Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier: F39uOa6evrqNn83mDKPoDBi31a/kl672zV3eYFozMR4=
Subject key identifier: 6D:3A:43:D4:7E:7F:87:DD:E4:C1:14:78:73:27:03:89:53:BA:DD:E2
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial: 0199FFC7CA59209AC43E298106ECBE044907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 04:01:47 +0000
Manifest this update: Mon 20 Oct 2025 04:01:47 +0000
Manifest next update: Tue 21 Oct 2025 04:01:47 +0000
Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: uuG8kWIM1EXtZYddBqQqgoZu8ZmBu3nNjIC+xDvzPYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ca:59:20:9a:c4:3e:29:81:06:ec:be:04:49:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
Validity
Not Before: Oct 20 04:01:47 2025 GMT
Not After : Oct 21 04:01:47 2025 GMT
Subject: CN=6d3a43d47e7f87dde4c114787327038953badde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:72:65:41:55:b2:c1:7e:e5:49:c8:30:c1:
7f:8a:19:60:2d:95:ef:61:d6:c2:ab:96:6d:7a:ee:
67:a8:7c:6c:05:cd:45:83:12:05:d9:d6:a2:5b:fb:
c2:36:96:74:46:b7:92:91:8f:56:86:1a:5b:af:45:
9b:25:72:e0:61:7d:71:85:4f:bc:2b:e9:2e:ff:58:
2f:61:37:aa:da:c3:3f:29:1b:0a:f7:b7:d1:6a:0a:
d2:f2:69:eb:02:ae:65:ba:7f:8b:6e:3c:87:d1:79:
d8:cd:e3:a4:44:c6:99:a3:a6:42:3a:66:8d:b4:50:
5a:79:76:e8:2b:17:7c:b5:91:8a:b3:5d:83:27:d1:
96:93:ab:84:de:cb:2f:a4:4a:91:d0:c9:54:04:8c:
04:ca:48:60:c3:16:f3:10:7c:64:d7:c1:5d:d6:af:
c5:2f:90:56:7f:6b:d7:f3:22:e2:fa:18:aa:28:d4:
88:e2:25:b4:d7:54:89:b2:37:5f:a3:49:13:5f:0b:
f7:63:1d:4c:6a:2a:ec:bc:4e:fa:9f:9b:e2:63:71:
c6:2b:31:ce:6a:62:6f:64:d2:79:e5:ba:7a:d0:11:
dd:8f:fa:4c:9a:a3:f0:f8:dc:c5:a4:8b:35:52:99:
29:90:2c:67:8e:8d:95:ed:bd:bc:56:a7:01:6c:7d:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3A:43:D4:7E:7F:87:DD:E4:C1:14:78:73:27:03:89:53:BA:DD:E2
X509v3 Authority Key Identifier:
keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:9d:76:77:f3:01:9b:32:17:94:01:0a:81:94:c3:d4:c7:d9:
de:12:08:cf:4a:d3:00:3b:c6:e6:de:45:62:ac:0a:66:93:7e:
f4:ae:46:9b:0a:cb:81:af:fa:b6:c5:75:96:c8:d9:53:c3:f3:
51:03:eb:17:f9:1d:6f:73:4d:79:f9:99:27:cc:7f:00:4d:52:
64:de:49:aa:ae:c3:96:d0:66:e4:82:8f:6e:01:4f:ec:03:3b:
ad:23:8d:ba:b7:c7:b4:48:7a:2d:59:cf:a1:a4:b0:37:7d:81:
c2:c5:c6:8c:a2:3b:34:75:19:d7:f8:c7:d7:d3:4f:bd:f1:53:
49:b2:54:44:13:84:91:24:a3:09:93:10:a4:b0:4c:86:de:04:
9b:47:64:fa:ae:50:29:e2:ce:e8:ef:7a:cf:a1:13:fb:66:1f:
44:e4:22:41:79:d1:cb:1d:90:c7:ae:50:86:2a:a5:13:99:8c:
83:98:ac:d3:dc:92:f8:37:0b:fa:4d:36:b7:0f:00:a8:b3:3e:
53:32:68:70:71:49:b2:e4:5c:7f:d6:c9:03:c1:41:08:30:63:
cc:60:04:de:98:32:31:65:f5:39:ff:5c:5a:de:46:58:96:e3:
c3:01:4d:22:f1:4d:55:60:4d:d1:77:1f:0f:91:af:71:c1:e0:
78:d4:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:59 2025 by rpki-client