
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: e2QYVB+OCsZ7rf6tEVduRHtYb5OdytdfjGpi8tw29Ls=
Subject key identifier: 09:70:96:A9:D1:FB:B0:13:2E:5D:C1:27:F1:59:C1:EF:1B:8E:17:E5
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 0199FCC6337C06A1F7503FB33E0C1CC1E15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 1474
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: 4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa (hash: ZVBB3cjYOT3VqfWQ4/A+wZjufx+V4UWOyQ4pBr48oC8=)
2: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: Rt5NNdE9iXXV6JJNqc8V/moOeBTGOnzKyYUCsuiBUUA=)
3: W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa (hash: BRMekWIhLsWnxOA/bB8odlVJv4hlD7aXq4PRDSkGzkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:33:7c:06:a1:f7:50:3f:b3:3e:0c:1c:c1:e1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=097096a9d1fbb0132e5dc127f159c1ef1b8e17e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:c0:9b:60:3a:03:2e:04:0f:6f:b1:e4:d2:
dd:1c:f1:91:d3:ab:27:07:50:5e:ae:a7:6a:e4:9e:
66:29:89:12:61:40:54:ab:a2:06:ef:ba:a0:4c:23:
57:ce:94:a9:70:f3:d1:1e:91:71:31:49:e5:2f:10:
cb:de:74:bc:c4:1e:60:e2:3f:bd:95:76:45:23:b2:
c2:44:99:89:01:0c:88:e0:0b:af:1d:7f:cc:4b:88:
fe:66:d5:76:ff:11:6f:24:35:c7:a4:d7:63:ee:07:
2e:fe:e3:59:98:fc:ce:b5:dc:1b:23:5c:bb:2b:e5:
47:46:0f:f3:d2:9e:5f:20:51:2e:5b:5d:66:72:15:
30:d8:4a:da:83:c0:bb:14:2c:f3:3e:b7:22:a8:ac:
a8:94:76:96:11:5e:ca:ed:58:e6:a1:ba:ed:65:e0:
a0:b8:57:4a:f7:50:8e:cd:a5:f4:da:76:bc:4e:0a:
88:e2:4a:cd:80:90:df:5b:97:7a:ea:83:50:86:b3:
02:2a:d9:dd:74:e3:98:0c:15:ee:eb:0d:e9:81:51:
b5:67:db:34:53:0d:2e:67:8b:8f:d3:d5:59:b7:bc:
01:6f:0e:a4:88:0f:37:91:b3:ca:36:e0:b2:e3:4f:
b3:d6:8b:ef:1a:a4:3f:26:c2:e9:1e:b2:ee:ef:21:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:96:A9:D1:FB:B0:13:2E:5D:C1:27:F1:59:C1:EF:1B:8E:17:E5
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:5e:a3:f8:34:0a:ed:55:94:db:b8:81:6e:34:b5:f4:07:f2:
16:59:5c:ab:6a:ef:f1:f0:9c:46:47:0a:98:b5:1c:cf:d9:0e:
f6:a1:9d:3e:ba:14:9f:db:6b:49:50:ef:20:53:85:a2:0c:ad:
0d:66:d1:ac:73:7e:6b:ec:70:51:5e:9f:01:c9:3e:10:23:51:
b7:26:34:cb:b1:84:78:14:d9:31:18:19:97:5f:bc:e3:81:2d:
76:18:d6:7f:a4:cf:89:98:7b:bb:83:6f:1b:a2:fc:a3:10:7d:
77:a2:4f:1d:a6:82:c4:78:c9:25:f9:52:89:23:5a:57:28:c3:
6b:6e:41:84:12:8d:00:c4:53:d7:8e:7e:7f:12:d8:ee:e9:36:
14:01:21:29:30:85:b0:53:29:f3:b6:90:41:32:a8:7f:d2:a1:
f7:36:af:63:79:c8:5c:a6:56:a3:00:6f:6e:8b:7e:28:4c:a2:
93:70:de:ab:5b:5d:cd:d3:39:da:1f:a1:a4:f2:2a:dd:c8:05:
cb:46:97:67:50:08:88:54:7b:15:21:1b:ed:31:ef:cd:88:74:
10:49:17:bd:37:49:12:88:92:27:b9:84:67:6f:e6:49:05:10:
c4:fe:42:00:f8:25:7e:7a:d8:af:cf:75:61:d6:2a:49:a2:56:
07:e5:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:09:01 2025 by rpki-client