Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: SM4/bhheL++9C21iT6+pJ5oeIbYvCTdAPQcqNDSLz/s=
Subject key identifier: B5:68:0F:1C:E1:87:B4:2A:9D:B9:17:D6:A9:6F:50:F0:36:D6:C7:04
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 019A4DAB2D952369BE228CF42E4875E26EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0AF9
Signing time: Tue 04 Nov 2025 07:00:55 +0000
Manifest this update: Tue 04 Nov 2025 07:00:55 +0000
Manifest next update: Wed 05 Nov 2025 07:00:55 +0000
Files and hashes: 1: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: E1v6VaLrQN8Qvox6v0zHjoWnHp5XOKUP2Hzrm7IKOTI=)
2: aTpXXC3KXcSwtDcwh6F3niPkHWU.roa (hash: ustcN0bW+oUtpGBdM/dRdF4t5dwpSRMOI1Anoza5nkA=)
3: mddXkjH3p_vL4vOQ0h8JV4B1WxA.roa (hash: 9qLzR+8C4wkJn5IoUy5FHXOEqts6JcExi312TdCvl90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:2d:95:23:69:be:22:8c:f4:2e:48:75:e2:6e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Nov 4 07:00:55 2025 GMT
Not After : Nov 5 07:00:55 2025 GMT
Subject: CN=b5680f1ce187b42a9db917d6a96f50f036d6c704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:61:db:23:ae:ca:07:90:14:a3:a5:e9:5a:
56:3c:f9:f8:46:4a:19:7b:76:4b:02:43:ae:87:dc:
bb:da:9c:ce:bc:b9:b3:57:9e:62:b4:8a:7a:7c:43:
44:09:e3:09:88:de:0f:ad:f5:e0:ec:09:82:68:b1:
4b:18:f0:ab:ee:db:a3:77:65:74:3f:90:54:6f:2c:
d6:ea:c4:e0:5b:ed:8c:8a:a2:18:c1:98:6b:1d:53:
db:92:dc:74:ac:59:a8:5c:19:cc:be:4c:7f:5e:a3:
bc:f4:87:14:0c:8d:e1:9c:d3:9a:3e:b6:41:fd:b1:
6e:af:cc:7c:fe:39:38:6a:93:92:59:d2:34:89:71:
88:9e:88:64:de:4c:84:79:79:75:4b:be:d8:ee:83:
ac:79:55:eb:b5:4c:03:d5:0f:90:1f:76:6c:c2:95:
0b:b3:7c:4a:e8:08:c8:e6:38:b6:6b:c4:f9:2f:f6:
b2:ec:cc:c0:20:3d:c9:db:da:fd:a7:6c:fd:8b:c8:
63:d3:b5:af:7f:aa:1e:3d:78:02:5e:8a:dc:46:a9:
ab:1e:d6:b9:99:4b:54:2d:a1:73:c7:b7:7f:ba:fd:
40:60:bb:e9:6c:b9:13:35:10:00:97:bd:f3:9f:0b:
40:73:1c:36:6f:a9:b6:a9:8e:36:65:c3:df:86:21:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:68:0F:1C:E1:87:B4:2A:9D:B9:17:D6:A9:6F:50:F0:36:D6:C7:04
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:df:d9:a6:3d:0b:cf:0b:fc:97:e4:5a:94:9a:91:81:d7:f5:
8c:a8:07:45:ae:de:d8:d9:55:a3:e2:90:89:4d:7f:f1:63:ac:
1d:80:ca:99:01:38:61:3b:52:c7:3e:11:dc:a4:94:9c:66:c8:
be:dd:c2:22:cc:5d:fb:25:61:99:ba:67:fa:1b:7f:69:0c:a4:
32:ab:2e:77:22:c9:69:89:77:53:9f:d0:05:05:6b:ac:67:0a:
0b:f4:ee:bf:41:85:2e:22:2b:0e:5f:ac:1a:92:93:b7:44:d4:
09:1b:ea:16:58:16:5c:14:0a:f4:21:de:e2:0c:54:95:2c:a6:
9a:52:fe:20:a2:17:b1:32:38:eb:9b:b1:1e:00:7f:01:7c:5d:
66:b4:b7:9f:bb:4d:61:26:0b:66:1a:90:07:67:d8:06:18:ec:
0b:7b:2a:14:80:70:f0:79:c1:f4:07:8d:da:e3:f7:f8:37:85:
16:77:b1:f7:64:bc:dc:13:1c:42:79:63:fc:19:f2:d2:34:50:
67:c4:53:fd:96:bb:33:ae:4d:bc:1b:87:f5:23:d4:28:d1:e7:
f5:d5:d0:ee:87:2f:5f:e2:29:ec:72:18:2f:ca:09:ab:0a:96:
93:1f:06:70:99:d8:d0:04:56:86:b6:c2:16:a2:4a:d5:93:6c:
21:b1:ce:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:16 2025 by rpki-client