Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: yDx0GE90useTaZPpBNV6Y4M+4lIrV0uBAzRAEpVaVtU=
Subject key identifier: B9:11:85:B7:5F:B6:FF:0C:17:49:52:B2:DF:84:15:73:D1:D4:A6:9A
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019A503DDBAC0DAA9194FB5709A785A02204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0933
Signing time: Tue 04 Nov 2025 19:00:22 +0000
Manifest this update: Tue 04 Nov 2025 19:00:22 +0000
Manifest next update: Wed 05 Nov 2025 19:00:22 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: t2D6GQZMyrOi0N6QhfPxZQl598VN8IOzIctjxxas/Bc=)
2: YRQ4Vg3A1i1QaO-e977IcW6KB9E.roa (hash: rc17/JwW2r6jYEgRn/1E0O8jtu0CDbAtQ0C5kFjlEwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:db:ac:0d:aa:91:94:fb:57:09:a7:85:a0:22:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Nov 4 19:00:22 2025 GMT
Not After : Nov 5 19:00:22 2025 GMT
Subject: CN=b91185b75fb6ff0c174952b2df841573d1d4a69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:a9:20:1e:52:2e:a7:15:bb:00:07:b9:3c:
c9:d5:54:5a:47:2e:a1:ad:41:36:19:be:7d:ad:55:
64:d3:9b:3d:ca:87:82:e8:27:37:be:19:cf:8b:8f:
6d:95:c3:b7:a5:2f:33:9b:16:16:36:05:fc:4c:98:
e2:56:d6:c7:f7:97:fa:72:b4:b4:60:7d:a4:d6:8f:
f2:e3:e4:f8:2d:1e:eb:0a:e2:dc:11:26:c2:ef:ae:
5c:d8:97:d3:fa:1b:9a:1d:3a:20:cf:bd:5a:8e:fe:
98:a5:2e:25:b7:ec:8a:fb:48:ff:3a:88:1f:8d:39:
02:5f:0e:ad:65:75:c1:e7:de:3c:bf:8e:bd:9c:a6:
7f:78:aa:f7:1e:ae:96:9e:1c:54:32:34:c1:e2:a9:
57:32:05:b9:6a:89:6d:74:63:70:67:84:b3:59:32:
13:55:5f:07:5b:0c:c9:ca:19:71:f0:08:8b:e5:dc:
2c:c6:da:ec:51:95:c3:01:b7:5a:7b:c9:a8:b4:cd:
31:43:49:76:ac:ed:2e:b3:fe:ca:c9:38:2c:f0:6a:
f5:c8:88:7f:bf:9e:c0:d6:2d:e9:d3:ce:51:1d:33:
6e:f5:52:44:c4:9f:60:46:e6:54:40:65:bb:34:74:
c1:ac:4f:14:4b:2a:13:58:50:26:1a:c2:d8:48:0d:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:11:85:B7:5F:B6:FF:0C:17:49:52:B2:DF:84:15:73:D1:D4:A6:9A
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f0:b5:1c:28:17:b8:a5:56:8d:36:41:e8:6c:70:98:8d:24:
a2:74:78:46:48:85:e1:6d:cf:44:09:3a:7b:ed:7b:5e:cc:fb:
94:de:3f:6e:85:de:06:ce:80:fd:35:2c:54:56:90:e5:bd:f5:
d9:f1:f5:e7:99:8d:95:a1:f4:29:db:49:30:44:30:3c:f1:42:
a8:76:9e:28:3d:ea:78:b8:78:7c:2d:9f:50:a5:fc:d1:96:5b:
24:d1:75:32:97:3c:f1:9f:ce:4d:1a:be:a1:60:cd:9c:50:17:
58:be:32:01:27:a8:4e:4f:c0:3f:23:f8:38:4d:bf:79:0e:f3:
60:ee:37:f0:af:e5:31:a7:02:42:bf:c5:01:ce:8b:36:2e:d3:
56:af:10:d4:69:e3:d9:a0:47:9b:c4:0c:20:fb:9e:1b:aa:cf:
6c:d6:3c:c5:b0:e6:3e:52:6e:ce:54:25:72:0a:85:10:5d:d8:
9a:f9:de:de:d3:4c:56:ea:4a:6f:6b:33:62:1e:cb:1f:86:99:
2a:86:e3:0e:1a:72:57:32:ae:9a:27:13:b2:9f:47:2d:94:b6:
ee:7f:47:a5:88:29:ac:b2:18:23:27:a0:79:23:f8:f5:9b:be:
8c:35:36:2e:cb:58:10:c9:59:19:bb:ba:16:34:d1:69:3e:b2:
68:61:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:38 2025 by rpki-client