Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier: FXdgxRGW21LkWsmlO+cBalAJSGY0TBynviWV2boJzA8=
Subject key identifier: 5B:CB:FC:DA:8C:AC:26:12:A4:BC:1F:6C:C7:71:93:EB:50:BC:D8:6D
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial: 019A4E4FD2E0AE48C91F48AFDC76D53EB00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number: 0ABC
Signing time: Tue 04 Nov 2025 10:00:45 +0000
Manifest this update: Tue 04 Nov 2025 10:00:45 +0000
Manifest next update: Wed 05 Nov 2025 10:00:45 +0000
Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: /U6myoxY+7xRyQbv/XGshcMiI2R+/XyTUNYvZrZx6G4=)
2: m4ZSJvHCvVAdAoCa8Dy3Jfpj2Po.roa (hash: aprBkCfkVmxisnK2NR7zrUxKt0p0KhHf/uKOAfeW9gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d2:e0:ae:48:c9:1f:48:af:dc:76:d5:3e:b0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Validity
Not Before: Nov 4 10:00:45 2025 GMT
Not After : Nov 5 10:00:45 2025 GMT
Subject: CN=5bcbfcda8cac2612a4bc1f6cc77193eb50bcd86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:8c:22:d7:17:c7:ab:f0:2c:0f:80:6e:8f:
a9:66:e1:8d:fa:e9:74:ca:d5:50:4e:ba:1b:02:70:
0c:73:27:3a:6f:5e:78:38:a8:c7:c5:0f:03:c5:e4:
b0:32:dd:a1:35:b9:70:76:14:96:94:c2:9f:56:d7:
cd:a5:e3:01:25:1e:bb:81:be:2f:75:e1:ce:82:2c:
67:21:49:ad:d0:ea:c7:58:1d:d2:5c:df:6f:fc:52:
55:7a:a7:99:49:b6:fa:4b:2b:c2:78:d9:0e:66:89:
8e:7d:1b:7e:ee:92:44:1d:56:86:f6:cf:ab:28:82:
01:f4:a5:15:63:78:17:02:cc:d3:88:44:63:29:8a:
a9:33:0d:7f:da:91:09:31:62:58:2c:c3:6d:d1:d2:
97:59:ff:e4:0a:71:6b:cf:57:fb:f6:bc:56:e4:64:
cc:2c:39:3d:6b:92:93:b2:f6:46:35:1e:4a:9a:b7:
e9:c2:b4:78:fe:3e:30:14:5b:8c:bd:8d:d8:d4:8f:
63:d7:28:5e:1d:1b:46:cb:e1:69:8e:d8:e5:55:e6:
b9:61:e2:d5:7c:b2:53:5a:f3:ab:9e:2d:26:c4:24:
18:f9:97:5c:04:45:a3:1b:9c:34:1d:da:f2:98:37:
a8:3a:79:09:85:86:1c:1c:f3:7d:b8:d6:bd:34:95:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CB:FC:DA:8C:AC:26:12:A4:BC:1F:6C:C7:71:93:EB:50:BC:D8:6D
X509v3 Authority Key Identifier:
keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6e:ea:75:56:55:6a:2b:9e:27:b6:a3:97:7b:ec:f4:9b:c7:
de:7e:5e:42:4c:fc:be:1f:d3:78:ec:23:2a:b4:1f:85:23:97:
3c:8d:9a:af:3e:fd:93:ad:bd:b8:8e:3e:e4:62:cf:82:f4:11:
2d:ce:bd:15:55:56:74:1c:ed:19:7f:6b:87:c5:60:75:a4:00:
c3:6b:c8:db:e1:59:6b:ab:c7:f4:e8:20:71:b7:49:69:44:e7:
af:cf:45:6a:47:b1:57:c5:f8:3c:b3:6d:1a:38:2a:c0:db:65:
88:39:c8:82:36:11:ea:08:c4:a5:70:ab:6f:dd:3a:b2:ff:2f:
ee:19:3c:77:0c:82:8e:e3:80:a5:9a:67:cb:de:03:71:a0:91:
a4:16:67:6a:70:e1:19:3c:9f:72:62:6c:82:5c:bf:31:6d:ad:
6e:48:da:37:3a:40:e1:31:92:fe:74:f0:87:33:60:09:f8:ed:
95:9f:37:3d:3a:d1:25:22:0f:ac:f3:06:82:1e:f5:5e:21:c7:
53:4c:94:f2:9d:6f:ad:2d:25:5f:14:6d:eb:d2:10:19:b7:9f:
86:5b:96:ec:68:7e:4b:ac:5d:3d:a4:b0:03:aa:6c:38:4f:6a:
53:2b:6b:e4:39:81:c5:c8:88:8a:da:7f:cc:30:b7:46:06:2b:
d4:64:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:19 2025 by rpki-client