
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
File: 5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json)
Hash identifier: EI/DKFOOOZsgBXhvQJ/qaqnaiK8sEkA+AzL0m6lEgkE=
Subject key identifier: C2:42:B2:01:92:BB:BD:C8:3D:F3:65:74:C0:C5:27:CE:39:82:33:3D
Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
Certificate issuer: /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Certificate serial: 0199FAD7C42A39C5B6E4B2CF4F9E15005F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
Manifest number: 0DFF
Signing time: Sun 19 Oct 2025 05:01:08 +0000
Manifest this update: Sun 19 Oct 2025 05:01:08 +0000
Manifest next update: Mon 20 Oct 2025 05:01:08 +0000
Files and hashes: 1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: tYbVu0Pvas1JW+tqFF/l8RFBRwMMJkiv2D559Y7N0ns=)
2: kUe56rRopp_KQsUYDln6H32rpVA.roa (hash: Nqm32SYb89EX8JBzdHqkHyeFXZStjUKylm9CZ3PRcrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c4:2a:39:c5:b6:e4:b2:cf:4f:9e:15:00:5f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Validity
Not Before: Oct 19 05:01:08 2025 GMT
Not After : Oct 20 05:01:08 2025 GMT
Subject: CN=c242b20192bbbdc83df36574c0c527ce3982333d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:b6:aa:fc:7c:99:38:2b:4d:71:08:ef:80:
a4:06:d2:f2:19:9f:59:6d:0c:ac:ca:9c:9b:8e:a4:
fb:1b:62:2b:17:02:c1:fe:52:9c:e2:eb:c4:ac:ca:
b0:09:a2:bd:d7:cb:a1:17:24:16:b2:1b:42:4c:c1:
1a:a1:25:9f:d7:15:77:87:41:ba:6f:e2:e6:ad:e8:
1c:93:3a:f6:16:28:d8:9c:9e:0c:2a:14:1c:68:fa:
3b:e7:cc:61:ca:4b:f3:e7:03:cd:df:14:ea:d9:cc:
6f:59:18:82:f3:ef:bf:45:2b:71:8f:09:36:d3:d9:
e1:56:e9:b3:af:7f:15:4e:8e:82:45:35:61:9b:ba:
0d:ab:af:ef:8a:cc:ab:b8:9d:2a:8a:fa:1a:ea:4f:
0d:fb:d2:4b:6e:a5:79:0e:77:13:ed:ec:26:d7:ad:
98:08:db:70:ab:7b:3c:70:d5:c0:24:4c:77:5c:86:
72:87:36:48:bb:74:2b:f6:a1:51:b9:18:70:4a:d2:
5f:c5:47:ba:ec:e3:95:5a:f9:4c:54:e9:29:4e:94:
88:ec:ce:57:14:88:a1:ed:85:47:8a:a3:3b:cf:c2:
3d:80:02:ff:02:cb:80:ad:bc:9a:fb:20:0e:a5:4c:
80:58:21:d8:2d:18:a4:f5:4d:da:db:31:77:b9:68:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:42:B2:01:92:BB:BD:C8:3D:F3:65:74:C0:C5:27:CE:39:82:33:3D
X509v3 Authority Key Identifier:
keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:97:69:84:e5:0a:63:66:79:80:72:9a:c6:4e:1d:28:22:65:
8a:e0:c4:b8:10:8d:c2:ab:52:34:0f:12:a4:8c:77:82:4f:60:
2b:19:fa:54:7f:69:4f:cd:51:35:09:8c:bc:4c:9a:fa:51:66:
4d:11:e7:0f:cc:ae:83:0a:f4:6f:47:3a:b1:ff:a3:b7:b1:8a:
44:f8:ef:a8:ca:da:7d:c6:35:aa:b0:91:89:d3:15:14:ed:13:
19:ef:94:5f:36:4a:56:4d:f5:8e:55:c1:c8:56:20:cc:47:aa:
0d:c8:30:09:ed:9d:72:e6:34:e7:a7:da:41:5d:d0:d6:ff:1f:
27:b0:33:fd:03:f6:26:0e:7a:93:d7:70:0d:78:2e:bb:46:bc:
c9:e9:bd:c1:84:e0:f6:82:13:cd:93:b9:a9:16:45:25:56:3a:
35:bf:ae:79:e1:57:f9:3d:0c:b3:f7:9e:0b:85:cf:b7:ab:ba:
71:f0:01:24:a1:86:0d:c5:27:f9:38:4e:7e:0a:77:a3:f3:5b:
b7:46:e1:f5:c6:83:6b:65:43:7f:35:04:63:9e:50:c9:b6:0f:
4b:2f:39:e7:dd:6f:38:95:c9:2a:dd:14:94:5a:ab:f7:3f:47:
44:81:e8:d0:79:33:7f:8a:a9:65:ab:d4:47:ad:0c:8b:7c:43:
04:bb:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:48 2025 by rpki-client