Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier: snNJ9+GKM+3kp7aRn6is7MTJkBfNMccEQSLlogb6FII=
Subject key identifier: 88:B3:89:82:37:CC:0A:6F:32:BA:74:6D:A0:D5:7F:04:EC:34:57:33
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial: 0199FD6AD4CDBADD7F27457F7538A3B84B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number: 0C57
Signing time: Sun 19 Oct 2025 17:01:00 +0000
Manifest this update: Sun 19 Oct 2025 17:01:00 +0000
Manifest next update: Mon 20 Oct 2025 17:01:00 +0000
Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: Yl+kN3aPYuFwmDRPiwNWJGWXuRuHjosZC7CexwZhids=)
2: rf8xmxH0lxQMZaEoNGLhxRtMOZM.roa (hash: 8uXylOlK6BkO3v7SWg2Pp+uIEZNpg7MPKeK8yn1WMAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d4:cd:ba:dd:7f:27:45:7f:75:38:a3:b8:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Validity
Not Before: Oct 19 17:01:00 2025 GMT
Not After : Oct 20 17:01:00 2025 GMT
Subject: CN=88b3898237cc0a6f32ba746da0d57f04ec345733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:cb:86:26:d6:bd:7d:eb:7b:fd:d0:ff:ae:
f7:03:b2:04:b8:e6:df:f5:5e:c6:a0:ac:77:49:14:
99:84:52:1b:29:a1:40:6f:ec:69:3c:3d:93:a0:b9:
d2:1d:b2:1e:c3:d4:e4:9f:f7:1f:15:43:3d:65:5c:
7a:74:38:c0:6e:50:4c:5e:b2:e4:28:bf:45:e9:62:
79:28:e1:0c:22:4a:c8:2a:d2:a2:31:11:27:0f:b7:
12:bf:36:60:06:5b:86:9b:1c:88:5d:30:b9:79:0b:
ea:85:e7:87:6c:35:53:d8:e4:8b:b2:77:2a:20:f3:
6d:5f:8e:61:68:90:e3:cd:a0:7d:a9:40:c1:b4:ba:
0f:a7:ee:1f:b6:39:39:d3:4a:45:f3:7a:d9:0b:db:
6e:14:c7:40:39:72:ef:be:35:ab:86:b0:9c:2e:66:
0a:c1:06:bc:cc:21:ab:de:43:90:5c:de:f5:96:56:
7f:a5:04:89:a0:db:ac:31:da:02:c2:5c:a1:0b:c2:
ad:fe:bc:a9:88:b8:38:96:de:4b:21:09:3e:93:52:
bf:ee:63:6d:2f:b4:30:01:b6:1a:42:7f:9f:72:d2:
a6:cd:a0:bf:5c:38:bf:5c:ed:9c:65:7a:b1:96:31:
59:e1:8c:91:fb:ba:a3:83:d7:72:cb:71:57:89:79:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B3:89:82:37:CC:0A:6F:32:BA:74:6D:A0:D5:7F:04:EC:34:57:33
X509v3 Authority Key Identifier:
keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0c:cf:8a:9d:ba:a1:92:b0:ff:2a:35:c8:8d:2c:b4:ac:83:
53:ad:40:ce:7e:7c:75:47:a8:1b:9d:94:93:e3:b2:b1:8b:ae:
de:60:f7:a7:25:9b:4e:6b:eb:b5:a6:b8:4e:47:f9:e0:a9:4d:
25:51:91:e6:3b:43:d7:42:46:1a:6a:28:fd:f0:b6:77:9b:00:
50:b1:3e:72:38:24:5e:38:36:38:9a:cb:4c:c3:3d:13:55:e0:
cc:67:28:6d:b8:71:7e:32:54:9e:ea:42:96:b8:a8:e5:c6:a0:
f5:05:26:2d:52:90:5c:69:0f:f4:b0:7e:fb:d2:62:5e:a3:79:
cb:aa:29:ca:2f:8f:6f:24:b2:63:f1:aa:d8:ea:cf:e8:d9:bd:
8e:26:fe:8a:c5:4d:82:2e:e1:e0:53:bf:ab:b9:b2:36:3f:8a:
82:5c:c3:c1:da:fe:2c:be:e0:ad:a3:33:4d:40:5b:0f:dc:50:
f6:58:2a:7a:5e:8a:d0:f2:e6:96:50:66:ce:bc:87:27:d1:85:
af:0d:81:69:b1:83:a2:ab:4f:94:6e:ef:33:2f:08:2d:b8:71:
e1:dd:01:df:77:9e:b1:33:bd:44:f2:8c:70:24:cb:42:94:ea:
e3:81:99:a0:c1:25:ca:af:f8:69:f8:9f:78:68:ea:0d:c9:d8:
23:d9:3e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:46 2025 by rpki-client