Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File: 5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier: vs027T1IIR1WhVfhqtXfX+IwJYHJLab4oC/MbhaEfg8=
Subject key identifier: 18:88:DA:1C:D6:B1:6E:F9:EC:36:FB:01:BD:69:D5:33:9E:D4:81:80
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer: /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial: 019A53080FCA47EC051A418AEA433352E0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number: 032A
Signing time: Wed 05 Nov 2025 08:00:28 +0000
Manifest this update: Wed 05 Nov 2025 08:00:28 +0000
Manifest next update: Thu 06 Nov 2025 08:00:28 +0000
Files and hashes: 1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: YYDElsP6P8DX8CZNepyIUTJjspl/eG2SFllUOYy7bn4=)
2: WZ6QV7I388WfR1atNyelt0Q9Mso.roa (hash: KwrEk8zO8slIVjQv6gkfQCNK8LKZkPpOkNAIgKKlEQo=)
3: cYRGhzL82eBqpmxlM9QdQCYRf0M.roa (hash: JsKzcZfq1zGMtrEgXsSMPufU5mv03rsq7Q409GdhdZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:0f:ca:47:ec:05:1a:41:8a:ea:43:33:52:e0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Validity
Not Before: Nov 5 08:00:28 2025 GMT
Not After : Nov 6 08:00:28 2025 GMT
Subject: CN=1888da1cd6b16ef9ec36fb01bd69d5339ed48180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:9b:d3:2f:68:01:c7:0c:49:75:a7:5a:56:
08:10:d4:17:29:20:59:99:98:f8:0c:2d:c0:2e:68:
ab:05:84:f5:03:9c:0a:6a:2e:e3:7f:04:88:20:f2:
ce:73:68:79:bf:51:f1:91:8b:df:e2:7b:9d:fd:51:
21:f9:2b:4a:a5:bb:ae:9a:8d:b0:14:1b:18:68:33:
31:4e:eb:aa:bc:84:8c:2c:63:13:d4:a2:0f:e7:a7:
d7:87:34:66:e8:c9:e3:bf:15:0f:92:13:89:81:e2:
5b:19:78:ca:99:0e:b7:aa:35:a4:1a:7a:52:c7:b0:
32:5c:6c:a0:a3:ca:ec:63:59:92:21:87:7c:a7:f5:
22:20:b7:8f:2f:5f:76:7b:51:0f:a0:7a:75:61:0f:
5d:f3:0f:1e:64:4a:d3:d3:be:3b:63:80:0f:a7:d2:
90:39:33:88:00:28:fd:85:76:86:ab:e2:ef:a8:f2:
26:43:fe:d3:93:7e:13:3c:10:0e:1f:12:1b:04:57:
cd:c7:41:1f:e2:ae:da:8b:8d:e0:95:37:b4:bf:a8:
cb:b9:8e:07:cf:82:bb:5e:62:f4:d3:6b:99:bf:36:
9d:3a:9a:a6:72:6d:b1:94:51:0b:da:e4:22:6b:1f:
d1:f7:8f:53:8f:86:c8:df:12:ab:54:e1:bc:58:90:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:DA:1C:D6:B1:6E:F9:EC:36:FB:01:BD:69:D5:33:9E:D4:81:80
X509v3 Authority Key Identifier:
keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:48:b4:c7:1f:af:5b:64:2d:fb:2a:d6:b4:50:e2:b3:0d:41:
6e:46:e0:3c:cc:43:38:5d:18:0a:6d:c6:ea:12:19:af:94:da:
0c:a2:6f:15:38:67:0f:4f:e0:f3:cd:08:6f:ef:83:b6:fd:ab:
20:14:80:ce:e8:f0:d7:3b:ef:71:65:74:bc:75:aa:28:73:3d:
7e:28:5d:66:a0:84:1b:1a:49:a7:25:c8:31:54:59:54:cb:ea:
91:e6:01:cf:27:7c:1e:c8:e1:1e:a9:6c:57:5c:24:93:dc:95:
fa:4c:5c:f4:10:f9:45:1d:2c:20:d0:b2:52:88:ac:ca:70:dd:
80:1f:58:d7:1d:79:11:58:4d:e9:99:4c:e3:51:19:7f:5c:d9:
14:21:59:b9:ea:c3:37:37:42:e1:79:5c:1a:bb:a7:e8:71:4b:
03:ec:cc:a3:ad:e2:ea:c7:37:08:3d:6d:16:b7:4b:74:8f:af:
4f:4c:f0:51:19:f1:2e:dc:66:0b:d0:e2:64:56:0d:87:8b:8f:
c3:6e:26:38:e3:92:ef:24:35:52:92:0a:9c:25:ea:9a:8f:e5:
51:c9:aa:c7:98:a1:61:8f:ff:4a:22:6f:e9:7d:de:e1:30:02:
8b:69:81:bc:9d:f3:78:12:25:c2:1e:ec:0d:73:6b:71:31:47:
3b:87:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:44:59 2025 by rpki-client