Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier: Yt994Y04uQA0yx+KleZ+NUaDWGqqTxboDnbVV0xLzb4=
Subject key identifier: 60:C9:29:23:34:5E:EB:4B:AA:3B:42:1F:32:78:EA:CB:BE:82:0F:6C
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 019A4D3D13E29A8D13AD6BFC32BDE3819EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number: 0D0A
Signing time: Tue 04 Nov 2025 05:00:39 +0000
Manifest this update: Tue 04 Nov 2025 05:00:39 +0000
Manifest next update: Wed 05 Nov 2025 05:00:39 +0000
Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: IKnqJ54IZCaeXAQrcOE73lP41AkmcMnP9T0dvqxk3yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:13:e2:9a:8d:13:ad:6b:fc:32:bd:e3:81:9e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: Nov 4 05:00:39 2025 GMT
Not After : Nov 5 05:00:39 2025 GMT
Subject: CN=60c92923345eeb4baa3b421f3278eacbbe820f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:29:cd:8f:45:8c:d8:15:47:a6:4d:e6:da:
e5:ce:c9:f4:4e:b0:4f:1f:51:b1:4f:52:b0:01:eb:
33:5b:9f:ad:a7:66:ba:5e:d2:d7:2c:90:9a:b8:7a:
2a:83:3f:7f:ca:41:c7:97:4c:c3:23:e9:13:56:75:
d1:4d:54:2e:79:c5:73:65:a2:15:44:34:b5:98:04:
0d:44:7b:c1:25:58:80:8f:4f:d3:04:b7:0f:5e:fa:
88:d5:7e:c2:1e:db:cb:e5:12:54:30:46:11:26:88:
96:ea:e0:47:ed:3e:7f:43:e1:98:fa:17:22:ea:d4:
8a:cb:5a:46:13:68:19:a9:76:ff:e0:bb:bf:95:94:
d2:52:f8:f4:3f:b3:50:12:16:6f:d6:3d:9b:05:d9:
ce:e9:de:7f:84:ef:2e:ff:b7:d1:f2:cb:44:ee:74:
72:23:39:22:62:cf:76:b2:4a:57:d3:6f:c1:85:8b:
15:6e:06:8d:42:f9:8a:eb:e3:90:a5:5d:01:70:4a:
e0:d4:ab:92:65:55:a9:20:88:f4:63:a2:e9:e7:bf:
cb:26:59:7b:4b:64:2b:98:a3:30:ac:05:89:5f:ad:
69:57:3d:fe:b1:1d:13:ae:9d:2e:d0:3a:fc:b3:f6:
bf:aa:48:c2:d5:61:96:c7:e0:b5:16:fa:e8:97:23:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C9:29:23:34:5E:EB:4B:AA:3B:42:1F:32:78:EA:CB:BE:82:0F:6C
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7a:7f:67:2e:21:f5:ee:0c:73:ea:2d:a8:45:14:c1:5b:e4:
63:24:76:05:1b:f2:94:ae:01:b3:40:11:5c:30:04:9e:67:e7:
f2:71:ac:bf:7a:3d:b0:49:97:fb:7a:50:2e:6a:73:4e:4b:d3:
a7:ab:b4:79:e6:dc:bf:bb:85:ee:1f:fd:e1:5a:f0:6d:d7:a2:
96:25:c8:ce:c1:74:a1:bd:8a:3f:c2:46:da:11:88:e7:17:e4:
95:72:d2:66:30:00:8f:8c:b8:1f:77:c3:84:00:95:8f:37:3a:
7b:18:fd:ba:79:e9:68:93:c7:dd:c3:3a:a0:c1:17:b8:5e:13:
15:f5:d5:de:5e:97:7e:55:05:b3:4e:59:b9:7e:55:b5:fb:ba:
0d:e8:8b:9b:64:41:ff:ab:85:ff:69:98:70:77:69:23:93:17:
e8:a9:71:c2:41:95:d9:33:34:b3:76:57:3b:c9:0b:dc:32:b1:
ea:bc:7c:e7:de:19:af:4b:7e:20:ee:18:6b:86:53:73:f0:19:
4e:b5:d6:8b:53:22:eb:56:0f:76:f3:df:36:14:11:d3:f4:35:
01:c7:b8:5f:00:1f:f0:5c:9c:8c:52:1f:aa:45:4e:86:a3:3e:
7e:8e:b7:e6:34:e9:08:a9:5a:d4:f1:ff:32:9b:bd:b9:ff:c6:
49:5e:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:23 2025 by rpki-client