Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json)
Hash identifier: sbmd5GBXgs+HfDU4FKAUSIh7wBFLcOIeTwCrMH+keqg=
Subject key identifier: 02:1E:51:CF:A2:6C:C9:94:30:B4:E7:E2:8B:CE:75:36:17:3C:30:B5
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial: 019A4E189C8C6BEE0B416CA5A874D695D61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
Manifest number: 0EAB
Signing time: Tue 04 Nov 2025 09:00:27 +0000
Manifest this update: Tue 04 Nov 2025 09:00:27 +0000
Manifest next update: Wed 05 Nov 2025 09:00:27 +0000
Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: exJ2D/EvsXGjMiNAoOtaAsNekymVggXnlnoestPtf6U=)
2: TeyiHHpQzPXntQ9zcodgsnssabQ.roa (hash: 99RzEV6KxbBUQmEGjwYOg/0KALhFJ98CPqecVaZd8t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9c:8c:6b:ee:0b:41:6c:a5:a8:74:d6:95:d6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e505d93497f19d2563066b409200969711f28c67
Validity
Not Before: Nov 4 09:00:27 2025 GMT
Not After : Nov 5 09:00:27 2025 GMT
Subject: CN=021e51cfa26cc99430b4e7e28bce7536173c30b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:51:48:ad:67:5f:39:42:6d:64:0d:69:c3:
28:41:b4:69:60:43:4a:c6:1e:af:ab:d6:b4:64:29:
f4:96:95:49:a2:db:c5:5f:73:90:b7:a2:e8:b8:56:
a2:45:3d:02:ee:17:16:ff:3b:e3:1d:28:bc:55:25:
5c:f5:e2:89:58:25:7d:e1:56:77:55:25:8c:8b:d2:
6a:fe:e1:ae:36:8c:47:98:db:3e:0f:10:c8:7b:f7:
ef:8e:72:8d:a8:25:f3:ab:69:54:26:6c:62:18:ca:
1a:09:94:59:c1:2b:f4:38:d2:67:34:8b:d1:9b:ab:
ed:bb:e8:57:d1:b0:91:1f:47:c1:89:dc:af:04:ff:
7c:fc:8a:7b:d8:33:22:6c:28:ba:4a:ea:10:f4:8b:
28:c0:58:85:aa:df:59:d3:cc:81:9e:91:4e:24:38:
b3:b0:ba:23:1a:01:4b:50:15:66:2e:53:71:fb:12:
28:29:95:5b:e9:90:4f:04:89:ea:69:f4:7e:78:b3:
1b:07:35:59:58:24:85:c1:7f:a9:38:1f:73:9d:d3:
67:45:d5:98:3e:de:9b:63:c5:f6:53:17:7a:ba:a6:
7d:cb:c2:22:0b:94:20:50:b9:87:b3:ad:11:31:78:
3d:71:7d:6d:28:6c:dd:81:98:97:1f:54:e3:65:0d:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1E:51:CF:A2:6C:C9:94:30:B4:E7:E2:8B:CE:75:36:17:3C:30:B5
X509v3 Authority Key Identifier:
keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ba:7a:a7:b7:38:03:62:70:8b:41:c5:f1:bb:b9:c2:5f:3e:
4e:f4:0d:7c:2b:79:42:90:a1:94:76:33:30:39:34:9e:0f:f8:
78:79:33:c9:cc:55:65:b6:84:2d:fb:a3:21:ab:7a:d2:dc:30:
cb:f7:3d:3f:22:8f:04:11:47:ae:00:ee:7d:a1:19:ee:3b:d1:
56:33:38:37:14:07:3d:e8:eb:9c:11:b5:6c:16:58:d5:72:2f:
ee:c2:cc:3c:2b:fd:f6:e6:4f:3b:0c:af:cc:87:d4:fe:89:bd:
aa:f6:4e:38:b6:13:12:b4:6d:5f:27:2c:87:99:3f:4b:49:49:
e0:92:b0:11:c5:e7:7e:bb:a4:1f:60:07:c4:67:be:98:e8:2a:
eb:40:63:1c:de:5e:3e:9e:75:60:7d:8b:89:9d:d4:e2:5e:2f:
66:d5:fa:6e:18:be:b6:79:5e:34:3b:2c:40:51:d4:23:57:2d:
d0:86:d9:d2:65:1f:4a:86:a0:f0:4a:35:5a:7a:a0:61:1d:5b:
4a:3c:95:80:58:eb:4d:a3:a2:26:94:fc:75:0e:0c:cf:e4:c6:
c1:42:41:0e:d5:a3:79:bb:5a:38:70:ae:24:fd:d0:6e:28:a0:
c2:1c:b9:50:35:21:55:97:e8:d4:89:17:af:b4:70:b0:37:85:
cd:2f:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:41 2025 by rpki-client