Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: BTyO7EBjZEFZNsvOC/LGTrpXHGkCtP9uTgGQuU0tg2w=
Subject key identifier: 6A:B5:51:48:AC:6D:16:CB:89:E1:DA:AA:0D:8B:B3:AF:0A:41:B9:9B
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 019A4EF5194AB723EF58B225C41DD20D3E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 093F
Signing time: Tue 04 Nov 2025 13:01:16 +0000
Manifest this update: Tue 04 Nov 2025 13:01:16 +0000
Manifest next update: Wed 05 Nov 2025 13:01:16 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: 0DUWitCQMaQF3L4222cKXKBD0Qy2nKaXZvvOsrqcBjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:19:4a:b7:23:ef:58:b2:25:c4:1d:d2:0d:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Nov 4 13:01:16 2025 GMT
Not After : Nov 5 13:01:16 2025 GMT
Subject: CN=6ab55148ac6d16cb89e1daaa0d8bb3af0a41b99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:c7:5c:bd:48:85:6c:c7:54:bb:21:81:b7:
3e:a3:ac:07:92:9a:91:c7:e8:75:9d:5c:c7:2e:17:
f9:c2:0b:f0:68:c1:21:21:f5:b2:a4:11:65:d5:63:
20:36:00:8f:23:67:9d:e1:d4:8e:0a:6a:3d:a1:d8:
e6:46:94:bb:45:42:62:41:6f:d0:6b:a9:69:04:00:
f1:20:29:dd:1d:0d:e2:ab:7c:8f:a9:80:ea:b9:35:
db:c2:06:69:80:98:e4:39:23:a5:e0:ea:49:5a:32:
bf:b5:7e:03:9d:b0:05:00:ff:f0:b1:74:0b:06:05:
17:36:20:c2:b3:23:14:d9:1c:f5:d0:23:92:e7:54:
e6:b3:b6:39:8d:a8:5b:f7:07:3d:1a:89:e9:98:82:
3b:a8:61:18:84:f0:6b:cf:26:58:af:78:fb:38:87:
c6:c8:a2:c4:85:c8:aa:c3:c4:38:81:09:fb:82:4c:
4b:67:ec:6d:5f:8d:60:c0:a2:10:e3:32:4f:e5:b9:
2a:96:24:a6:f6:33:4e:51:59:ee:47:3b:c6:28:73:
1a:a8:d6:35:83:62:e0:25:ed:3d:b1:9b:a3:5d:af:
5c:94:b9:e8:76:7d:3a:6c:b9:e2:ba:98:e7:d8:79:
42:29:62:8c:bd:b7:98:50:f1:c5:c7:d7:5e:5c:eb:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B5:51:48:AC:6D:16:CB:89:E1:DA:AA:0D:8B:B3:AF:0A:41:B9:9B
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ce:1e:b1:a2:cb:4b:68:65:f1:88:24:f1:ba:65:c2:3a:ce:
23:be:b4:a9:be:c2:7c:c5:2d:74:ae:83:41:b3:c6:84:55:60:
1d:16:89:b4:4c:e2:51:37:96:c5:fd:63:f4:21:55:8a:cf:c7:
c7:8f:7e:85:85:67:57:18:dc:29:7f:6e:bd:46:78:e0:c5:f8:
c4:53:4f:c9:14:87:33:f3:6a:b1:bc:87:4e:75:10:2f:0b:4d:
05:b3:3c:bb:13:e7:26:09:44:54:f5:df:2d:02:f9:57:6f:41:
ca:1e:1a:4c:f0:30:3f:15:c3:ba:9f:c6:7f:2f:81:44:5e:56:
f4:08:03:1c:97:f3:63:4c:54:e0:ee:3c:c5:9d:f1:a2:11:86:
8c:67:96:2e:6a:04:07:d5:a0:ff:09:fe:36:32:4d:82:78:e7:
68:e6:91:05:cc:32:3e:72:c5:9c:62:ef:53:18:32:28:20:dd:
d9:e0:e5:2a:4e:88:b2:c6:ff:92:39:ae:d3:4e:75:6d:b2:9d:
56:7e:37:97:37:86:68:2e:ba:cb:4b:a7:4a:c8:d9:97:bf:40:
d6:da:01:13:e2:70:24:8b:ab:21:c8:8a:5e:91:6a:75:fd:0b:
eb:15:01:01:fe:47:24:26:da:aa:82:a5:87:be:06:9e:70:0a:
60:ce:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:03 2025 by rpki-client