Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: DxavUmOEKCYxpHUeBZUqZ6+9QsbO9uz75icSbD+ScnI=
Subject key identifier: 11:31:ED:77:7B:43:B4:C0:2B:80:15:C2:82:32:9A:45:FE:C3:3F:49
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 019A5375901F3C9DF42C52B7B1A49E8CF008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 10:00:04 +0000
Manifest this update: Wed 05 Nov 2025 10:00:04 +0000
Manifest next update: Thu 06 Nov 2025 10:00:04 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: g4K2yxstfi/UQkGJHfRIUtUIefzfIwZd1m+vrtoxrxE=)
2: 6_MzG3BJa4ElBBdEF9-BTMf874s.roa (hash: JSnJz2i5mq2wdtkVMI+9lJsfr8mdn46eUbiIUghmOwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:90:1f:3c:9d:f4:2c:52:b7:b1:a4:9e:8c:f0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Nov 5 10:00:04 2025 GMT
Not After : Nov 6 10:00:04 2025 GMT
Subject: CN=1131ed777b43b4c02b8015c282329a45fec33f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:24:06:21:e4:2a:b8:6a:f8:ae:f6:8e:2b:
d7:ec:e8:77:41:a1:5d:7a:22:09:6b:bc:a3:1e:11:
52:f4:cf:d2:8e:b0:a2:83:63:6d:82:57:ca:e1:1d:
57:1c:48:02:91:48:ef:96:83:6f:ba:c5:1f:60:37:
df:dc:6d:3d:c9:c5:46:63:50:ca:66:6f:83:e7:44:
84:0e:b5:78:1d:3d:02:b9:6b:40:19:1b:3f:f0:98:
e5:19:75:87:68:7a:5c:19:01:ac:75:49:d0:95:b7:
15:56:84:08:d6:de:03:07:54:85:2d:f3:f8:c3:13:
3b:8d:35:38:49:57:3b:6f:03:0c:50:bb:63:cb:58:
85:a8:f5:e6:f6:e7:77:a6:5a:f0:f8:49:06:b2:12:
3b:d9:25:5b:c1:61:1c:d2:a6:b7:6e:39:fd:ab:88:
4f:9a:02:e6:b6:f2:89:0b:90:1e:0f:a5:99:a9:58:
ac:42:a1:12:7c:4f:75:21:22:5d:0f:ec:86:95:0d:
3f:d0:84:a7:58:29:d5:15:8d:f4:90:84:40:b4:89:
5f:89:9a:9e:d1:6d:51:a7:2a:19:2a:b6:92:49:a1:
21:d9:eb:ba:1a:df:ef:88:54:4d:81:83:8f:f1:da:
cc:53:e2:94:f6:99:58:91:48:30:4c:a8:9a:f4:e2:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:31:ED:77:7B:43:B4:C0:2B:80:15:C2:82:32:9A:45:FE:C3:3F:49
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:02:00:cc:72:13:90:79:69:75:e3:d3:04:d3:30:ad:fe:0c:
eb:be:a9:a1:92:95:f8:43:1b:fb:d0:c5:64:21:50:fb:e5:6c:
b2:cf:e3:f7:ab:ff:93:30:5c:5c:14:fa:50:85:a1:b0:0e:72:
2d:cf:31:03:22:5f:17:7e:f6:3e:a5:70:dc:cf:ff:f8:7f:3d:
38:ea:4d:dc:77:71:56:31:e3:e7:61:0a:27:b5:2c:d1:4e:c2:
ae:a6:dc:d0:90:43:69:bd:60:e6:99:d8:80:30:d1:5c:b3:bd:
c0:94:63:26:7c:f2:07:c7:c7:f4:8e:5e:16:c9:0b:55:c5:ec:
46:05:88:47:51:2b:f6:52:8b:a1:37:67:e4:9f:54:a3:b6:c9:
40:6d:2d:50:a8:e4:d2:46:4b:0e:e4:69:f1:a6:42:95:7f:5f:
cc:46:7d:03:18:ea:70:73:fb:75:02:02:f6:b4:06:17:1c:24:
89:2c:48:a3:b5:a5:5c:1a:26:38:76:36:79:ba:ca:77:f2:9f:
08:a8:4c:38:67:e1:c9:9e:ab:e9:9e:5f:77:2c:99:ff:7f:40:
86:a6:0c:0d:04:19:a7:f2:66:d2:33:b7:76:0a:5d:b7:a6:e0:
c8:ef:d8:c7:65:91:bd:0f:b4:d3:b4:96:03:74:98:97:a9:73:
f0:3b:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:35:53 2025 by rpki-client