Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
File: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft (raw, json)
Hash identifier: OnktSJMNTShz4hW0uUQW1Mqi6xZqZl19MWwu9iwLdYo=
Subject key identifier: 10:59:73:CC:FD:37:E4:42:3F:D6:7B:04:1B:64:A0:B7:1C:5C:F0:8A
Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
Certificate issuer: /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Certificate serial: 019A00356D3799834EB1E75846383E5CA425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
Manifest number: 099C
Signing time: Mon 20 Oct 2025 06:01:32 +0000
Manifest this update: Mon 20 Oct 2025 06:01:32 +0000
Manifest next update: Tue 21 Oct 2025 06:01:32 +0000
Files and hashes: 1: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl (hash: uTGRqxfR0T724/R30aonuZgTFDW+02CT9p3WC3Nmj0c=)
2: pLApfkxIdjxoT9Fus2V1e6urFrI.roa (hash: vf/DF5zyaMPjk4SS8zEJvZOPKo0v68Ai1w0hvPkh9bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6d:37:99:83:4e:b1:e7:58:46:38:3e:5c:a4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Validity
Not Before: Oct 20 06:01:32 2025 GMT
Not After : Oct 21 06:01:32 2025 GMT
Subject: CN=105973ccfd37e4423fd67b041b64a0b71c5cf08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:a4:4a:22:d7:c2:cb:bc:46:eb:61:10:8e:
f6:53:7b:50:df:ff:76:0c:40:f5:f9:78:f3:60:41:
cf:d3:4c:4f:cc:32:af:83:ed:b1:24:60:3f:b5:7b:
87:6b:d0:35:af:67:0c:58:e4:42:3e:fe:24:54:00:
7d:8e:43:10:a5:f1:94:4c:60:bb:1e:da:6e:3b:32:
94:81:23:6f:d1:6f:b0:61:86:37:6b:fc:a9:00:70:
59:4b:c0:32:58:9b:3f:d0:87:3d:99:10:3d:27:93:
f5:d8:f6:38:e5:72:90:a5:ac:c9:2f:9c:1a:7e:48:
28:dc:6b:41:6f:11:c9:9e:7f:f6:64:8b:fc:16:68:
42:8e:3c:55:20:8b:2f:35:ae:02:fb:e7:1f:43:a9:
41:9f:13:e2:26:b7:d6:cf:f4:1c:3d:c3:37:70:9f:
80:07:12:08:9c:03:f3:70:c1:3a:6e:7c:e7:b9:79:
77:30:6e:ef:17:b4:88:ea:4b:0b:6f:77:83:e8:43:
9c:57:21:90:15:2a:57:f1:c3:b9:dc:c2:c8:15:1f:
a1:c7:af:e9:ee:ac:ac:20:9d:b3:f4:10:19:dd:8f:
5e:a0:28:a0:8f:97:1c:89:3b:15:99:af:8e:00:87:
38:bd:f9:ff:a4:e5:19:68:0d:4f:52:29:7f:37:83:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:59:73:CC:FD:37:E4:42:3F:D6:7B:04:1B:64:A0:B7:1C:5C:F0:8A
X509v3 Authority Key Identifier:
keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:da:e6:3a:07:0d:f9:13:da:71:a4:a7:13:ca:85:6d:e5:60:
d3:49:4a:19:bd:7e:77:d0:4d:bb:96:06:ac:fa:01:c5:cf:68:
9d:5f:4c:12:48:1d:3e:d7:0a:0a:15:74:89:56:08:2a:29:ff:
ad:b6:7a:c0:12:7c:ec:c3:2a:4d:c2:97:1c:44:32:47:b4:c1:
f7:65:8a:4b:72:3b:cd:89:3a:5b:1f:a1:85:d9:b2:9b:8c:6b:
f2:58:02:8f:41:3d:2b:e5:1b:5f:ef:14:28:b0:95:a5:74:02:
d7:85:e2:68:39:9d:91:af:60:89:44:ac:0a:8a:ff:d2:23:5f:
87:67:56:1d:6a:b2:a8:4f:91:bf:56:48:94:b1:98:5a:e3:bb:
f3:d2:95:86:6a:10:a4:c5:7b:83:1c:ac:46:bc:9e:c7:9c:da:
2f:7a:5e:7a:b6:f6:75:6a:bb:3a:fd:df:50:9a:c0:01:b8:f8:
9d:26:f2:9f:a6:05:1a:ed:6e:7b:61:90:ba:f2:11:76:b1:f6:
04:99:a9:72:3a:6d:b3:db:50:2d:21:2c:3a:84:8b:c4:b6:f3:
1b:92:2f:5f:1b:a9:b1:a6:af:6f:d5:12:9d:2a:a0:f3:98:7d:
28:6d:fa:06:da:5c:3c:67:0e:38:46:39:06:36:b9:ec:da:4e:
2e:01:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:45 2025 by rpki-client