Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: OsHCno4+Q0Chq9UwWfVKbEp4VJPt6EI1iBYpoixyNLA=
Subject key identifier: 77:13:82:B2:06:A3:EB:98:36:77:BA:7B:C5:98:8E:B8:B3:A3:9D:9B
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 0199FCC67827D32C99FA5AC76232F5E417B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: WAvcPfiPGCZun1CYbjwlEtxys/QP/tLjcligXvkk2Rc=)
2: 9Gaptu7OegDOTWgwtAQ4TQ0AHTI.roa (hash: rkESQzEqL5Foo1j28OK1lOudeGd3GtI+57JqeG8POXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:78:27:d3:2c:99:fa:5a:c7:62:32:f5:e4:17:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=771382b206a3eb983677ba7bc5988eb8b3a39d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:c6:ef:e3:97:0f:36:3c:4d:d0:80:63:bb:
03:aa:c6:05:82:af:c0:a5:09:30:b0:74:88:37:9f:
b1:6f:05:64:91:b2:83:53:87:50:0f:b6:c9:a4:4f:
92:7f:54:0f:85:f8:b7:19:b7:e3:f3:3c:ec:d9:14:
4c:c4:53:ce:83:2c:a1:01:02:df:53:a8:c9:ad:2b:
af:cf:4c:a1:0b:6c:d8:ae:3a:d7:05:9a:51:21:f5:
ec:13:82:c5:92:5d:a1:70:5b:d0:f0:d1:8c:51:23:
a2:05:ca:63:95:02:f5:5b:99:4d:3f:8a:22:cb:17:
5c:af:f8:1c:29:58:3b:4a:45:70:6a:4b:ed:e7:4e:
81:b5:ea:8e:99:b5:6d:45:24:6d:1d:23:c0:cc:49:
d6:53:88:58:4f:b4:50:a5:15:2b:bf:f5:6d:2c:d2:
9c:96:f2:e6:4a:eb:4e:82:fd:37:a3:f7:0e:44:af:
09:04:e0:b6:1f:44:ad:da:96:04:14:46:8d:83:11:
fb:3b:55:e6:75:94:a1:8c:b0:f1:b9:9b:fd:3b:d8:
27:52:1b:23:67:1f:4c:25:f0:92:c5:7c:1e:0e:01:
ff:4f:a1:a6:0b:cc:ee:8c:cf:70:5f:08:f3:30:d7:
66:b2:a9:62:e4:bb:08:7e:14:76:d6:f9:4a:03:5f:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:13:82:B2:06:A3:EB:98:36:77:BA:7B:C5:98:8E:B8:B3:A3:9D:9B
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ae:0f:fe:d6:fa:0b:0f:5e:5f:3f:ad:78:9c:2e:35:9c:5b:
a7:14:6a:34:04:f1:4b:da:45:1d:70:1d:a0:93:cb:bb:5a:03:
c9:95:d5:cd:5e:a0:63:80:2b:17:77:c2:4c:08:11:d4:96:e5:
d5:83:67:e8:b1:c5:ef:10:97:58:40:02:ec:85:c4:31:06:01:
0f:a2:e6:1f:15:b2:b4:59:2a:8b:8e:e0:62:b0:16:b4:35:e3:
ab:47:7f:32:0e:8f:53:c5:48:96:3f:1e:35:31:6d:b8:5c:c9:
c3:d1:cb:03:94:c9:63:e3:37:fd:f9:f0:0f:a4:f6:62:2a:e0:
0f:ec:27:31:2b:d1:bd:49:07:38:64:29:1e:eb:06:d4:a1:25:
12:13:80:d8:54:6a:f4:64:76:ec:fb:6c:61:42:39:2d:25:85:
17:38:ea:86:25:8b:5f:93:83:ec:bf:99:11:66:0d:d9:85:96:
a4:f2:bd:ba:3f:20:28:4b:09:da:92:94:99:bd:2f:28:f1:31:
51:f8:6c:59:cd:b0:2a:bd:8b:3b:2e:8e:c0:dc:2e:7b:07:a3:
f0:33:39:b2:16:bd:e6:5a:82:72:fc:40:5b:19:23:a3:78:aa:
8a:9c:d0:cb:70:7a:62:95:dd:27:a9:ad:8f:a3:e6:b3:93:65:
e7:10:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:36 2025 by rpki-client