Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: 5M0uwSvivcW1UJy+MKPir39R6U7BJvMu2BE+n8Y0dBw=
Subject key identifier: C0:A2:00:BE:29:08:A6:E1:21:FA:11:EC:34:47:67:93:51:24:05:AD
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 019A4F99829D9886643A8F5CF1220013FD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:51 +0000
Manifest this update: Tue 04 Nov 2025 16:00:51 +0000
Manifest next update: Wed 05 Nov 2025 16:00:51 +0000
Files and hashes: 1: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: YfMNoVKgFQV3HK+NtXpYtVC+ATKWU2Bkpb5UjGKINkA=)
2: 5JInjtJs-s2-yK_dBCuc4HDNHSk.roa (hash: JUxQOg0RzN7jHCpHsSZf+phi3+AooD9Ty47K9VLPoKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:82:9d:98:86:64:3a:8f:5c:f1:22:00:13:fd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Nov 4 16:00:51 2025 GMT
Not After : Nov 5 16:00:51 2025 GMT
Subject: CN=c0a200be2908a6e121fa11ec34476793512405ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:46:58:c7:01:d2:49:9a:68:86:4e:47:c3:
49:92:f8:7c:b6:ca:ff:64:ee:16:19:cb:1d:63:2c:
b8:b6:30:e6:0e:23:ad:a3:7b:10:4b:f5:53:16:dc:
bb:f7:a8:8a:ea:86:15:40:4a:20:4d:29:c8:e3:0c:
cd:4c:8d:84:8f:78:cc:9b:7e:00:e9:43:87:90:0e:
db:bd:d3:6c:b4:81:b2:9a:ca:58:3b:a2:62:c3:b7:
ec:02:88:1a:72:eb:ad:ab:b2:ef:14:41:1e:6e:19:
d3:97:43:18:b6:44:34:17:4a:22:6a:5a:54:f3:9d:
c5:94:e8:4f:e5:6e:f8:4c:aa:1b:d8:3f:e5:47:2a:
68:cd:ab:94:cb:d3:fc:a1:8c:92:7c:9a:fc:bb:8d:
1a:67:51:da:72:18:24:b5:d8:2a:f4:38:0c:b6:2d:
68:82:df:cb:20:10:1a:b5:5c:2b:f4:4b:bb:7c:80:
3b:72:3b:98:a8:0f:29:f3:0b:d1:ef:2f:3c:61:cc:
0d:73:91:fa:3c:49:7a:68:cc:ff:57:1a:11:46:11:
dd:28:98:bb:9f:8f:1f:ff:ae:73:fa:e7:25:6f:4e:
92:5f:0c:1b:2f:8b:f5:15:6b:23:d7:0b:e3:74:98:
ec:14:14:a6:3e:6a:91:1d:b3:58:58:b0:78:ec:c7:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A2:00:BE:29:08:A6:E1:21:FA:11:EC:34:47:67:93:51:24:05:AD
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4f:fe:5f:30:dc:4d:2e:03:8a:c4:8f:c3:d6:05:94:d6:59:
4a:98:12:0b:e9:aa:88:2e:db:4b:ab:20:4b:ea:06:76:b1:86:
63:d5:97:8f:7b:22:8d:f9:7f:82:14:c2:be:99:1f:bd:42:52:
27:74:6b:b8:47:cb:42:cc:d2:b1:18:2b:4c:bb:9c:79:db:61:
ae:1f:19:a0:e7:42:7a:97:f6:32:21:3c:39:c5:3e:7a:a5:d6:
9f:80:d1:79:64:82:3b:ed:bc:f6:a3:34:c2:23:bd:d8:ea:60:
f9:20:e0:f8:cc:a6:99:c7:9e:b0:a9:51:9c:00:36:18:54:5d:
57:4e:b5:de:e7:84:c3:92:f2:14:5e:67:1c:4f:85:b3:02:1e:
8b:50:69:ff:5c:47:a1:50:41:94:80:5f:6f:d0:a1:f6:e7:73:
e8:11:b9:b1:65:e1:bb:55:d9:27:fb:c7:16:0d:f4:e4:6a:3e:
4a:ca:29:d5:7b:54:dd:7c:5d:96:1e:9d:45:38:c2:a8:b1:d8:
a9:4d:fc:d2:0d:b2:54:56:69:82:6c:0a:35:58:cb:6a:0a:c5:
24:51:13:78:ac:73:d8:3f:87:9b:e3:f7:fb:60:23:f6:69:02:
db:71:be:74:2d:09:ec:9f:b6:06:a8:70:4a:c8:66:38:9b:51:
ad:bb:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:03 2025 by rpki-client