Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: K1S1HPR5uMA/rjLidxhv+C1twj+qxjBNCH52GZsGkKw=
Subject key identifier: A9:40:16:CD:21:CB:A5:9E:11:24:C9:25:AD:B0:B5:3B:70:1B:A3:40
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 019A53AD4A4E2B8E8DDAA4BC81394BA1C011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 13AC
Signing time: Wed 05 Nov 2025 11:00:56 +0000
Manifest this update: Wed 05 Nov 2025 11:00:56 +0000
Manifest next update: Thu 06 Nov 2025 11:00:56 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: +kSuWBIFBFJrxtCwxQNBDJBnkj/BY0MjaZvfkPkZLXU=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:4a:4e:2b:8e:8d:da:a4:bc:81:39:4b:a1:c0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Nov 5 11:00:56 2025 GMT
Not After : Nov 6 11:00:56 2025 GMT
Subject: CN=a94016cd21cba59e1124c925adb0b53b701ba340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:a7:23:0f:14:8f:de:0a:6a:43:6f:3c:4e:
69:4e:98:74:38:1d:e7:18:12:96:b7:f6:c0:d9:db:
29:d8:86:88:7f:c9:4d:55:70:c2:63:18:2b:f3:bc:
5a:b9:fb:83:28:8e:63:09:d5:d5:e4:5f:d1:21:40:
94:a5:bd:8b:23:2f:fa:f2:35:1b:53:1b:3f:98:33:
61:a8:89:63:3a:8d:50:0c:18:7f:de:87:44:26:18:
d0:e0:fe:f0:1e:fe:69:30:15:25:2a:7a:af:fb:3d:
b3:b2:4d:d1:73:0b:80:18:9c:18:26:0c:36:c8:5c:
8a:2a:83:51:08:e4:4c:2b:bb:ba:fc:96:cc:14:a9:
a1:4d:26:4a:91:9e:6a:cf:19:4e:9b:4c:13:b3:cf:
ca:4f:42:d9:d2:8b:66:4b:69:c3:82:ba:19:2e:a6:
65:07:e9:22:54:ff:06:43:d5:99:43:7f:2e:b2:b5:
b4:39:8b:60:29:a2:c6:95:3f:a8:de:79:bd:df:74:
cd:34:03:f8:79:0b:8d:7b:ec:7a:be:64:a7:7d:f5:
bc:43:da:4f:c4:19:b4:c4:b5:ae:0c:44:15:0c:8e:
40:60:f2:e5:bf:3e:db:02:57:6e:d2:11:a8:83:00:
01:55:d2:04:42:8e:b0:73:72:9e:cb:9c:85:1d:b9:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:40:16:CD:21:CB:A5:9E:11:24:C9:25:AD:B0:B5:3B:70:1B:A3:40
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4d:30:4e:03:22:22:87:f6:a5:bb:b9:ac:1e:d5:4f:8d:b3:
5e:56:2a:4d:f4:e1:11:13:b8:3b:1b:70:f3:98:31:36:8e:50:
34:ee:7e:5a:4c:5d:b1:ef:68:87:7f:20:f4:48:4f:bf:0a:03:
28:b0:bf:7b:51:c1:56:c6:fb:f2:51:05:f4:48:13:e0:62:e4:
47:73:3c:ba:62:dc:9a:d5:57:07:b5:a2:ed:35:18:79:21:09:
ee:e4:76:25:66:c4:9f:ca:71:f8:de:3e:4a:af:9b:f6:12:e2:
eb:cf:c9:a7:68:7a:cc:65:04:3f:d0:e0:71:35:d5:77:90:6b:
cc:5b:45:af:82:55:97:19:db:23:67:9f:af:21:9c:82:7a:12:
6d:8d:b9:cd:7c:6b:82:9c:3c:5c:15:62:a3:68:4e:d7:7a:c1:
94:c4:80:77:ab:36:36:73:6f:2e:36:0e:b6:07:55:75:49:15:
c5:c2:d8:0e:26:76:b2:b0:82:06:69:65:62:7b:c2:c7:48:d2:
ff:47:65:18:52:50:e6:e8:e5:cb:bb:36:31:37:f9:5b:87:bf:
70:41:d1:60:8c:6c:55:9b:1a:6e:7e:6d:0e:95:0d:df:04:ce:
6f:1e:b6:05:26:a1:b6:7b:62:ae:c8:f7:2a:89:06:f1:a5:d0:
68:83:fb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:57 2025 by rpki-client