Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier: Gjz2iWQZKsjSui7BbgHalKDstnfMd+jw5V89us0Td4A=
Subject key identifier: 69:E2:12:3D:0F:64:5D:0F:04:45:9E:E5:A0:90:8D:B0:0A:29:CA:E5
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial: 019A4E868AB1F93106020A9CA0C4116108BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number: 059D
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=)
2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: iFR4uYIrNbVowm5LMMUT728O99EkYoi6XVayuqhdo44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8a:b1:f9:31:06:02:0a:9c:a0:c4:11:61:08:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=69e2123d0f645d0f04459ee5a0908db00a29cae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:af:67:f9:4f:07:66:42:39:93:b6:0f:3d:
a6:2d:d7:1a:b8:a3:98:2e:55:b8:65:4d:20:ac:61:
8e:1d:f4:d5:52:d6:2f:e6:db:8a:a0:a0:3f:eb:5e:
16:e5:4a:21:ce:97:ba:70:b8:db:3e:3d:46:b8:a5:
da:e5:49:c1:74:4a:b4:d2:09:83:9d:db:77:da:84:
bb:9d:f9:31:9c:3b:90:70:52:db:37:32:0a:e2:f4:
c4:9e:b2:2d:e6:3b:54:b7:51:a7:fe:44:09:25:7c:
12:af:49:52:24:1e:8d:ab:d6:f7:ec:6e:7e:45:fc:
e2:b2:5b:ef:74:52:34:e3:fc:9c:b7:d0:64:dd:3b:
61:36:81:cf:51:b3:76:80:20:94:8b:74:61:80:93:
ad:88:b0:11:17:43:db:03:77:56:06:71:fa:92:12:
a4:d0:38:76:51:46:11:99:3e:3d:fd:1a:d5:3c:58:
2e:ba:8c:76:7f:e2:72:55:54:03:76:25:ce:b6:16:
49:b6:38:65:ba:b0:28:ba:1f:21:82:d3:5b:84:e3:
99:2a:5f:21:68:fc:d2:fc:77:e9:d4:8d:24:af:46:
b3:ab:c2:31:f9:db:11:23:ea:04:77:62:c0:43:13:
71:73:72:16:1c:a8:0b:8c:e5:58:cf:de:bd:6f:e0:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:12:3D:0F:64:5D:0F:04:45:9E:E5:A0:90:8D:B0:0A:29:CA:E5
X509v3 Authority Key Identifier:
keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:92:31:57:66:38:34:7a:0b:b4:f2:0e:e7:4e:0b:3f:be:6a:
2e:e8:9c:c4:74:e1:ee:f6:a6:f9:86:6a:ba:8a:06:f7:83:f7:
0c:d9:9d:8d:15:7f:04:0c:8a:92:1e:f0:05:01:31:d4:8f:9a:
15:94:37:f0:1b:20:fe:07:01:f6:14:33:b1:81:68:c7:27:a4:
cb:dd:a9:24:14:dc:10:66:05:ad:18:97:26:a5:99:52:0e:5f:
10:8c:6b:6c:b9:60:c5:5a:61:7e:ed:bd:96:78:98:82:0e:8e:
6c:f4:30:89:74:50:e9:2e:7a:7b:29:46:6a:61:43:b4:12:88:
6f:f1:8b:c8:b2:fc:bf:9f:c6:b3:6b:4e:59:7d:98:84:ed:9d:
a9:05:db:c8:7a:de:29:55:7f:7a:69:42:0c:73:64:10:00:3f:
2b:e1:6f:5f:92:0e:96:dd:7c:94:35:79:6f:44:2d:51:c8:11:
62:29:59:83:eb:76:db:00:c4:b1:72:b7:96:41:58:39:0f:72:
ac:6d:36:e7:d4:db:38:a5:61:e8:dd:63:6f:0d:f8:ab:d9:ea:
89:85:e6:f9:90:34:91:31:8e:c2:df:8e:38:36:72:98:f7:cf:
82:08:5d:75:f8:5f:e2:b8:c0:4a:2c:1f:02:df:3f:1b:69:ea:
6a:a8:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:17 2025 by rpki-client