Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: +5GvS3D1pm+Sn6Qh0z02Gr3ak0SxptwIeMk6W6m/kgE=
Subject key identifier: 67:70:D7:76:B1:6C:00:D8:9A:D1:BE:B0:19:41:46:64:7D:B6:EE:B0
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 019A4E4F7966969117E10351C9B688AC34E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:22 +0000
Manifest this update: Tue 04 Nov 2025 10:00:22 +0000
Manifest next update: Wed 05 Nov 2025 10:00:22 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: YSGR200+KZklB2+Gpk2UeQi6QB06ClV8yALKOTI1esc=)
2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:79:66:96:91:17:e1:03:51:c9:b6:88:ac:34:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Nov 4 10:00:22 2025 GMT
Not After : Nov 5 10:00:22 2025 GMT
Subject: CN=6770d776b16c00d89ad1beb0194146647db6eeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:5c:51:98:44:dc:9b:dc:fb:0c:61:a5:ad:
f9:ac:57:17:81:cb:71:51:e7:d4:13:50:f4:ae:3c:
cb:92:fb:65:4e:28:07:c1:8a:60:f0:8e:60:3c:6b:
f6:5e:45:f7:c0:65:9c:2a:de:98:bb:36:43:24:bb:
01:53:3b:8d:53:1f:30:21:07:cc:36:fd:54:4d:77:
4f:f9:82:1b:be:b7:a5:2a:6a:fc:82:b4:10:aa:48:
f8:a9:86:8f:44:d0:c5:17:eb:0b:87:38:78:80:33:
6d:98:b7:84:a8:ec:5b:b3:63:5d:35:58:e8:3c:80:
1b:1b:20:b3:ea:07:49:95:57:66:45:c7:56:e3:70:
0a:2d:16:1a:5f:4e:e5:76:db:91:dd:a1:cf:34:6a:
d7:5d:e9:92:eb:c6:00:35:5a:e6:58:5d:e0:8c:cd:
25:af:45:60:4d:8f:6f:57:8e:eb:85:25:0a:3a:54:
f1:96:b2:6b:73:35:19:38:50:9a:c9:a8:4b:df:d8:
f7:74:ff:ba:41:67:9b:67:b5:62:32:b7:f1:48:66:
de:ca:74:a9:f2:37:e9:3f:54:eb:10:92:16:68:00:
29:53:36:a1:58:41:08:24:16:67:78:70:54:f9:76:
9e:4e:79:0e:f0:88:7b:7d:9c:b2:fb:9b:28:bb:78:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:D7:76:B1:6C:00:D8:9A:D1:BE:B0:19:41:46:64:7D:B6:EE:B0
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4a:fe:0b:77:04:47:c9:c9:fd:2c:e0:4b:ec:1e:c7:a3:c4:
d2:6d:f6:14:c7:88:a3:d4:f6:7f:8c:18:dc:e3:b0:b6:79:af:
12:2c:c0:9e:9a:a6:67:dc:1e:0e:aa:c9:50:57:83:98:ad:dc:
37:86:65:12:12:d8:da:0b:75:58:5d:26:b3:ff:0a:4e:70:ab:
4b:df:53:48:b9:72:39:bb:a4:c8:6c:6f:ed:5d:d1:24:12:6a:
7a:50:f3:14:03:5e:5a:f4:18:f0:61:0b:b7:d8:05:6b:ae:c9:
bb:f7:f0:b1:d0:c4:81:7e:d8:f9:37:9b:6f:e2:ad:f3:8a:6b:
e8:34:28:4d:1a:05:a3:72:73:dd:4a:ef:28:d5:ac:b7:c3:96:
fd:85:78:c6:6f:9e:ac:b0:1d:04:25:39:07:69:e2:c1:06:3d:
72:56:b5:14:92:d5:83:eb:4f:c8:4c:46:5e:16:63:a3:52:72:
8f:52:4e:8f:15:6a:32:d8:bf:ed:b3:ec:a8:eb:3b:44:90:eb:
11:eb:4f:a7:46:f6:e8:e8:31:18:15:11:a7:1e:a2:71:a4:cd:
30:5d:d7:79:6a:69:4e:b6:ee:ee:99:be:cd:1a:87:2e:cb:2d:
2c:7a:5b:57:bc:34:1f:46:72:09:47:db:9e:cd:6c:61:d2:7f:
29:40:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:24 2025 by rpki-client