Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: nuok/jpVKO8Vazqgmby1gh7Qi705/xifbMez2oEH4FY=
Subject key identifier: 3C:57:12:04:36:23:30:AE:A8:44:20:50:FA:4E:4F:9C:59:5E:72:6E
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 0199FDD97E67B735532F4F3F230290C9FE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0C26
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: RoginnCXYdRukcnerhNOcTwbhE6NU8jUuClRv8ngL0g=)
2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:7e:67:b7:35:53:2f:4f:3f:23:02:90:c9:fe:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=3c571204362330aea8442050fa4e4f9c595e726e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:8a:6f:d5:f1:1b:5b:54:17:94:d3:11:a7:
08:91:ec:7b:75:81:32:dd:dd:24:2e:97:d0:9f:73:
20:b2:8e:ed:0f:15:c5:0d:f0:da:84:9b:91:13:41:
f2:19:74:de:28:10:0e:ec:fc:b8:35:b3:f7:ae:8e:
25:11:4f:af:d6:6f:94:fb:b8:0d:1a:0f:39:ee:53:
57:bf:b5:9e:2a:d3:5c:c6:ab:bc:a7:32:56:e2:5a:
be:f7:7c:05:ac:ac:a7:26:3e:41:a4:20:b3:ad:47:
08:52:9b:d7:20:1c:00:6f:2e:ea:32:21:e5:89:24:
df:c4:d8:f2:5f:e5:22:f7:de:6d:98:b1:8b:02:d1:
5a:d6:ed:65:b4:a4:46:c3:d0:84:78:b4:55:6c:76:
2f:c6:51:24:6f:8c:e3:2d:df:c2:43:5c:7d:3b:e3:
45:39:1e:1a:89:fa:34:8d:4b:60:4f:3e:49:a9:47:
ec:0e:4f:07:bd:09:14:0c:8e:22:f3:9e:8d:4f:58:
96:b9:79:e3:19:6e:cf:d9:66:19:23:e9:6d:8e:44:
13:0e:e3:45:d9:dc:ce:65:fb:6f:46:fe:38:da:bf:
cb:07:3b:3a:60:f0:12:19:b7:41:f1:ef:4a:63:c9:
f7:a6:49:6a:a3:b5:48:1e:34:03:ad:ac:6b:f5:13:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:57:12:04:36:23:30:AE:A8:44:20:50:FA:4E:4F:9C:59:5E:72:6E
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f9:13:cc:9f:97:03:07:52:2d:3f:16:a4:72:2c:98:a3:2a:
c3:df:7f:18:69:40:3a:2e:10:54:43:4a:0b:68:3c:9f:60:3e:
96:0d:1f:78:9f:73:57:12:4a:11:eb:29:1b:ef:ff:43:0b:0e:
2d:ec:1f:d5:9e:32:86:ea:f0:66:a2:0d:bf:f9:c6:3d:86:da:
51:ee:e5:f4:32:7d:be:55:4c:d6:fd:6e:70:56:34:50:cf:cf:
36:bc:05:65:78:a2:fd:c7:64:8e:3d:1a:0c:f8:42:e5:68:98:
5e:53:05:8e:9b:ba:51:07:8f:b0:10:fe:74:4a:02:a3:d3:d0:
b8:b0:db:43:02:a3:42:76:8d:30:97:05:91:3c:ef:06:33:43:
f9:ea:d9:bb:06:b6:2e:10:ec:eb:09:12:c3:9e:2f:da:2d:6c:
e9:d7:ef:4e:6a:65:e9:c8:5c:67:62:04:d3:f6:7c:f0:bd:83:
61:de:db:37:96:a4:c3:00:bd:28:e7:1f:4b:8c:29:7d:9d:e1:
9a:c0:c8:68:1c:ef:06:7e:66:6d:a8:e0:a9:e9:7d:2a:bb:bb:
bc:bb:90:b6:3b:bf:e3:df:ae:b8:cb:db:98:cf:72:7d:72:51:
5c:08:46:b1:b3:8d:7a:8d:79:9b:52:9a:d1:80:a8:82:82:72:
73:2f:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:20 2025 by rpki-client