Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier: FNghItiApr1aw+8/f9iNJmgmgMY6kOcvLCA4UmKPFr4=
Subject key identifier: 3E:43:55:E2:C7:A0:9D:5E:88:E2:EB:86:48:EA:04:C2:6E:03:F8:F8
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial: 019A4C9876A8D9BF9CD0E7458D786E986FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 02:00:51 +0000
Manifest this update: Tue 04 Nov 2025 02:00:51 +0000
Manifest next update: Wed 05 Nov 2025 02:00:51 +0000
Files and hashes: 1: XufdK4JaU0kijhaCZqp6MWC7lI8.roa (hash: tAIQSyAZo/oGjmfexz3lVWcMQblwf+06mjxANWC5dis=)
2: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: 3P/IdqtFTN0BJXoA6Lzjp7Sbf8X6XoX/a54Pft1SVxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:76:a8:d9:bf:9c:d0:e7:45:8d:78:6e:98:6f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Validity
Not Before: Nov 4 02:00:51 2025 GMT
Not After : Nov 5 02:00:51 2025 GMT
Subject: CN=3e4355e2c7a09d5e88e2eb8648ea04c26e03f8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:06:fd:4b:b0:0d:c2:af:a1:68:10:51:c2:
a0:3f:7e:1f:81:e5:e4:83:95:9b:86:cb:19:33:2d:
89:ca:7c:89:60:b6:3a:44:ef:32:97:bf:16:b4:a2:
ba:0c:ea:f3:16:5b:b8:95:45:a5:83:14:b6:a8:54:
9d:f0:00:3d:27:6f:2d:50:4d:4b:02:eb:2d:b3:a3:
c9:80:cf:aa:57:a9:db:12:f2:f3:83:b0:0f:c1:a5:
4c:7f:3a:30:ba:00:3b:69:d8:8c:4c:95:1a:fe:b9:
9d:40:36:1a:be:fd:1d:0c:9a:6a:4f:b8:d3:cf:8f:
53:ac:b3:0d:5d:b9:80:54:94:54:35:02:87:d0:af:
96:9b:df:09:70:e3:d5:b3:dd:c0:02:39:52:32:bd:
73:37:b6:09:6d:59:59:e8:64:49:cb:6a:1f:e1:e9:
0c:14:26:11:ce:9c:64:f7:e9:c6:46:d4:a4:3c:94:
a5:65:8a:0f:b7:ac:10:cc:ed:30:56:e3:94:ac:ac:
7c:c5:71:2b:b3:76:67:d3:54:2a:6c:84:4c:16:63:
71:27:cd:d2:0f:49:ec:e4:de:a0:09:3a:32:2a:c2:
73:57:18:05:c8:61:ab:91:4c:87:d9:df:12:53:e9:
d4:3b:25:85:7b:8b:8d:d3:e1:ad:a2:26:95:16:da:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:43:55:E2:C7:A0:9D:5E:88:E2:EB:86:48:EA:04:C2:6E:03:F8:F8
X509v3 Authority Key Identifier:
keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ae:e8:55:a1:78:d2:45:59:f4:f7:28:a2:7f:7e:6b:fd:2e:
4c:d1:3c:b0:78:68:12:c6:4b:35:d1:0b:81:b3:ac:bd:cf:3a:
86:70:d6:bb:bd:74:b6:a3:2f:06:71:23:ec:5b:55:dd:69:cc:
ad:3b:67:41:6b:df:52:d7:77:fc:c4:5d:66:fd:18:39:3a:fb:
27:ed:19:af:16:e2:df:32:d6:ce:00:46:65:f8:50:b5:2d:77:
71:40:44:eb:2f:8b:00:b5:bb:3d:dc:15:1f:9b:17:22:bf:d0:
9d:8e:80:d4:f5:bc:94:b5:68:ca:e9:0f:81:1c:26:ff:d0:07:
56:90:5f:68:f6:75:6d:6b:f9:19:e0:63:9c:f6:af:e7:59:bd:
80:14:81:30:18:a3:ec:31:ae:7c:b5:f1:c0:30:11:54:40:93:
43:4a:44:b4:cf:04:56:8d:02:29:be:27:d7:30:bb:a3:53:72:
d3:41:be:75:b5:74:d5:dc:e5:63:5f:39:42:3a:4b:1d:1f:51:
06:7f:95:d5:70:3b:c8:c0:bf:d5:d0:bb:13:47:2d:5a:f1:3c:
62:db:35:e9:f0:d0:2a:9e:26:14:ad:6e:fa:41:13:8d:86:98:
65:4e:c2:49:94:21:8d:22:a6:b5:20:6a:bb:8c:80:65:39:93:
1e:a2:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:44 2025 by rpki-client