Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: ybLNXq/Dz+qbtaMhWLsLhOOGONd/my5bD2RG+m8TcWg=
Subject key identifier: 05:D6:74:90:E6:48:8B:FC:C2:2B:18:9C:D1:D9:75:7B:22:A2:46:99
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 019A4E4F537DEB5265023B33F393F7765131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 10:00:12 +0000
Manifest this update: Tue 04 Nov 2025 10:00:12 +0000
Manifest next update: Wed 05 Nov 2025 10:00:12 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: s9VEgPZU3/A4JOgTgC8yTZP8AREF3ofEF7xjk9AOJsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:53:7d:eb:52:65:02:3b:33:f3:93:f7:76:51:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Nov 4 10:00:12 2025 GMT
Not After : Nov 5 10:00:12 2025 GMT
Subject: CN=05d67490e6488bfcc22b189cd1d9757b22a24699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:39:46:c4:e1:f2:94:70:28:ef:0f:92:f8:
67:bc:aa:f4:cf:7d:4b:09:85:9f:cc:a9:10:52:c5:
d8:5d:9b:ef:ed:61:c8:73:55:79:71:74:bd:fc:8e:
24:99:74:58:89:9d:84:6d:ac:37:7d:51:e5:f9:00:
12:ea:41:8e:a0:22:69:20:9c:53:4a:bd:ea:7b:2f:
86:ad:3c:9c:b6:c1:7b:cd:46:03:b0:f8:a9:cb:3e:
7f:2b:d3:47:a6:ce:41:cd:28:57:1a:92:ef:38:97:
a6:97:c4:ef:8b:fc:63:3f:28:f6:f1:9c:b9:f5:2e:
f7:fa:72:1e:98:a3:46:08:7f:c3:fd:f9:3a:ff:81:
84:96:07:59:9b:42:75:10:19:36:9a:c5:2a:e1:46:
da:96:87:7c:d1:e8:46:cc:34:eb:61:df:50:d5:d6:
8e:31:e2:37:b5:46:02:1e:06:b7:d2:a8:b5:84:ff:
13:d4:12:0f:f5:d8:78:0c:3c:b7:f1:13:db:4b:a1:
b3:0e:98:aa:41:3e:12:a7:3b:d0:b2:8e:b1:cd:c0:
f0:ac:32:35:51:35:0a:4d:9c:d9:61:0f:4a:b3:0a:
60:de:66:c3:84:47:69:7b:30:e6:f9:3e:c0:2e:22:
90:7d:41:7b:cc:31:35:f7:c9:f0:90:7b:fb:b1:7a:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D6:74:90:E6:48:8B:FC:C2:2B:18:9C:D1:D9:75:7B:22:A2:46:99
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e8:65:0d:43:7a:92:ca:9f:5d:3b:38:7c:12:14:9c:d8:39:
79:ce:b6:60:f9:19:bc:5d:1f:55:9d:10:8b:5a:0f:51:d5:99:
4c:8f:98:73:26:32:52:82:12:91:15:11:e6:30:04:e2:92:a9:
31:e2:7f:03:52:21:17:9a:56:75:eb:73:b9:90:d9:c1:5b:cf:
20:a2:20:96:7e:9e:17:d5:7e:10:29:6d:e5:42:23:03:53:1b:
2f:23:12:0d:4e:4f:2c:43:80:94:10:c2:05:6a:d4:9e:60:e2:
49:ff:d8:d1:3a:ef:e3:65:64:2c:e9:56:24:17:39:e4:52:4a:
8e:b7:bd:5c:30:8f:f1:2a:b7:a9:c4:b3:f5:5f:b5:05:40:3b:
b9:96:60:c5:26:fc:d5:3b:73:bc:75:cd:a8:03:9e:8e:ef:aa:
ab:27:0e:50:87:0e:87:4d:b9:5a:c5:30:4c:29:70:63:b3:16:
69:44:24:fc:5d:fd:94:be:27:7d:4c:f4:a7:ad:5e:40:8a:a5:
37:48:0e:4c:ed:ef:63:8a:e7:2f:f5:41:1e:42:ef:7c:33:54:
47:49:f5:40:8b:4e:88:ca:83:d6:82:5d:d5:e7:38:2d:02:a4:
65:bf:4b:6e:47:dd:5a:41:ec:3b:b5:5f:34:de:dc:c7:29:a2:
c8:86:77:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:45 2025 by rpki-client