Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier: jsZzpK5KiOSfZIqZ+s9jvWOXnjcGfBTgKg3ImDkvu2s=
Subject key identifier: 0C:6A:B3:39:FF:67:13:47:69:B4:98:A2:BA:C1:0D:32:8D:95:FE:77
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial: 019A4D7461E0381CB90D8C43F04DA61594C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number: 13EA
Signing time: Tue 04 Nov 2025 06:01:04 +0000
Manifest this update: Tue 04 Nov 2025 06:01:04 +0000
Manifest next update: Wed 05 Nov 2025 06:01:04 +0000
Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: XO58LHpBD8n9294SFeih159wN/wY83++Pi4XNJ87oMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:61:e0:38:1c:b9:0d:8c:43:f0:4d:a6:15:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Validity
Not Before: Nov 4 06:01:04 2025 GMT
Not After : Nov 5 06:01:04 2025 GMT
Subject: CN=0c6ab339ff67134769b498a2bac10d328d95fe77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:3d:24:17:b2:52:c7:8a:a6:02:7e:ae:54:
cb:bb:e9:df:79:bb:e1:f4:87:e8:61:8e:4f:9e:fd:
d4:57:c5:bc:fa:fd:40:0a:b4:60:c7:71:e9:28:74:
81:6a:b0:be:d3:7d:2c:12:51:37:b8:b2:99:77:0e:
8e:92:20:cb:a3:2f:9c:51:03:f5:01:ba:e5:01:a7:
b5:e1:7d:82:28:cf:d1:88:08:de:9f:a4:ee:38:9d:
af:33:95:27:a8:7f:21:15:42:12:55:76:73:22:3d:
d8:01:7a:74:22:a8:85:86:e9:9e:21:fa:0f:40:eb:
b0:d7:ca:6a:27:e4:2d:fc:97:5e:cd:c0:f8:a2:6a:
4c:77:80:bf:8d:58:e0:e4:86:03:9c:f6:c3:ff:b2:
c3:b6:26:37:cf:dc:8c:94:35:c9:18:57:dd:92:1a:
d6:cf:7d:80:fb:cc:53:9c:ec:3a:b0:02:b7:d2:6f:
69:80:4d:71:17:9e:a5:ef:91:78:6d:91:54:2a:f5:
a5:da:22:3a:71:b9:75:c1:3c:aa:a4:36:34:cc:6c:
5c:07:7a:d6:39:bd:ee:0a:04:21:61:01:f9:78:4b:
d9:6e:9c:6b:39:4c:7f:2b:b0:fe:34:23:9e:1a:10:
f3:f1:b3:e3:ec:84:7d:eb:3d:ed:f9:e6:e4:67:7d:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6A:B3:39:FF:67:13:47:69:B4:98:A2:BA:C1:0D:32:8D:95:FE:77
X509v3 Authority Key Identifier:
keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:88:26:72:f8:3b:38:23:17:ea:5e:d5:61:ca:10:53:72:57:
88:cb:3d:a9:5c:4d:0f:93:cd:51:16:1d:36:b8:16:59:dd:3c:
1c:4e:ba:60:33:76:7d:35:b1:fd:b2:cd:d4:98:76:5f:08:ff:
6e:f9:3b:2d:c7:d5:99:3e:e3:51:2a:4f:30:28:bf:3a:2b:2c:
9a:d0:28:f0:6a:7b:b5:4d:b8:ea:1f:67:07:19:dd:bd:9a:c6:
e5:cf:69:0e:a3:b5:f5:79:ba:ac:88:41:bf:a9:68:1d:c9:f8:
12:fa:56:ce:98:39:08:56:aa:17:56:74:bd:55:ac:61:f8:6c:
d4:c5:d3:c7:ba:03:30:d1:22:8e:b8:f3:03:71:e5:5f:44:83:
35:9f:36:3b:06:a4:1d:74:fe:d8:91:a7:1f:75:f9:d6:c7:96:
61:80:c4:ba:78:41:14:af:0a:eb:47:08:0f:07:a8:e7:7d:0b:
e5:79:82:35:dc:ed:dd:f0:75:95:9f:1b:51:61:df:26:b8:e7:
aa:50:3c:a2:09:b2:08:7a:4d:13:7b:1f:e7:5e:ae:6d:dd:1a:
03:da:bb:c7:64:7f:f0:4b:5a:7b:5b:39:ba:a4:4f:f4:fe:73:
f9:1c:8c:83:fb:c3:35:5b:50:49:8a:97:43:92:6b:37:0d:02:
db:41:fd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:14 2025 by rpki-client