Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier: fCmOhTD5SEgRJLEv8HVo824ei9XZqUSOyRz6nsLQWmU=
Subject key identifier: 9C:03:D5:35:CF:9D:32:3F:43:E7:6D:74:25:29:90:00:D6:BB:3D:D6
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial: 019A4DAA7FAC0B9E27E725F52425F36A754A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number: 16AE
Signing time: Tue 04 Nov 2025 07:00:10 +0000
Manifest this update: Tue 04 Nov 2025 07:00:10 +0000
Manifest next update: Wed 05 Nov 2025 07:00:10 +0000
Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: mMYyxn3zFLX2QZSZ7QtGfZsiKhNVbMjUSN2ZHVFjHwQ=)
2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:7f:ac:0b:9e:27:e7:25:f5:24:25:f3:6a:75:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Validity
Not Before: Nov 4 07:00:10 2025 GMT
Not After : Nov 5 07:00:10 2025 GMT
Subject: CN=9c03d535cf9d323f43e76d7425299000d6bb3dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:7a:54:bf:70:b2:48:b3:67:3a:5d:8d:00:
80:d8:c4:1e:09:a5:d7:f4:3f:35:2f:5c:f1:e8:a7:
31:76:3b:3e:4e:52:87:80:28:38:a8:cc:9d:64:81:
be:7e:8d:1b:fb:ab:90:57:93:6b:b0:03:26:ff:f5:
87:70:11:dd:0a:d1:d0:77:9a:db:20:78:32:7c:56:
b6:53:b0:ed:ca:a8:71:b4:37:92:62:07:42:b1:69:
d9:50:ee:ce:6a:45:ba:56:73:d1:0a:c0:dc:30:83:
a1:86:10:33:46:bd:ba:c1:a3:76:4f:90:fa:0c:16:
46:ac:37:fa:66:c6:3f:2a:c5:d3:26:a0:50:da:ca:
54:78:db:58:b6:87:b3:c2:61:39:39:68:36:0c:bb:
47:6e:7d:db:16:4e:ce:e8:42:32:7b:72:4f:a7:7d:
c9:e5:a8:04:cb:93:0b:bb:0b:4c:dd:79:83:00:89:
50:83:ee:5a:53:58:29:1e:ee:0e:e1:a6:9d:21:33:
59:9e:79:37:4f:b4:15:93:48:d9:51:6f:4d:ed:ea:
fd:cd:5a:40:30:c0:dd:cd:d1:91:86:df:c5:eb:9a:
25:30:2e:df:3d:78:75:bd:d3:9d:d2:4a:d8:3d:c0:
c8:41:f1:c5:b4:01:97:3d:c8:44:3a:94:95:89:75:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:D5:35:CF:9D:32:3F:43:E7:6D:74:25:29:90:00:D6:BB:3D:D6
X509v3 Authority Key Identifier:
keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:07:05:80:61:93:b9:9a:27:d3:71:b1:86:41:04:82:20:d7:
7d:bd:89:30:68:23:79:35:da:73:84:01:d0:94:2f:ca:c3:85:
b1:94:fa:cd:52:02:10:4e:68:41:8a:7a:e2:70:96:bb:d9:36:
1f:c8:f8:ba:b7:4d:3a:e3:85:c6:e9:6d:7c:2b:03:e6:b0:dc:
00:80:36:0b:93:84:4e:f0:9e:15:e7:50:79:0e:e3:21:18:65:
88:1b:cf:58:05:08:32:d8:4f:78:92:03:d6:c1:8e:32:df:7e:
0f:a0:b4:1a:23:22:08:2e:71:b3:18:47:36:9c:e2:45:f3:f4:
0f:de:9e:c1:40:90:4e:f0:31:ac:44:79:6a:2f:a8:49:02:d4:
3e:b1:e4:35:13:5a:9d:47:b1:e6:c8:30:b6:ea:15:44:8a:1b:
c6:35:6a:61:3a:09:f8:4b:4f:20:1e:ab:f8:61:68:2c:a4:5e:
ad:6c:64:5f:c0:b9:2e:ad:f3:dc:2d:91:40:8a:dd:a4:ff:2c:
62:58:92:f3:79:e1:00:7e:78:a0:6a:ab:e1:c3:e0:7f:2a:ea:
c2:c8:a4:b5:79:21:7e:aa:fd:89:37:5c:02:9c:61:ad:f9:6f:
49:fb:14:20:f1:07:4c:b5:78:98:6b:68:2b:38:fb:e3:97:70:
44:e3:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:19 2025 by rpki-client