Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: /ERG5a3rfJBd4DivY5nmCNboSNEzNBOAyO/U53XNQV4=
Subject key identifier: 41:86:3D:7D:47:DE:0F:AC:7E:64:07:AE:07:D8:D4:05:5A:16:2D:A5
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 019A503E3FD1FB5EFE603CF3A0A279697207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 169B
Signing time: Tue 04 Nov 2025 19:00:47 +0000
Manifest this update: Tue 04 Nov 2025 19:00:47 +0000
Manifest next update: Wed 05 Nov 2025 19:00:47 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: CSfB/eO9fF/LZMexFXR2vojhHLauM4Et9rPBMUwuYDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:3f:d1:fb:5e:fe:60:3c:f3:a0:a2:79:69:72:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Nov 4 19:00:47 2025 GMT
Not After : Nov 5 19:00:47 2025 GMT
Subject: CN=41863d7d47de0fac7e6407ae07d8d4055a162da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:67:8d:bd:5e:39:bd:3d:7b:ba:21:67:7f:
b1:b1:f1:1a:ee:3f:e1:26:54:69:42:00:cf:b0:9d:
f0:ea:7b:70:4a:84:33:59:54:8f:c9:7c:9e:01:19:
73:2f:89:2b:31:60:62:74:34:9b:76:96:8e:20:29:
62:aa:ef:0f:14:76:cb:2d:f2:6b:bc:5a:8f:81:75:
ef:bd:1e:e5:e3:02:52:94:9e:1b:5d:23:97:a2:c8:
34:bb:d1:95:1c:10:ab:dd:c1:da:14:65:f7:1b:d9:
59:f4:ed:d2:f0:5f:fd:e5:8a:d7:46:17:d8:24:f7:
e9:47:9a:03:3c:14:52:d7:53:c3:f7:b1:56:c0:a7:
0b:4f:c2:c6:90:1b:2b:c1:c8:ff:84:f4:69:fa:22:
fd:cc:9f:e2:38:4c:c5:8c:09:80:ad:2d:56:4b:f0:
de:5e:e3:dd:4f:54:2d:4c:7d:5b:d8:72:14:62:d0:
e2:7f:f9:22:82:5b:55:d1:11:f5:2d:cb:2d:f7:74:
8c:7a:68:5c:b2:9b:fd:2f:83:0e:88:98:d1:9c:60:
6a:47:6e:e0:45:bf:89:01:d2:dd:77:3d:6a:22:45:
93:69:28:ce:41:c1:a3:3b:ac:2d:66:a3:9d:23:ba:
57:b7:cc:50:d3:77:32:c7:1d:e4:88:3d:18:6e:f0:
8e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:3D:7D:47:DE:0F:AC:7E:64:07:AE:07:D8:D4:05:5A:16:2D:A5
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cd:40:db:ff:d1:4f:2b:67:b8:a8:f6:f7:af:fa:4e:9d:50:
3b:6e:15:da:92:c2:ab:81:ff:f4:c6:14:c3:45:a2:99:0a:bf:
e3:09:56:e1:44:ed:b4:e3:1b:1a:28:42:23:3b:35:ff:45:d1:
b2:f4:ae:7b:21:1e:55:3c:0b:18:28:e5:20:68:a7:0d:94:0c:
12:f9:44:29:6a:9e:4b:0f:08:7e:0b:3a:61:f8:4a:dd:b2:70:
a6:c9:53:b0:5d:15:7b:d7:d8:9c:62:d6:eb:75:c4:72:f6:6c:
a1:1b:28:8c:4a:80:ba:ca:d8:7d:00:65:d6:78:41:4f:8b:c1:
a4:c1:5f:a1:2c:4c:59:7b:53:fb:54:3c:e9:a7:e9:bd:bf:1f:
a5:8e:d1:5e:59:92:aa:80:9f:f8:19:88:f8:f3:c4:f0:0a:2f:
e2:bc:e3:8a:35:48:55:59:4a:65:cb:99:f3:58:9b:cd:52:86:
90:2a:a8:37:0a:74:2f:0b:9a:09:31:2e:2d:13:8d:a8:14:cc:
2d:d7:a0:d5:72:35:6a:ea:2f:f3:d8:3c:aa:2b:c6:58:be:05:
b2:c9:c4:65:0b:b6:b2:5a:09:f8:94:36:4e:e2:ee:87:f7:6f:
23:8c:90:ef:af:fc:7e:0d:d4:13:b8:2c:5e:2e:19:d9:ae:b3:
ad:fc:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:11:46 2025 by rpki-client