Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: nuorIiN4E+FNt6y8/dj7ZhbE4hrdBsfBL4/JOatyjEk=
Subject key identifier: 83:80:51:81:05:7C:B2:3D:F0:76:D3:F8:FF:FF:15:3F:DA:03:FD:7C
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 0199FCC6972D831CA9A8524CCE2D314AE46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 0E95
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: KS3MAFQ+7n9sM9vGf0SNwz1ElMDdoX/l58J7+5o0LlQ=)
2: SOdbfA4k2rHns_9FeEf2o6kdRPA.roa (hash: UCxkRGVqhqrA5LNMsKBYYs+r3jtWXwOD0Dbnu0MtoW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:97:2d:83:1c:a9:a8:52:4c:ce:2d:31:4a:e4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=83805181057cb23df076d3f8ffff153fda03fd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:b5:d6:f8:fe:73:c0:f9:dc:a3:1e:75:ec:
0e:ab:2b:b5:ec:ae:bb:2c:fc:2a:93:6e:68:96:79:
86:90:11:05:04:4f:f4:a4:36:b0:73:dc:35:8b:81:
c7:e0:b6:4d:2a:48:dd:57:d2:4b:f4:f7:cf:6c:f0:
1f:1e:7f:7a:59:1b:61:90:25:9b:81:07:3d:24:3e:
0e:fb:5e:cf:4b:f8:bc:a6:b4:e5:bb:ae:3d:29:80:
60:b3:01:a0:6e:3e:9d:a6:1d:35:0e:60:a2:cc:b0:
09:a8:c8:b6:ec:69:1f:ff:cb:44:00:26:fe:17:88:
46:a7:cf:85:b5:5f:5b:fa:0d:6e:24:47:e5:a6:35:
cc:f3:01:0b:b5:4a:d8:39:8c:08:de:df:05:e2:bc:
9d:db:28:3d:7b:a5:c6:07:26:4e:2e:b5:84:a3:93:
4a:b9:03:4a:26:c8:b8:80:56:16:ea:48:a5:98:be:
23:4d:18:97:b5:1b:e6:e0:88:ba:97:a1:6b:c6:fe:
4f:13:96:3a:71:dd:e4:b5:d1:cd:a7:87:97:67:6d:
4e:fa:d5:92:a1:e1:15:07:85:e5:a0:79:5d:e0:3c:
50:f6:44:44:41:f8:cd:e0:28:50:4e:85:05:61:d3:
06:ac:26:52:b8:df:1e:7b:28:7c:24:c7:58:09:a4:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:80:51:81:05:7C:B2:3D:F0:76:D3:F8:FF:FF:15:3F:DA:03:FD:7C
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:94:81:0d:5e:3b:be:cc:62:d6:83:1f:5a:51:57:ea:d8:
8b:b5:74:7a:56:8d:5c:a0:25:1f:b8:69:8e:1e:47:1b:56:4e:
1f:70:ec:58:04:dd:81:33:5f:2c:77:91:b3:69:b2:bf:41:16:
93:1d:28:83:09:84:52:a5:41:3c:9e:b9:f6:1d:20:78:e1:55:
6f:a1:48:84:7b:1d:8a:b0:25:72:56:57:c8:79:71:a2:47:40:
dc:f0:d3:d8:28:9c:28:cc:17:74:be:20:fb:42:0e:c2:b1:ee:
81:6b:b0:9d:0e:c8:4a:fd:8d:05:65:95:e5:b7:96:a3:58:b0:
9c:79:62:76:99:be:2f:7f:72:4e:d5:b2:b1:51:0f:1d:1b:dd:
51:c7:e5:15:77:fd:6d:85:b5:ba:fb:37:58:6c:cd:cd:5a:c2:
9d:d6:15:3b:2c:61:2d:45:35:7a:11:68:64:f9:1c:ec:91:09:
fd:98:97:80:d2:ed:bc:f2:b1:48:14:49:0c:49:e7:5b:f4:02:
93:e7:23:f4:f5:8e:15:48:78:fa:77:d7:1d:7a:2d:79:09:db:
8b:2f:2f:38:53:db:44:ec:33:e0:7d:cf:69:0f:0a:14:d3:57:
4e:54:f2:51:e2:67:cc:24:6a:6c:cb:8e:7f:bb:92:8d:f2:2d:
99:7c:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:55 2025 by rpki-client