Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
File: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json)
Hash identifier: 5BmvjjMBKpCdt0X2o1NPmHqSaXn4pwiyv9FDCr2VvE4=
Subject key identifier: CE:D3:4E:6D:6F:F3:B0:0F:A6:CE:D5:69:6E:9D:B6:8E:72:53:DA:98
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial: 019A4E8636B7ACDEC4E8F3F0F97C6B9C66F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: Kk32B0QckGkReEb/jLx0Hmznewqauz6ngybxdjn06jg=)
2: Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa (hash: FohmZC9RjfkLWGSkIiIa2VtU1w5u6RfcN+tDaynMZcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:36:b7:ac:de:c4:e8:f3:f0:f9:7c:6b:9c:66:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=ced34e6d6ff3b00fa6ced5696e9db68e7253da98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:c4:ea:fb:29:1f:0f:e5:a7:2a:e8:10:1a:
fd:93:8b:68:1c:2e:2b:8e:63:78:aa:f0:ef:3e:d8:
92:33:1f:93:fe:4b:6e:73:30:dd:ff:e6:32:dc:ac:
70:70:3c:2f:84:b2:a7:c1:eb:00:14:96:cb:b7:e4:
ce:be:dd:22:07:89:a2:7e:40:df:87:1b:1f:56:7d:
d5:3a:40:b9:7d:94:6b:15:77:80:56:db:b3:33:2c:
02:f6:28:45:3e:dc:73:b6:39:22:1f:31:85:50:78:
d0:8a:ba:5c:2d:c1:94:5a:3e:21:05:f8:6a:de:2d:
9a:f9:42:37:07:2f:2c:b6:6a:86:de:d6:91:4f:c1:
bd:22:f0:08:d5:4c:f1:ab:8b:bb:a0:49:a5:4b:01:
fb:9d:a0:22:65:f0:22:4c:ee:85:f7:17:fc:70:56:
77:15:18:90:f7:fc:1d:7c:fd:d3:82:53:03:b3:7f:
1c:ea:c2:d0:02:f8:1f:2a:b7:8f:fe:49:71:f9:75:
df:ce:45:a5:c9:f5:54:4b:12:af:3d:cd:0e:02:4f:
d3:15:e0:ac:95:15:dd:1f:e5:73:62:5c:50:c2:64:
4a:0d:7c:40:df:a3:7a:5f:47:a5:a6:0a:0c:b7:57:
a8:09:01:6c:6d:04:3c:c0:64:c7:d2:50:30:1b:bc:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D3:4E:6D:6F:F3:B0:0F:A6:CE:D5:69:6E:9D:B6:8E:72:53:DA:98
X509v3 Authority Key Identifier:
keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a0:87:5a:82:2c:1e:e0:12:cf:45:26:e9:88:8f:b3:36:45:
67:ef:36:dc:f8:49:6a:e6:28:8a:ce:d1:c1:a2:d7:b2:e5:74:
44:b5:24:13:79:19:0a:ee:c9:ca:0b:57:ae:53:1f:2e:22:0a:
84:66:b5:3f:f2:42:1a:7b:eb:3e:dd:bb:9d:12:b3:17:da:74:
a4:84:0a:9e:1f:7c:f7:79:25:fc:0d:94:1c:5e:eb:e3:37:09:
a5:56:e9:f5:51:4c:04:0d:3f:f1:ec:b4:d3:60:1a:88:ff:e3:
32:b5:d7:28:f5:3c:d5:15:07:9c:23:ec:10:5c:81:54:2e:5f:
06:9f:6a:e4:57:97:24:88:4d:07:b1:33:45:38:cf:25:14:f9:
b0:55:bf:c6:64:74:ce:f3:5e:76:32:fa:7d:a0:9f:66:0c:b8:
10:bb:23:de:9a:63:ff:0f:f0:b4:16:90:71:1b:a1:e4:30:50:
bb:4d:3e:b3:3f:d8:8b:43:15:da:f3:6c:00:ae:44:fa:35:88:
13:60:ce:84:71:10:72:78:5e:9c:49:8c:71:fe:9b:3f:80:23:
08:6d:39:58:1c:6f:f3:3e:e8:38:92:1f:ea:ef:fb:93:43:07:
d7:2e:9d:d1:59:e4:e0:d4:e8:31:5e:1b:02:48:6d:ba:b7:4c:
9d:78:d7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:40 2025 by rpki-client