Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: XmjMuiE6sh0OC7DIFMQTggFaHRdRi7FJ6QaujYx7GJ0=
Subject key identifier: AD:42:A6:D4:DE:F2:E5:45:0F:60:CC:C2:05:2B:72:6B:F2:E5:D7:38
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 0199FC8F8AF38B9CAACD51FB0169FD2FC321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: DKkrQ07vLQaXI1dCgjgq1Z5xSg8FLQAh0C2zlGhFel4=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8a:f3:8b:9c:aa:cd:51:fb:01:69:fd:2f:c3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=ad42a6d4def2e5450f60ccc2052b726bf2e5d738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:d1:9a:d5:9d:db:e0:15:9d:4f:a7:88:72:
b1:86:75:aa:06:14:80:8c:d2:e7:1d:37:ed:7b:ec:
13:e0:c7:c3:39:27:71:e8:22:87:ee:15:04:a6:a7:
4e:46:90:d4:f9:99:26:0b:fe:fb:ef:86:39:7c:12:
b3:a7:88:ec:58:fb:e6:29:24:b6:7d:7e:a5:af:9f:
88:81:e6:86:70:73:ab:bd:bc:d9:41:ba:82:dc:29:
ac:30:e6:1d:e8:9b:e5:60:d7:11:bc:e5:26:ee:24:
63:45:49:68:15:e3:f9:37:3f:50:97:87:5c:e1:c0:
cb:e1:88:f7:33:3d:69:13:91:25:94:dc:14:8b:d0:
83:55:19:26:4c:84:ad:68:f5:f5:92:0e:96:35:ca:
1c:dc:87:25:43:67:4e:d1:6e:41:be:ad:5c:b7:1c:
e2:df:cc:c1:d6:83:cf:12:fa:c6:41:e0:1a:ca:87:
dd:71:ee:d9:f7:9f:69:ec:d0:10:86:af:dc:66:7f:
c5:32:9e:b1:22:32:51:bf:5d:2b:4e:eb:d3:dd:4f:
fa:79:19:54:93:fb:fe:07:58:c5:fa:aa:95:fa:67:
5d:10:56:29:cb:45:17:a5:e2:3f:fa:9a:8e:8a:3b:
78:d8:f5:45:ba:5c:e6:f3:8a:cf:6b:06:69:41:dd:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:42:A6:D4:DE:F2:E5:45:0F:60:CC:C2:05:2B:72:6B:F2:E5:D7:38
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f4:06:22:41:03:b8:0f:b3:64:82:7c:30:ae:eb:73:6e:06:
47:84:ef:e6:4c:24:0b:b1:9b:ac:12:bb:72:22:d5:c5:fb:73:
6e:ab:f5:f2:e4:03:dc:cb:d1:1c:01:50:1d:de:80:86:28:e8:
9b:cd:f8:0b:bb:50:90:d7:5e:3b:bd:6f:fd:43:bc:ba:a6:e8:
c0:0e:62:6c:ed:4f:62:cc:45:2b:61:46:db:27:da:be:b8:f3:
b6:51:62:f8:29:0a:c4:0f:9d:5c:89:69:09:21:50:52:7a:8e:
94:12:fb:35:98:43:25:6c:4e:d2:23:a8:d1:4c:a7:86:89:47:
36:a0:3b:bd:a8:bd:78:ff:1c:e1:3f:e6:3a:2e:a1:36:12:3d:
ee:48:22:ff:4a:90:1a:a3:d4:7f:96:4b:4c:94:17:ed:e9:d8:
03:a2:d2:be:db:e7:4d:eb:0d:62:64:e5:f6:08:c4:2b:bf:7b:
90:e2:7b:a7:71:1e:a1:54:5d:b1:3e:66:5d:ed:48:a7:74:af:
c0:b4:da:30:ab:ea:14:67:8c:26:72:02:be:e5:5c:08:35:fd:
7e:8b:2f:c2:25:fc:b1:d2:26:e8:5d:cf:f9:de:70:d3:26:8b:
ea:44:bb:f4:0d:aa:b7:1f:b5:08:b8:75:8a:05:6f:af:1a:30:
e0:45:b8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:39 2025 by rpki-client