Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: rwuvHlj5yDtO7i1l3a+HCySxFC7UvTlhYUVY4v1qnPk=
Subject key identifier: 6B:87:5D:67:70:35:B7:24:82:AE:10:88:13:9B:9F:D4:4E:2C:48:04
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 0199FBEB564C13FF908DD929381AAF8A3806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: rd5u7xDDYhOZXy7Rd9xPuZvW6PI9yEqLZ8omO+Zdu9Y=)
2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:56:4c:13:ff:90:8d:d9:29:38:1a:af:8a:38:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=6b875d677035b72482ae1088139b9fd44e2c4804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:ec:09:dc:8c:d5:a8:a2:10:1c:35:ec:69:
7d:73:80:bb:dd:74:ee:53:a0:de:bf:90:c5:e5:37:
b1:07:11:65:39:ad:2d:00:15:90:f3:9e:25:0a:52:
58:ba:97:ef:32:aa:33:b8:97:ae:1b:af:dd:c1:b1:
57:94:f7:27:98:d4:65:fa:da:b2:22:39:75:b3:12:
35:ca:18:7e:5c:db:9d:98:6d:40:53:2d:20:e5:84:
8f:70:1d:2b:34:6f:b8:00:05:b8:33:41:57:0c:f7:
8a:2e:27:34:7a:bf:23:7d:b1:a9:c8:3e:22:9f:d2:
b3:0c:8a:ea:40:25:58:64:5e:18:ea:1f:54:8d:f9:
b0:3e:9f:96:9e:e3:2d:0a:5f:6c:22:5e:55:3a:6a:
af:fe:0c:8e:61:ed:60:1a:f7:ff:ae:e7:a3:d2:7a:
d1:a2:39:96:df:92:fa:f2:93:70:08:34:10:16:0e:
ae:55:91:9b:3d:97:b1:25:8d:a8:e9:27:10:56:e3:
61:5b:c6:70:8b:5b:f1:5b:95:32:ac:5f:5b:72:d5:
9b:23:b7:bb:2b:f1:0d:2d:81:d5:3b:3b:96:57:fe:
37:d1:33:b3:c8:ef:f0:84:d7:4e:ea:16:09:64:46:
23:24:71:d0:2d:1a:ac:61:8f:5e:4f:cb:38:45:54:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:5D:67:70:35:B7:24:82:AE:10:88:13:9B:9F:D4:4E:2C:48:04
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5f:16:73:05:ff:2b:44:08:b2:92:d7:db:a6:dd:f2:a8:cd:
6a:09:bc:b7:84:eb:b4:10:22:f6:16:9e:89:9a:52:76:10:a0:
d6:e3:30:4f:cc:26:cc:f9:d3:46:0b:c3:3b:e0:2e:31:5d:7f:
2b:cc:4d:cf:cf:71:a0:2f:5e:b1:4e:ad:4a:cd:14:45:3e:08:
01:93:0c:cc:83:45:ea:f7:e9:66:b4:80:05:8b:a9:db:5b:e3:
97:3d:8e:f4:a4:15:10:71:27:aa:93:c3:af:99:a0:61:64:ac:
9f:4a:9b:ed:cf:62:ad:dc:9d:36:10:5d:91:37:2b:22:7a:af:
1e:1c:74:e7:0d:10:06:6e:ab:77:68:12:a3:3e:6f:07:6b:81:
9d:94:cc:3b:bf:19:eb:0e:f1:df:b4:8e:5a:56:f3:fd:be:72:
9b:1c:e1:0a:f5:dd:41:33:56:38:9c:3a:68:fa:2b:8d:d0:14:
74:1c:7e:b3:58:0b:e0:4c:e1:ef:4e:87:d8:38:86:1c:35:14:
9a:b2:ea:57:15:86:0c:1b:d9:45:a9:a9:b6:a6:5a:54:bd:f7:
ba:40:9c:54:0e:8c:69:3a:d5:b0:c0:1d:68:42:a6:d1:f3:ea:
62:83:13:7c:90:c6:8e:09:75:61:1d:10:cb:78:44:03:27:ac:
31:a3:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:15 2025 by rpki-client