Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: 0bmuakqJQiB+LYXv6XEDqyD3h7kunK8iTa5tFhviFAU=
Subject key identifier: AA:73:94:CA:A8:BE:BF:AB:98:E3:FC:D7:23:E3:4C:6B:63:C8:9D:E4
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 019A4F99210CA61A22EA415EB48B4348A010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 0D4F
Signing time: Tue 04 Nov 2025 16:00:26 +0000
Manifest this update: Tue 04 Nov 2025 16:00:26 +0000
Manifest next update: Wed 05 Nov 2025 16:00:26 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: hsGaBQJu3khaAUyVZtQaaIsfwI4CkjD8S3hnORKBSLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:21:0c:a6:1a:22:ea:41:5e:b4:8b:43:48:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: Nov 4 16:00:26 2025 GMT
Not After : Nov 5 16:00:26 2025 GMT
Subject: CN=aa7394caa8bebfab98e3fcd723e34c6b63c89de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:af:08:e0:d5:8c:d5:02:8e:4e:24:2d:6c:
bd:8a:90:5c:24:b5:fc:94:f9:a4:fa:a9:ea:49:b5:
cb:30:cc:0c:b3:72:27:30:1c:b6:f8:94:b6:48:f3:
ad:a7:84:24:96:b7:6c:a2:df:3b:4e:43:fa:3a:1a:
29:6c:a1:52:22:11:45:95:a8:12:20:94:00:24:82:
76:94:5d:84:77:f3:b4:aa:d2:23:7e:1b:c5:cd:11:
34:fc:5d:8e:59:92:8e:f9:b6:87:0e:09:2f:71:93:
cc:db:71:41:dd:9e:3b:69:5b:e5:dc:c4:48:99:3c:
92:c1:9a:09:e6:be:ce:50:e0:e9:ee:ab:2a:d6:70:
2b:ba:81:21:06:13:95:b2:10:6e:a4:b3:04:58:6c:
24:c7:23:91:61:24:1d:29:0a:e1:ad:a7:2a:36:da:
c1:df:33:e4:8c:d6:07:2a:bc:b2:98:87:e8:6d:4e:
80:58:d3:1d:fc:26:38:09:95:ad:7d:ba:f2:b2:56:
74:3f:e8:b2:fb:05:e5:d0:e2:33:5f:5b:a6:53:61:
67:34:69:a6:dc:6f:82:ca:b0:04:70:57:50:85:db:
64:32:54:18:18:65:57:23:3b:41:24:17:d2:0b:69:
5a:8d:09:cc:fc:64:f7:f2:3d:15:5a:e3:f3:11:08:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:94:CA:A8:BE:BF:AB:98:E3:FC:D7:23:E3:4C:6B:63:C8:9D:E4
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:c0:9f:a0:bf:33:80:85:10:93:ef:b5:88:e2:d7:d1:0b:
bd:bb:09:3e:e7:8f:6d:ee:80:e9:0c:f0:d7:95:82:40:84:ba:
79:db:02:0c:8e:d5:ed:28:70:95:f7:45:d3:b4:e7:57:28:50:
00:f6:73:98:2f:e1:2e:98:67:a5:a1:2a:84:b4:9f:6f:85:9b:
c9:33:4c:27:d7:9d:15:8d:01:4b:8b:48:08:fa:3c:ce:eb:52:
a9:d3:73:99:2b:81:20:e9:89:1c:67:58:ee:3f:8e:31:85:71:
c4:2f:9d:1e:60:df:2f:e8:5d:de:4b:82:64:b3:61:88:74:d8:
d5:d6:64:99:28:09:c2:5c:86:4e:8d:39:11:ab:f2:db:c1:fa:
60:a3:d8:2d:a1:67:67:ab:fc:b1:fd:56:dc:09:6c:d4:7c:c3:
b5:6e:fa:1b:d2:af:88:55:a0:b8:9e:49:07:7f:52:fd:80:ea:
e2:c6:f9:cb:10:1b:65:f6:4c:88:1f:02:92:e9:65:a3:25:e2:
4f:89:e5:9f:c0:51:8a:b3:9e:44:d0:b6:ef:84:1d:85:25:28:
70:3c:92:75:68:da:dd:f8:36:ed:3f:74:8e:1d:5f:44:da:3c:
0a:3b:87:54:9b:31:d3:1a:c0:29:13:5c:f9:db:2c:e5:c6:bb:
60:80:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:22 2025 by rpki-client