Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: rFbdLywA2HuEp9Z/coDp2Oa3Jadcx2dF4kzI7esGRDc=
Subject key identifier: 11:FB:6C:EF:85:41:5C:88:21:90:62:CF:A6:9F:17:9F:55:F0:B3:E8
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 0199FB7C8B30B29498AA4D66D5533E044A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0C34
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: Hl4dI6pp4T4BtSN5i1SPlgJcQ/Vso7R/mR+3NiMLu9E=)
2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8b:30:b2:94:98:aa:4d:66:d5:53:3e:04:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=11fb6cef85415c88219062cfa69f179f55f0b3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:27:e8:3e:11:08:b1:d9:00:13:7b:ad:a0:
a1:c9:2e:d3:b3:3b:30:5d:53:31:66:36:47:13:cc:
78:70:f4:c5:43:c6:47:b8:c3:7d:74:a5:fa:95:d9:
8c:3d:99:b8:50:0d:2e:58:07:f5:fa:92:aa:c5:5f:
dd:38:fc:70:4c:aa:64:b5:b0:ff:31:12:e3:e8:86:
eb:f6:a6:ba:7e:c9:80:3d:f5:c3:74:8d:14:f8:b5:
5e:90:c2:aa:a3:5f:8c:43:37:79:ba:74:d1:83:bf:
17:cb:11:d2:1d:7d:d4:dc:37:77:68:68:11:67:df:
54:f1:4d:92:19:d2:4a:34:70:a0:6b:53:0c:9c:cd:
ca:7e:f7:6b:23:62:d2:1d:3e:f3:ca:cb:20:6f:0c:
36:e7:5a:d7:51:b3:95:3c:18:d6:27:43:74:dc:5f:
7b:b7:2b:23:0a:83:ea:01:f5:bf:2a:9f:c8:eb:b5:
a1:33:8b:2a:56:c7:28:f2:a3:41:65:fb:78:0e:e2:
14:0e:a5:ed:44:ce:e4:a0:94:ac:12:a1:ea:35:c2:
d0:17:0a:ef:a4:4f:bd:0b:44:20:dd:f4:4d:e3:e4:
29:7f:32:c2:f5:13:b6:61:f6:e5:52:81:08:0a:2b:
fe:df:8e:33:92:4f:81:31:6e:a1:9e:10:3a:00:13:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FB:6C:EF:85:41:5C:88:21:90:62:CF:A6:9F:17:9F:55:F0:B3:E8
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c7:09:04:67:2e:9c:59:74:1e:dc:04:66:43:c1:96:66:a3:
22:cc:74:a5:c5:be:91:7f:fe:e6:27:e9:d2:f6:ba:9e:2d:52:
34:70:6a:d0:11:eb:9b:f9:64:87:2a:28:ea:bd:be:13:3b:90:
75:a4:25:6b:2a:63:11:fc:ff:90:f0:0f:85:2c:c9:ec:bf:21:
4d:b6:18:41:a3:e4:52:62:47:da:de:c9:83:1a:85:1a:ee:73:
21:3e:2e:fb:9f:7e:c1:30:7f:b2:bb:0b:46:06:61:73:eb:4b:
19:20:ed:4c:92:1f:4f:14:5c:86:f3:ca:2f:f4:6a:b4:8a:58:
66:c9:f5:a5:26:35:94:04:5e:73:64:67:cf:00:80:ed:eb:b6:
72:56:36:18:c3:79:6c:4f:b2:ab:a6:30:3b:f4:b5:b1:87:f3:
51:73:42:43:30:cd:75:11:dc:54:2c:36:73:be:d5:09:eb:1f:
6e:1b:d6:32:6a:62:ad:d5:30:5c:f6:50:71:09:11:e2:0c:fa:
5f:f1:46:14:fb:e3:b8:e8:8a:14:f0:b7:e3:6e:fe:9b:48:58:
7c:58:88:d9:0e:7d:eb:1b:b6:80:5c:41:d6:ab:a1:68:04:75:
b0:ea:eb:97:3b:16:96:1c:ad:54:a7:1b:3c:c7:6d:22:0c:e5:
d0:e2:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:34 2025 by rpki-client