Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File: s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier: Goy5M1goz+Jef+CrGYotiI/9G6zoeTKUQFU8pgrriDg=
Subject key identifier: 2F:18:47:9E:27:E8:4A:C4:DD:19:BD:76:EA:A8:AF:A6:54:7D:CF:0A
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 019A51F5C77AA444A0298BE11C900FB2653E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 03:00:53 +0000
Manifest this update: Wed 05 Nov 2025 03:00:53 +0000
Manifest next update: Thu 06 Nov 2025 03:00:53 +0000
Files and hashes: 1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: rk9Pj50rcbkimoDBZuu123dJtfYL1KqvUv1WnY8UMG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:c7:7a:a4:44:a0:29:8b:e1:1c:90:0f:b2:65:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Nov 5 03:00:53 2025 GMT
Not After : Nov 6 03:00:53 2025 GMT
Subject: CN=2f18479e27e84ac4dd19bd76eaa8afa6547dcf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:19:37:a4:f7:b3:d9:c8:59:9e:eb:78:66:
ce:84:b6:dc:82:91:c2:83:a2:9e:4d:f7:c9:85:d2:
9b:25:79:25:aa:ca:55:db:d9:2f:a8:af:e3:5b:70:
51:56:0c:99:bc:76:66:91:70:36:bb:c5:9b:3e:5d:
35:6e:f4:68:d8:3c:52:29:7d:5e:97:da:2c:88:5f:
da:ec:f6:bd:e1:73:e7:2e:65:ab:7f:45:bf:88:36:
5c:6c:7a:ce:12:47:81:bc:2e:6e:a6:62:ff:9f:ba:
32:09:74:25:b4:1c:22:e8:ac:fd:57:ae:c5:f9:38:
94:06:61:22:0d:d5:0f:95:7b:94:14:1f:65:32:85:
30:2b:03:a2:4a:92:ca:05:80:9c:8d:31:7f:40:0a:
b7:b0:de:35:a6:29:60:47:57:d5:af:ca:01:06:b6:
19:70:93:63:8c:ec:bd:aa:10:9e:88:5c:df:e9:3d:
d8:6a:8c:aa:6c:21:79:42:60:13:21:83:8d:dc:b6:
0d:af:62:8a:72:eb:5a:98:62:d4:a9:30:d0:1e:22:
33:ae:5f:05:50:99:ed:ce:62:ef:10:e4:75:fd:e6:
b7:f0:ae:df:01:bd:0a:81:87:f6:08:23:1a:cd:0e:
a5:d4:58:31:bf:25:18:fd:78:bf:12:16:2a:f3:0d:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:18:47:9E:27:E8:4A:C4:DD:19:BD:76:EA:A8:AF:A6:54:7D:CF:0A
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:f6:31:61:07:0f:b9:a9:cc:42:52:85:d0:7a:8d:ce:e0:ce:
89:05:b4:46:d0:32:6c:f2:92:8c:75:c0:12:ac:52:b8:e6:ae:
d0:3e:13:3c:fe:37:07:57:ab:ec:d7:c6:51:dc:63:29:88:bb:
12:64:f5:17:8b:74:98:83:a0:81:d9:a8:5b:50:d4:7b:76:8f:
1e:1f:cb:26:95:91:ae:ea:7e:21:6f:d7:25:d6:e8:9b:af:c9:
60:12:db:25:b0:30:27:a0:a4:96:a5:1b:49:2b:e8:ca:50:62:
ed:65:ce:e5:e7:70:8a:0b:95:bc:a0:4c:c3:92:8b:6c:1c:c3:
f1:0d:5a:45:7f:8d:94:19:07:27:38:95:8d:f4:cd:d8:87:3f:
49:a0:df:6d:df:65:19:bf:14:f5:4b:a5:ac:3a:bb:0a:30:81:
cd:46:56:36:20:cd:5b:9f:1e:ec:52:a6:89:51:db:7c:ea:02:
03:da:7d:99:ec:1f:31:b8:bc:20:f5:ce:25:66:fc:ff:94:20:
7b:14:79:98:4a:a8:bc:aa:86:29:d7:cb:a9:ae:0e:20:8e:0e:
aa:6f:5d:b2:5c:e3:d0:ec:5c:66:aa:48:91:84:5f:4f:93:e0:
14:69:7e:7b:73:1b:d6:56:46:e4:83:2d:9b:57:86:84:ed:f8:
b0:4f:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:26:12 2025 by rpki-client