
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: qwzY2yajTIv6jzZxV6wybOt6QWDMLBSKLQhUzisWuE8=
Subject key identifier: 17:5A:95:C4:2D:7A:46:2D:94:0E:A6:82:3D:AF:D7:04:4F:BC:95:62
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 0199FFC817E92080D5CDD11B6D7795FD020E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:02:07 +0000
Manifest this update: Mon 20 Oct 2025 04:02:07 +0000
Manifest next update: Tue 21 Oct 2025 04:02:07 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: oJwDbJv6coKPQphtNjxhysjOeteytkdXZpLZMSCZyXI=)
2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:17:e9:20:80:d5:cd:d1:1b:6d:77:95:fd:02:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Oct 20 04:02:07 2025 GMT
Not After : Oct 21 04:02:07 2025 GMT
Subject: CN=175a95c42d7a462d940ea6823dafd7044fbc9562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:6c:6c:97:93:5a:3e:e0:fb:98:7f:2f:34:
25:e1:f8:98:df:b8:3b:42:57:bc:4f:cb:ee:42:1e:
54:28:e0:1a:f9:31:ee:f0:3a:59:3c:70:07:c7:65:
d5:07:02:3d:f9:a6:29:b8:47:8a:89:20:16:5e:e5:
4a:8e:df:55:5a:aa:40:53:14:31:ef:b9:0a:3e:fd:
75:2a:3b:8b:1d:48:17:b6:21:da:5d:7d:f5:91:48:
d3:84:77:be:7d:da:18:31:07:50:5b:79:bd:73:57:
40:4c:89:a7:8b:f7:a1:a8:c5:da:3c:b6:04:cf:82:
68:3d:c4:93:a6:06:2b:fe:8d:61:13:19:a3:79:16:
68:6e:8b:b3:27:6e:e5:a1:5e:b7:94:ed:6e:b7:1c:
c8:b2:06:e5:79:a3:fd:e9:c4:d5:3b:21:28:5d:29:
28:c1:55:78:0c:98:2c:d5:52:49:46:03:dd:77:9c:
c8:7a:f1:d1:6e:a3:4f:fe:46:08:fd:0e:aa:f6:8d:
0b:07:c6:12:06:d8:99:93:90:b6:56:f8:10:44:a6:
19:73:4e:b7:7b:c4:f6:8e:17:a7:28:1a:40:40:83:
34:79:da:50:ed:0b:f9:c2:b9:6d:a8:77:2b:21:99:
6d:90:d1:b4:f7:51:cf:e3:61:e6:91:8e:2f:df:ad:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:95:C4:2D:7A:46:2D:94:0E:A6:82:3D:AF:D7:04:4F:BC:95:62
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:41:e4:67:de:3d:b5:55:a6:04:87:96:75:87:f0:52:17:5b:
c1:eb:95:28:75:f9:d3:c3:dc:56:49:c9:49:f0:be:8c:77:d7:
f3:a1:ba:74:4e:58:fb:4d:f3:9c:89:49:c6:46:f3:e7:16:a7:
bd:e1:c3:82:47:bc:a1:fd:ae:ba:9c:ac:19:6c:da:5a:3d:bb:
df:42:30:86:bd:28:9c:7a:7e:04:b1:98:0e:38:86:03:1a:3e:
3a:02:70:45:13:63:64:b9:5c:93:df:4b:b0:90:4b:95:a6:ab:
09:1b:ec:5f:db:83:9e:27:aa:d1:3b:6b:b0:a5:6f:fa:1a:6c:
8f:c1:c6:d3:9a:b7:1a:c6:ea:2d:e1:e3:57:66:87:0c:7f:14:
7b:12:89:19:02:73:8e:cf:13:49:bf:ff:7c:06:bd:77:03:8d:
bc:19:f2:2b:b7:d1:f8:1f:d5:d3:92:fa:40:7c:d0:1d:0f:ec:
fd:b1:41:a0:d0:73:e0:b6:e5:17:82:82:f3:de:4f:5f:d8:b2:
50:41:ee:f2:96:a1:5d:f5:19:34:88:71:10:e0:cf:85:a0:82:
a2:11:88:26:af:5e:b9:a7:79:10:f1:59:aa:a7:f5:e1:90:32:
eb:4b:df:8a:74:9f:bc:99:a7:32:82:9f:c6:6e:34:28:26:ee:
e8:c7:75:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:01 2025 by rpki-client