Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: fasMZ/cUmNOndQv5MS1Jj7AtKpc87czeZgRT/Wy1zLo=
Subject key identifier: 6A:8A:28:1B:89:25:91:ED:6F:2F:8C:BE:4E:95:DD:63:5C:4E:E1:6C
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019A522CCC2E470FAD392FCC76DDACA676D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 13BB
Signing time: Wed 05 Nov 2025 04:00:58 +0000
Manifest this update: Wed 05 Nov 2025 04:00:58 +0000
Manifest next update: Thu 06 Nov 2025 04:00:58 +0000
Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=)
2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: PTcr5czCt1CMs7z7CGGE8B8uKrn/iIKI/+vGE3h8FhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:cc:2e:47:0f:ad:39:2f:cc:76:dd:ac:a6:76:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Nov 5 04:00:58 2025 GMT
Not After : Nov 6 04:00:58 2025 GMT
Subject: CN=6a8a281b892591ed6f2f8cbe4e95dd635c4ee16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:3d:fa:6f:4f:f6:95:80:47:84:a9:65:1d:
16:b1:4b:96:40:95:76:bd:a3:54:86:e3:31:58:cd:
4a:a0:7f:39:02:b5:5b:3a:e4:ec:37:84:81:da:6f:
e6:8e:17:45:0a:4e:3b:00:23:ae:d0:98:72:41:09:
cf:a6:f6:ec:3b:06:dd:8f:fa:99:2c:14:db:c4:21:
3d:a2:d7:35:f5:a0:94:a6:cc:77:7b:d9:53:e8:56:
ee:5f:1e:44:36:e6:eb:03:38:24:ba:35:f5:26:53:
de:b7:9e:42:14:7a:89:10:33:d2:1b:5c:a9:a1:ef:
f8:5d:38:2b:d0:43:6c:cd:49:99:f5:4f:ba:62:e6:
06:d0:09:ef:93:80:ca:12:45:8d:93:2b:a4:33:82:
25:d4:76:92:f2:89:f2:b2:0c:f2:a1:1f:18:4f:a4:
21:0e:06:f9:7f:4e:44:27:03:c9:e7:fe:05:d6:62:
99:78:fc:a7:55:d6:5d:0d:95:6f:27:10:e5:fd:8c:
c0:2a:88:6d:e9:5f:c3:4f:7e:8b:dc:b1:ff:90:28:
07:4a:38:83:77:73:ab:48:26:de:29:32:2b:97:6b:
8d:15:c4:ba:eb:81:bb:f2:0a:34:ae:50:ec:a3:d3:
6b:d3:f6:a7:79:fb:f7:37:a8:25:f1:99:3c:27:1c:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:28:1B:89:25:91:ED:6F:2F:8C:BE:4E:95:DD:63:5C:4E:E1:6C
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0d:d2:72:f4:e3:19:1f:2b:ae:82:5f:bb:aa:ec:bb:7f:06:
29:4b:c9:4e:ee:02:5f:ae:97:d0:9f:ed:42:2e:52:4d:f8:fb:
88:cd:cb:c7:10:4e:be:27:72:45:f6:0b:c8:01:2c:bc:6a:f6:
98:34:63:2d:ab:2f:36:b7:a6:d5:eb:f5:b9:18:90:22:27:00:
c2:28:34:eb:64:10:de:90:7e:a7:05:e7:de:24:e2:db:77:9e:
dc:3e:d6:97:af:21:d6:5a:39:8b:27:82:36:3c:96:ea:df:4f:
58:fa:a0:80:62:c3:06:04:23:86:4b:ea:e2:64:f6:19:e1:d2:
78:32:65:02:df:fc:16:1b:61:8d:bb:a3:fb:de:92:a2:68:55:
27:f4:b5:2b:ca:54:d6:72:98:5d:1e:cc:e9:4d:e8:8c:4b:fc:
96:28:c3:d4:91:f6:1d:f0:f2:35:6b:70:10:4c:51:64:91:cd:
3e:fc:0f:c1:a9:45:94:c3:c1:bf:31:85:d6:92:95:6f:d9:07:
cd:af:9b:ea:67:b1:0e:50:75:72:6a:60:ad:bb:6e:3e:57:bc:
8c:8d:e8:58:6d:70:6b:7b:2c:2f:13:d1:f6:3a:77:3c:9d:a3:
dd:35:a7:79:d1:0e:45:59:13:1a:f7:58:9c:56:f4:5d:42:f4:
af:ce:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:36:47 2025 by rpki-client