Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier: 5C7R8SNdaOSLRvUxDGnu17ztDLiFA4ngEwlksco+bPU=
Subject key identifier: B8:A0:65:E8:27:84:52:C9:92:10:CB:29:B7:C6:5D:F2:6A:70:B6:5D
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial: 019A53AD4F34E7A61A850D408764BCDF93EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number: 0A3B
Signing time: Wed 05 Nov 2025 11:00:58 +0000
Manifest this update: Wed 05 Nov 2025 11:00:58 +0000
Manifest next update: Thu 06 Nov 2025 11:00:58 +0000
Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: bJR7zFqgD/tRSWJ9dWIhZ4k6axQ6BS9bmlg2Tvm5sGo=)
2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:4f:34:e7:a6:1a:85:0d:40:87:64:bc:df:93:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
Validity
Not Before: Nov 5 11:00:58 2025 GMT
Not After : Nov 6 11:00:58 2025 GMT
Subject: CN=b8a065e8278452c99210cb29b7c65df26a70b65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:14:5f:e1:f1:db:d4:58:ed:d1:ab:08:ff:93:
a0:a9:f2:d0:b3:17:59:84:69:b4:a6:28:a2:47:df:
77:93:da:9f:83:b4:39:3f:e9:17:49:6b:c3:34:d7:
6f:b1:b8:cf:35:77:df:69:fb:52:3b:d7:00:11:9a:
88:45:08:5c:db:d1:2b:4d:99:af:80:8b:be:2e:27:
ad:08:a5:3d:69:a9:a5:8b:22:bd:5b:e8:de:79:6e:
34:84:24:c2:91:11:09:ee:48:06:c9:85:a3:e6:db:
6f:73:1e:87:d3:6e:be:af:11:18:c9:24:18:0a:7d:
20:98:78:5d:e3:eb:b7:46:ff:73:ef:86:20:5c:13:
d7:8c:14:6c:68:d3:d9:25:51:8f:46:ae:5c:11:9a:
f0:67:ae:8d:a8:ee:04:38:a9:04:5e:ef:4b:fd:35:
f4:73:aa:6a:39:9c:07:ba:78:4f:61:8e:48:a0:fb:
ab:6f:09:63:52:22:d2:e2:66:b6:54:3e:49:af:27:
49:2c:39:0b:54:9b:53:0f:bf:d6:66:81:72:16:3e:
c0:28:fe:b4:77:fc:5f:f7:9b:31:6c:71:bf:87:bc:
13:4d:b1:53:96:b7:cc:91:86:e7:6c:d5:8d:76:4b:
b1:9c:73:1e:6d:a9:a1:c6:a6:50:83:80:8e:3e:1f:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A0:65:E8:27:84:52:C9:92:10:CB:29:B7:C6:5D:F2:6A:70:B6:5D
X509v3 Authority Key Identifier:
keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:26:73:6c:49:9a:00:0d:5e:80:10:36:d2:77:be:3e:24:
25:14:c0:01:bf:3a:83:da:32:16:28:d2:6e:9e:2d:7b:3d:f9:
e8:81:17:d6:0b:22:01:ba:37:e4:61:1f:c4:9b:27:87:0d:9d:
e3:d4:19:7a:7b:bd:c2:b5:cb:31:37:19:a1:ca:43:d4:18:03:
a2:70:5d:c9:02:fe:17:df:f9:9c:ce:fd:59:20:87:04:51:71:
a4:38:58:17:cd:90:58:18:fe:68:4b:13:2c:f6:1b:0f:85:1e:
97:45:fa:47:c4:e4:0c:f2:6d:09:8f:55:e7:8b:50:05:5e:31:
b7:0b:d5:c5:18:52:07:b5:0e:e6:57:04:53:ab:e1:5c:17:e2:
2d:b4:dd:52:84:71:94:cf:c6:fc:07:fa:e3:5c:d3:24:27:89:
e8:1f:16:08:10:2a:39:b1:3f:27:36:c1:ce:4e:b4:f0:21:07:
d8:3c:a1:19:2c:58:d8:ab:bb:d6:a3:05:31:b5:ff:0c:a0:65:
68:ed:c8:54:72:e1:80:b2:4f:51:c1:9d:dd:2b:c5:b5:d1:cf:
f1:f2:29:77:94:e9:5f:db:8b:40:49:8c:69:f3:c5:cc:7e:7c:
28:4e:73:9d:f3:80:1f:00:86:3d:5d:d6:e5:69:01:fc:82:8e:
31:c6:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:14 2025 by rpki-client