Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: 5wiClFpgHmXdhupDlK8EExvOf+pJw4CHJWXLxAYxAbY=
Subject key identifier: BF:EB:34:60:60:A4:FA:F7:CB:E9:95:D5:25:FF:55:FE:D0:D2:ED:0B
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 019A52D0EE33F6CA98EE66D166877CAC331D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 13A0
Signing time: Wed 05 Nov 2025 07:00:15 +0000
Manifest this update: Wed 05 Nov 2025 07:00:15 +0000
Manifest next update: Thu 06 Nov 2025 07:00:15 +0000
Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=)
2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: UC2JMrMwSkqveq+9pkgYhRxDV1JZ+HmS+kTyeMKVt40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:ee:33:f6:ca:98:ee:66:d1:66:87:7c:ac:33:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Nov 5 07:00:15 2025 GMT
Not After : Nov 6 07:00:15 2025 GMT
Subject: CN=bfeb346060a4faf7cbe995d525ff55fed0d2ed0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:e6:9d:12:42:5d:77:ed:54:3f:a6:7e:11:
c3:21:91:2f:e8:e8:96:7d:0e:48:71:8a:20:50:df:
02:f5:29:b1:24:6a:c7:a7:f5:34:f9:65:63:be:86:
32:46:95:6f:10:27:69:19:4a:61:3e:27:c6:3c:e2:
5d:0d:72:41:40:7e:dd:71:3c:29:e4:12:81:03:74:
5f:85:12:58:61:fe:21:44:79:17:55:9a:70:3a:8a:
b7:19:22:fa:13:79:ab:98:1c:59:09:50:d0:11:dc:
6a:c4:e5:7a:0e:78:a1:dc:93:b9:31:05:26:a9:74:
3d:23:49:7e:73:e1:2c:d6:13:30:b8:e7:74:12:50:
a9:29:8d:aa:5b:64:db:9e:f5:25:ca:14:d7:39:8e:
2f:c1:c4:95:62:df:c2:85:12:99:3e:3a:4c:2f:2e:
40:a8:82:5b:4c:48:75:d2:41:3d:b6:00:e5:5e:96:
73:59:2d:99:1e:3d:4e:06:71:6c:9a:fd:80:f4:1e:
c4:3a:79:6a:20:44:da:40:24:9f:93:ea:41:7e:db:
b4:7b:44:d8:0c:f5:96:be:4c:b5:fb:03:5f:a9:14:
c7:42:6a:99:91:96:c7:d8:27:77:23:c0:c1:8c:3e:
14:ea:6c:03:ce:f9:5a:70:e0:2a:bd:9d:e9:aa:41:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EB:34:60:60:A4:FA:F7:CB:E9:95:D5:25:FF:55:FE:D0:D2:ED:0B
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bb:19:c6:7b:5b:03:32:63:3d:2f:f0:c1:b7:e5:31:ce:1d:
fc:a2:76:60:ef:9a:b3:af:9c:7b:da:96:40:91:cf:9e:c8:ad:
82:92:1b:ce:88:08:cf:eb:d0:9c:70:47:dc:de:1b:97:cd:a5:
5b:c8:b4:ae:97:b2:fe:fe:32:06:d1:ab:62:6d:9a:fa:66:2f:
4e:d6:dc:2f:6a:6c:53:2e:13:f1:7e:01:74:df:fb:7f:c0:2b:
dc:b6:5c:49:7b:b5:12:e9:5c:73:58:c6:0a:84:f5:96:80:20:
14:16:74:85:cb:3d:26:e3:12:bc:c8:1d:04:ac:5f:62:73:fd:
11:73:cb:82:40:8c:7a:c0:4e:81:1e:ce:9d:26:be:96:09:c3:
d0:f3:64:d9:d3:01:55:27:67:65:67:42:2e:0c:a0:59:4f:f6:
89:8a:1c:6a:8d:74:83:fb:03:c0:94:71:71:57:7f:a0:e2:92:
2a:69:53:a6:9a:65:c3:7d:db:52:18:47:01:35:ba:ac:b5:a0:
05:64:65:38:4e:ee:44:ec:57:92:a0:4f:89:4c:9c:f3:34:85:
55:e4:73:70:4f:3b:a2:c2:2b:60:a3:a9:d3:02:7e:f3:f5:7e:
70:9b:08:85:63:81:d0:67:b4:8b:38:bd:fa:d1:ab:f8:a6:76:
30:3d:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:20 2025 by rpki-client