f:2d:14:91:b0:1a:af:b5:d5:
98:75:b6:6f:14:c8:7c:80:4b:2f:68:85:5c:68:1a:c0:58:d4:
d2:4f:46:8d:dd:a0:1f:43:7b:21:49:fa:a6:3a:a4:31:d0:6a:
68:90:59:a2:e5:5e:fb:da:b1:42:4d:97:4e:7e:84:23:b4:66:
41:71:95:e7:06:e6:cd:e7:d3:36:60:c4:99:2c:4c:e7:a5:98:
91:c6:30:7d:e9:59:87:fe:75:46:74:db:f6:72:7a:34:de:62:
b8:b0:bb:64:6b:c0:47:52:d2:df:50:2f:27:fc:7a:4c:8e:29:
c8:fb:32:0e:c5:ff:5d:df:0a:e0:d5:da:05:92:9b:b9:24:08:
ba:27:e8:f8:34:e3:7e:2f:ef:07:6b:e8:6a:f3:79:23:ae:0d:
3d:b4:87:70:6e:12:40:55:98:2e:71:25:40:0b:8d:d3:fb:c7:
1a:d9:c0:eb:b0:fa:6c:43:e8:30:27:ab:75:f8:eb:e5:c2:be:
38:c1:e9:5f:99:bb:04:9d:0b:08:b3:2f:91:3b:9a:33:d6:e0:
86:17:1b:33:6e:b7:88:59:91:3f:e6:33:53:02:69:bc:5b:bf:
de:44:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:58 2025 by rpki-client