Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: 9aSiWZntcA3raeP+3QZXkavntJEtw7C4UqizJRyjHzk=
Subject key identifier: 89:CF:25:B6:F3:94:69:F1:71:85:AC:55:A4:B6:E8:8F:B2:8C:48:5C
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019A503E621D2C83879D35C9DC19A79B69BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 19:00:56 +0000
Manifest this update: Tue 04 Nov 2025 19:00:56 +0000
Manifest next update: Wed 05 Nov 2025 19:00:56 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: Qe3EmzlFQSkQtlDyy9IhNvh2qZE3pEEfpxfMRC3ZpYI=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:62:1d:2c:83:87:9d:35:c9:dc:19:a7:9b:69:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Nov 4 19:00:56 2025 GMT
Not After : Nov 5 19:00:56 2025 GMT
Subject: CN=89cf25b6f39469f17185ac55a4b6e88fb28c485c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:15:81:b5:6b:b9:ae:02:1f:ac:cd:8c:38:
48:22:64:d4:fc:49:19:d9:7e:9e:e9:f7:f8:16:a8:
6e:45:f4:26:6a:1e:b1:0b:da:1b:d5:ce:a0:d5:b9:
74:49:30:d8:6d:d1:aa:4a:2c:2a:52:24:04:af:c7:
31:31:97:9e:86:3c:e8:d4:08:4a:98:81:8f:2b:d7:
b5:b2:a5:16:48:b3:75:f0:64:85:9e:02:f9:ab:4b:
0b:39:4c:2f:bc:f5:23:aa:a2:27:b6:de:b9:45:cc:
83:3b:55:3e:74:3f:48:84:58:12:ae:3d:c2:75:26:
a0:5a:56:de:37:44:2d:1b:a1:92:f6:90:b6:e8:d7:
04:09:27:7a:b8:60:44:00:99:08:b9:81:db:ea:8c:
e3:08:c6:37:02:3d:71:7b:ab:c2:01:cc:bb:c3:e5:
0c:92:58:f4:51:b8:1f:d9:54:3b:bc:ab:15:ea:2c:
c3:0a:42:36:2e:99:14:28:f6:7b:32:3c:ad:1b:2f:
95:7c:db:5d:cf:b0:06:46:12:0c:5f:4f:66:18:09:
bc:df:b7:16:f7:59:5a:ae:83:51:2e:a1:0d:f0:7f:
55:db:57:23:06:79:44:1e:a2:e0:35:b5:83:f3:ab:
40:2b:1a:81:f4:79:d6:ad:e4:d9:32:9c:39:a5:4e:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CF:25:B6:F3:94:69:F1:71:85:AC:55:A4:B6:E8:8F:B2:8C:48:5C
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a0:ab:e6:b8:73:b1:bd:6c:e1:b6:15:34:9b:62:34:e4:23:
4f:fd:cf:72:fc:c2:22:dc:3c:92:25:60:cf:a2:04:39:b0:25:
28:37:e0:22:07:9c:78:06:b7:89:4f:76:29:2d:cc:c9:2f:ff:
90:ba:50:d6:94:25:76:23:5f:6e:3d:b5:64:b1:7b:30:30:5d:
55:7a:94:69:c4:25:88:33:8e:dc:8b:e5:da:15:38:52:39:72:
a0:1e:e6:85:88:8b:58:c3:8a:09:88:08:7a:15:40:13:3c:21:
67:1e:23:b1:96:7c:d9:6b:db:3e:ee:84:bb:44:34:a3:0a:a8:
c1:ce:3c:43:2f:ce:e8:f6:48:66:f5:46:3f:00:32:46:aa:f7:
d3:90:94:66:1b:04:53:a6:c8:0b:70:fc:dd:9a:c2:d7:a2:e7:
85:87:89:8d:91:78:cf:e0:91:fb:f2:e1:56:f5:66:0a:28:86:
3c:0e:eb:ed:d0:c7:54:da:75:c8:f9:ba:1d:8a:22:f2:9c:76:
a6:20:df:1a:2a:5e:1c:4c:6a:1d:12:89:6b:60:65:fa:1f:e3:
15:e6:3f:48:94:cd:c6:8d:b9:27:aa:a2:ec:0b:f8:91:4c:9d:
0b:b4:f8:c2:e1:e9:17:85:f5:1d:71:ae:1d:53:2d:3e:02:2f:
19:ec:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:43 2025 by rpki-client