Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: 7ZEljNRpiHgFtbXcKUi98cxcuT3u0duCn+ZFOqh5Bvo=
Subject key identifier: E4:5B:DF:FA:8A:FC:0B:A2:C3:29:27:92:32:FA:E8:71:F1:52:69:34
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019A5151179659D6AC465ACBE85E5D86AAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0E05
Signing time: Wed 05 Nov 2025 00:01:00 +0000
Manifest this update: Wed 05 Nov 2025 00:01:00 +0000
Manifest next update: Thu 06 Nov 2025 00:01:00 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: kTNVUdqlQyN+zwjYK01lYJOpe7InVk6tDLDQCaV1djU=)
2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=)
3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:17:96:59:d6:ac:46:5a:cb:e8:5e:5d:86:aa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Nov 5 00:01:00 2025 GMT
Not After : Nov 6 00:01:00 2025 GMT
Subject: CN=e45bdffa8afc0ba2c329279232fae871f1526934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:99:3c:3a:30:0d:0e:bd:5d:5a:45:8b:ab:
c2:29:10:62:26:76:af:b5:a1:0f:92:0b:48:86:f4:
88:ec:08:ab:d7:a4:c0:9e:0a:5e:43:cb:18:a6:51:
91:8e:91:08:2c:a9:99:54:46:e7:45:70:0e:e8:75:
61:1b:19:c6:c8:71:52:62:46:4d:e7:7c:f2:37:e3:
0d:8f:28:41:02:7f:19:43:63:3d:42:79:d0:53:27:
58:37:87:90:90:23:32:09:65:73:5e:24:86:ac:e5:
13:b9:71:7b:07:e7:5b:0e:f2:58:fb:df:c4:44:d3:
25:f3:52:15:4e:39:a4:f0:f3:83:e9:12:93:2e:c7:
75:78:ff:d6:2e:33:25:e9:c4:a1:78:cf:dc:8c:0d:
f4:42:c2:53:55:dd:af:8e:9e:8c:1b:0f:30:ea:0a:
b2:56:2d:4e:8f:eb:6a:f3:fd:0a:c2:f6:72:41:6e:
ee:88:35:41:23:0f:19:46:5a:52:bb:f6:e1:a2:11:
69:67:1a:35:4b:f2:53:c0:9a:67:2b:e7:ce:ae:ab:
42:b4:4f:20:25:2f:ea:26:f0:3b:47:e7:d4:0d:68:
d2:e0:06:3b:17:b6:8f:99:1e:61:d8:9c:17:9a:e7:
72:f9:1d:25:d0:2c:f2:ba:59:f3:2e:49:d2:9b:84:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:DF:FA:8A:FC:0B:A2:C3:29:27:92:32:FA:E8:71:F1:52:69:34
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:24:82:fd:8b:a9:66:73:2a:78:95:69:3f:00:a0:7e:21:4f:
dc:c8:1d:eb:5d:91:12:ac:70:aa:4f:32:f3:4a:21:01:45:b3:
ff:4c:a9:42:bb:b6:f0:30:33:06:d1:71:b0:3d:79:9b:b4:99:
4c:c0:58:67:fe:6b:cd:a4:da:44:c8:ef:45:9d:51:f3:2b:7e:
67:06:b0:50:d8:5e:53:56:55:5e:33:37:59:23:15:20:bc:ee:
b3:68:58:05:08:11:57:a3:07:90:0d:05:aa:96:f4:52:fa:b2:
72:fc:67:78:70:9c:ae:d0:73:05:e6:d0:1d:15:b0:f8:d6:99:
2c:2d:1a:7a:6d:26:a6:2d:85:1e:c8:4b:b3:49:16:00:1a:8c:
dc:05:e5:44:a5:78:b7:73:b8:0f:78:96:eb:2f:a0:b1:90:63:
f6:c0:64:4f:30:30:3f:6e:a1:af:8c:90:8a:93:ea:6b:48:3c:
ea:32:d3:39:05:75:ad:5a:8d:80:8f:ba:8f:32:c2:d1:2b:06:
d4:ff:e5:1f:3c:c6:d4:9f:17:98:a3:f8:10:18:db:62:b9:30:
a7:37:e1:63:33:b0:7d:8d:fb:a1:83:09:7d:ab:ea:bd:d2:88:
40:6c:12:82:ff:bd:91:77:4c:01:56:cc:3e:66:ef:f1:02:1f:
83:1d:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:49 2025 by rpki-client