Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: rlKTpUwfi8XdKxezB9CH1DX9gkk2IzrwKfBs2hzTy2U=
Subject key identifier: 09:91:09:38:FB:1B:38:42:2B:7F:C2:21:DD:14:9D:E1:71:49:B4:76
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 019A5006E8B4ADA2188D09CAA7C2990CCD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 03F1
Signing time: Tue 04 Nov 2025 18:00:21 +0000
Manifest this update: Tue 04 Nov 2025 18:00:21 +0000
Manifest next update: Wed 05 Nov 2025 18:00:21 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: iGZq66Ov6BfUzLBV2HQrLp6KzErjp9civQPXQ358slI=)
2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e8:b4:ad:a2:18:8d:09:ca:a7:c2:99:0c:cd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Nov 4 18:00:21 2025 GMT
Not After : Nov 5 18:00:21 2025 GMT
Subject: CN=09910938fb1b38422b7fc221dd149de17149b476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:9a:5a:af:3b:55:d9:d1:35:2e:3f:75:1b:
a0:91:b7:48:82:67:86:86:dd:e0:bd:ca:be:c8:4d:
9d:7f:85:64:ed:67:42:95:ff:7f:a7:d2:59:a4:12:
8a:8c:38:cb:1d:5c:47:fb:c4:79:82:4b:6e:cb:ac:
e7:64:46:7c:ea:c6:77:8d:d1:f0:57:6a:05:58:ad:
e5:d8:68:19:40:70:e5:d9:56:c2:59:52:70:75:82:
d9:85:be:e0:f6:af:49:74:c1:4d:34:6d:62:2c:1d:
90:50:6b:06:00:23:9b:01:db:3b:ed:6e:e2:0c:a5:
69:e5:5d:fa:13:65:80:56:aa:73:39:73:8e:2b:06:
53:56:81:61:08:5b:06:66:34:5a:cc:6e:8f:52:19:
dc:78:31:27:c1:26:f0:77:d2:d9:92:d8:64:53:86:
ff:6a:fd:c1:98:50:30:b8:71:26:06:e6:af:49:28:
5a:08:52:3b:36:5e:03:cd:c0:92:99:83:42:5d:ef:
de:26:f8:44:1b:a5:1e:fa:7f:9f:23:0c:11:b0:f9:
7c:34:e6:72:4f:a6:ec:42:13:fa:f3:d4:40:62:c3:
3e:eb:94:83:a0:cb:c7:40:b9:44:4b:49:f5:5f:c7:
33:12:6b:7a:0f:f8:4c:9c:c8:ce:fa:68:6d:e8:b7:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:91:09:38:FB:1B:38:42:2B:7F:C2:21:DD:14:9D:E1:71:49:B4:76
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:47:45:73:a6:41:d2:a8:e6:a0:72:7d:5a:b3:64:f3:2b:70:
79:d4:42:e7:6c:8b:b1:80:08:3c:7a:9a:cb:5a:74:33:02:15:
00:a9:ab:5e:ce:46:29:59:f0:d7:b0:97:7f:39:4f:66:28:3e:
5e:0b:95:a8:66:d4:cb:3b:f4:b4:74:b5:db:0f:6d:7b:69:de:
10:eb:f2:73:a1:1a:23:bd:f5:89:a4:7e:b3:63:83:e6:77:2b:
62:25:64:05:eb:f6:0a:3b:ea:d4:e3:df:42:8f:a4:95:69:cd:
3d:82:8e:76:e1:79:00:f8:6b:53:70:8b:36:ab:84:52:0b:e0:
4b:13:48:6a:8e:59:f2:ba:6c:2d:3e:66:1a:70:0e:57:48:4f:
9f:96:f1:bc:cf:43:37:78:de:e2:1a:c3:61:57:7d:74:e9:09:
fc:0c:a6:6f:4c:8d:b5:de:ef:08:2c:2b:9b:70:44:1e:dc:76:
0a:f8:b1:5b:98:12:65:44:9c:68:57:de:94:ed:5d:e1:f2:d5:
46:2b:16:39:8b:0f:0d:3d:de:3b:5f:8d:57:ce:93:bd:8d:6a:
5b:fe:93:60:e2:fd:22:7f:3f:dd:72:ed:4c:a2:c0:6c:d6:be:
21:ac:55:07:ae:0f:48:31:28:c3:9f:26:8f:56:80:f1:98:f4:
f9:4b:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:45 2025 by rpki-client