Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier: gv9IXAgL9aR0oxZ9e6d7WMwAPwyPL+9QGDJTbiNAwoU=
Subject key identifier: 34:09:DF:15:60:D1:AB:8C:08:D5:72:55:41:13:FC:F9:D4:45:23:AE
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer: /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial: 0199FE7DB802B4CA0F80E6D5DA40671CF07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 22:01:15 +0000
Manifest this update: Sun 19 Oct 2025 22:01:15 +0000
Manifest next update: Mon 20 Oct 2025 22:01:15 +0000
Files and hashes: 1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: hhY649T6GQu7PGRuK1uBmi1erA8o2NQqnrMlD9n62J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:b8:02:b4:ca:0f:80:e6:d5:da:40:67:1c:f0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Validity
Not Before: Oct 19 22:01:15 2025 GMT
Not After : Oct 20 22:01:15 2025 GMT
Subject: CN=3409df1560d1ab8c08d572554113fcf9d44523ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:97:5d:5c:24:39:a1:69:ad:5d:14:4a:5b:
65:c2:63:ad:eb:51:bc:d6:ce:55:9e:f2:b4:75:08:
51:ae:cc:34:76:35:f1:2e:af:1f:af:0e:c2:0f:93:
77:29:da:dc:74:af:a2:59:46:aa:fa:da:aa:ba:8d:
26:cf:7d:8c:bf:13:d4:c5:c4:3f:6b:58:89:a7:1c:
11:d6:13:98:49:c7:3b:75:b2:6b:14:7d:84:d2:5c:
cc:67:7f:bc:01:1b:d4:21:7f:b2:85:fd:d1:28:22:
53:8b:07:36:67:d3:8e:30:c5:eb:5f:b2:d5:22:90:
4e:48:13:db:1b:ae:71:e6:e2:3a:fc:72:04:b4:33:
31:4e:b0:0a:da:ed:a6:ad:37:b7:96:fa:f5:31:aa:
d3:80:ea:74:6c:14:ef:b2:29:f8:85:af:3f:17:71:
36:44:b1:ee:5f:3f:d3:80:56:a9:32:8f:07:f1:10:
54:d3:7e:90:9c:87:4d:88:90:47:49:57:5f:83:36:
98:bd:2e:4a:ee:82:85:90:df:d0:a1:c0:33:ef:df:
8f:cc:08:e8:d0:9c:fb:c5:71:c4:b3:95:c7:aa:a3:
7b:80:bb:7c:bb:3a:72:82:09:e3:40:88:0f:ce:3f:
50:f2:c0:47:f9:33:f6:1e:e4:47:4e:5f:2c:83:a9:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:09:DF:15:60:D1:AB:8C:08:D5:72:55:41:13:FC:F9:D4:45:23:AE
X509v3 Authority Key Identifier:
keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fd:8c:cf:4f:c6:94:ed:35:4c:b0:0a:9e:91:4d:b5:0a:4e:
2f:55:d4:e6:32:8f:3b:91:7f:31:f3:bf:c5:8d:8c:cc:ef:0d:
dc:20:a1:e8:cc:33:5d:cb:87:e4:16:e0:0e:7d:a2:b0:47:80:
8b:71:47:02:9f:5a:e4:7d:b8:c8:69:f1:59:d4:d2:f1:3e:8a:
3a:a7:10:f5:8d:5f:9d:ef:16:2c:f5:ff:65:81:a8:f0:b5:0e:
ec:ea:68:7e:3d:ba:f7:45:eb:a1:d1:de:07:b8:84:61:54:86:
f5:5d:e0:8b:9b:39:ee:42:0d:da:af:7d:dc:d9:33:a7:df:be:
b4:3b:45:73:da:dd:52:79:5f:55:df:d7:d9:6f:60:eb:e1:42:
01:be:59:0d:5d:ca:41:e7:94:51:d1:fe:07:89:76:98:42:8e:
14:90:c7:27:49:48:2b:19:d5:02:68:e7:83:c2:2c:0a:6c:dd:
05:70:6d:13:74:18:5d:7f:5a:70:16:50:96:d5:13:d6:30:58:
5c:ee:29:7b:e3:0f:c1:c8:f8:33:be:bd:2e:46:7f:2d:8a:de:
73:ca:e9:88:7a:b2:33:9e:8e:d9:ee:03:7d:9d:71:d2:f7:80:
5f:12:d4:0d:66:41:4f:ad:d3:e4:08:d6:5f:d9:66:6d:6d:87:
88:04:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:16 2025 by rpki-client