Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: qfyOJ5XV+fVObRrpVOkbrUN6ksRZhbHoPZzDTYsaDpM=
Subject key identifier: 1D:CA:45:65:5D:97:B2:17:38:C6:22:B5:CE:0A:03:D5:F9:D8:5D:5B
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 019A4E4F71C73949D11D7D227B8AB4DB012E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 149B
Signing time: Tue 04 Nov 2025 10:00:20 +0000
Manifest this update: Tue 04 Nov 2025 10:00:20 +0000
Manifest next update: Wed 05 Nov 2025 10:00:20 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: P6b3iXLE8tg2iD8bC6w1gI9oLmCGVbM8Bl2w+IyWRRs=)
2: VzSRXIJg549082TDLwuDhpZSHdM.roa (hash: A7LBmXbBqDdzugUEkji9OFm2eXNsHo+v5p497CjSCCA=)
3: gHDsE-M7Bds6BODdronU54n9Gb0.roa (hash: wZSAuVITgB+tf10qxZ+G6OSnVz70iDg6RypnL81jrkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:71:c7:39:49:d1:1d:7d:22:7b:8a:b4:db:01:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Nov 4 10:00:20 2025 GMT
Not After : Nov 5 10:00:20 2025 GMT
Subject: CN=1dca45655d97b21738c622b5ce0a03d5f9d85d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:66:a2:d8:6a:1e:89:0d:1e:25:cd:44:63:
7e:d5:69:4a:2b:a4:9e:81:07:7f:10:82:4b:0f:d4:
45:7f:80:29:85:32:22:4e:9a:33:4d:2f:e3:c9:6b:
b3:ee:3a:8c:92:32:5b:f9:98:9b:4e:4c:a0:30:c6:
9e:15:d2:a6:3e:14:98:98:39:f8:01:0e:77:b2:c3:
d3:b8:17:0f:d7:e2:be:b1:e6:f8:d8:90:3b:6a:43:
48:f4:88:33:47:02:b4:37:80:bd:3e:a4:ba:70:d9:
dd:bc:fe:7f:c6:eb:9f:7f:46:36:4f:67:76:06:63:
07:30:8f:2f:f7:11:48:bd:5a:2b:69:19:49:e2:2f:
c0:f1:96:8a:5b:16:29:6d:80:9b:92:ee:b9:f0:92:
b0:58:dc:87:97:12:1c:e3:88:c6:75:83:b3:b6:c7:
57:10:b8:d3:05:e1:7f:4e:43:0c:a7:08:0d:54:94:
ad:be:6c:85:75:09:1d:02:1e:f6:35:b0:16:8c:d6:
d0:6e:6d:8f:af:57:57:be:12:fa:c0:6a:3d:57:2e:
50:2a:e9:3b:74:f3:09:33:4d:b9:9f:36:6d:b2:25:
c8:d3:f8:23:34:5b:78:4c:36:c5:63:79:76:3f:37:
02:8d:2c:8e:f6:c0:77:06:2b:4e:56:3a:cd:f4:34:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:45:65:5D:97:B2:17:38:C6:22:B5:CE:0A:03:D5:F9:D8:5D:5B
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:0a:1b:07:47:6f:c5:27:b4:97:f5:a8:f5:2d:99:63:71:57:
b5:fa:eb:0d:a2:40:79:72:fb:2c:51:52:01:8e:f1:4b:e1:ce:
26:7b:02:00:26:da:b5:b7:3e:70:38:4f:77:4b:4a:2b:04:1b:
07:bc:8c:c3:3e:b9:f3:2d:f0:dc:bc:84:f3:06:6d:36:c7:1d:
3f:5a:cc:7b:58:27:0c:16:fb:34:ee:d4:50:e3:56:16:e0:53:
ab:2e:c0:7f:5d:49:81:73:02:7b:b6:83:46:1d:e3:cb:51:47:
1a:9d:20:2a:09:34:69:97:b4:cb:74:54:ab:60:e2:7f:58:83:
c4:73:0b:06:cd:ca:5c:f4:6d:30:15:09:f5:3c:12:62:6f:69:
7a:e0:cd:bd:94:84:1e:26:f0:0a:c2:d3:f3:d8:3f:85:4f:a7:
fe:af:41:01:16:b5:fc:8a:0d:33:df:09:8d:ad:c4:67:ba:50:
66:80:1e:d7:1c:55:e6:fa:02:b5:b4:58:7f:92:9c:38:08:6c:
a7:a0:89:d4:95:20:91:e8:d8:a8:3e:df:5e:15:0a:51:2e:60:
b8:2b:75:3a:e5:da:d6:d5:b2:fa:03:9a:08:a9:6b:71:53:ae:
28:12:37:6b:b8:34:4d:86:a7:6d:0c:1e:73:07:24:b7:3b:71:
7b:6f:18:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:03 2025 by rpki-client