Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: vMueRiKSC79vddfOpEQYREMugfYGNVSZXtEdzAV+rIs=
Subject key identifier: 52:23:0C:2E:EA:76:29:2A:DF:DA:3C:42:22:C8:E5:2D:39:62:25:DA
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 019A4DE1B2A51E7E2C6BA2DA5F8F3808A3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 07B9
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: lEayu2Ti+nUv3n/cx84P7m0BX7KvyzRV7at0U8mR8c0=)
2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=)
3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b2:a5:1e:7e:2c:6b:a2:da:5f:8f:38:08:a3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=52230c2eea76292adfda3c4222c8e52d396225da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:4f:db:37:d6:db:6b:9a:0c:25:ae:0c:64:
b4:cf:cf:46:91:19:ff:b8:46:b7:3b:7a:08:7c:37:
6a:89:9b:d2:5e:c7:b1:a0:7c:e4:7e:d3:55:29:e1:
3b:4c:63:90:6b:e3:08:89:56:da:36:35:1b:82:24:
4b:6a:18:c6:a8:0b:0d:aa:6c:13:70:f4:78:52:97:
bd:f3:9d:5d:66:2a:60:d2:1f:b6:83:6b:5a:ad:a6:
87:60:31:a5:b6:5e:1a:35:3a:83:e3:53:f4:50:73:
ea:e7:30:7e:0a:cf:64:6b:da:b3:1f:cf:8c:cf:d4:
30:e3:fb:09:9c:d9:5d:c0:30:4e:5a:bf:b7:24:e8:
e4:0c:93:9f:1b:15:d1:ab:cd:e9:c1:86:59:94:a6:
40:8b:9c:d7:9b:06:dd:9b:40:9d:44:b3:b9:f8:f7:
b5:38:ab:e2:7a:64:ee:94:4b:65:e3:c7:f6:f9:18:
ec:ab:49:f1:d1:ed:b2:f9:87:8c:cb:e0:a1:f8:3b:
5f:92:3c:23:2b:ac:e9:67:e8:de:31:7e:b9:55:f4:
fa:c5:bd:93:9b:69:5b:8f:b6:bf:9a:63:8c:97:c9:
2b:ef:42:0a:fd:7e:c6:2b:0d:93:42:87:f8:4f:a3:
55:9d:a8:fe:50:bd:7b:e2:2e:00:0c:cc:cc:2d:f0:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:23:0C:2E:EA:76:29:2A:DF:DA:3C:42:22:C8:E5:2D:39:62:25:DA
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ea:97:b0:11:39:42:d3:0d:18:5a:40:04:ed:5c:93:e0:28:
52:47:eb:71:08:2b:62:bb:7e:a6:6c:32:e3:51:21:33:d8:b1:
1c:2a:5b:84:9b:ca:87:1b:74:0d:bb:c0:61:06:0f:46:bc:0f:
d0:ec:f7:9b:ee:49:81:46:9e:d4:c5:e2:9e:f8:fc:5d:6b:aa:
82:2d:e0:6b:c4:87:6b:27:29:2f:71:49:1b:6b:eb:62:f3:f9:
41:7e:44:b6:b8:2c:84:bf:c7:05:38:60:f0:3e:36:92:f9:8c:
53:4e:7b:a6:8e:84:d3:8d:98:20:ec:d1:81:ff:5e:6d:c3:94:
eb:53:3d:fa:2b:e4:5d:a2:8d:50:98:b3:d3:19:77:32:25:d7:
28:a7:e4:fc:2d:94:10:59:1f:9d:12:ac:51:ce:48:6a:a1:26:
43:7a:e8:ca:2e:01:17:2e:c9:fb:b9:61:3f:48:5d:16:8b:7f:
2c:e8:d7:c2:9c:3d:58:f2:6e:0e:4c:20:34:c2:26:75:fb:42:
7d:46:ef:c5:40:66:44:cf:c3:7c:7b:15:45:cd:5b:7a:ab:76:
a8:03:63:41:00:8d:34:58:c4:21:02:9c:63:58:f4:be:c1:ee:
0d:2d:64:30:3a:ad:e5:17:99:fd:22:73:fd:28:3d:8d:e4:db:
94:fa:20:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:07 2025 by rpki-client