Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
File: 5FudrqoDQlXqMxFPWLiMHD48fK8.mft (raw, json)
Hash identifier: ESEzoRaDr/5Shty9t98/bQF8GvyxY2Kgcs/8U86XVLI=
Subject key identifier: E1:2C:C0:4B:54:FB:E2:32:29:FA:25:2F:A9:BE:17:09:AE:A6:B6:DB
Authority key identifier: E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
Certificate issuer: /CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Certificate serial: 0199FFFE5E14EE8824F61ADB8AD2A26A0946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
Manifest number: 0E2F
Signing time: Mon 20 Oct 2025 05:01:24 +0000
Manifest this update: Mon 20 Oct 2025 05:01:24 +0000
Manifest next update: Tue 21 Oct 2025 05:01:24 +0000
Files and hashes: 1: 5FudrqoDQlXqMxFPWLiMHD48fK8.crl (hash: xyfY8PU5+QqsHPN7VJr8OyqBtbv+CuWBmcRLnOSWowU=)
2: GzZOn0FMwyF0PqvIWI6Nnb-Vd4g.roa (hash: 5J/Uh3Vu4lMEWtHw6mjugw4/PpXu0iZuwIZUgCw3aCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:5e:14:ee:88:24:f6:1a:db:8a:d2:a2:6a:09:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Validity
Not Before: Oct 20 05:01:24 2025 GMT
Not After : Oct 21 05:01:24 2025 GMT
Subject: CN=e12cc04b54fbe23229fa252fa9be1709aea6b6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:45:1f:2a:a5:c2:04:10:59:9c:70:00:e3:4f:
1d:2e:fb:01:81:c4:08:80:50:a1:97:f8:0a:da:2f:
a6:bd:59:0d:c0:71:79:fa:fc:59:3f:ce:a3:4b:9d:
62:98:18:48:89:b4:09:6f:93:a6:6c:08:e1:f2:1a:
4a:2b:8b:fd:9c:1f:7f:13:f3:3b:64:da:c1:3c:03:
04:ef:73:7e:02:e1:0a:97:8d:a1:e3:ae:8f:8b:d7:
fd:72:c4:e6:59:5c:a4:b1:bb:d3:48:29:93:65:2d:
7c:e0:3a:3c:89:cf:81:bd:a8:ee:72:bd:75:ff:11:
fb:95:66:65:e9:0c:dd:be:54:15:cd:a6:bf:76:30:
f8:ff:22:51:e0:e3:47:a8:c4:11:4c:62:61:aa:f4:
a5:96:12:26:2a:78:71:d5:8b:65:eb:5c:a1:a7:ed:
51:28:be:0e:b8:e0:2d:c6:c2:ca:4c:cf:4d:93:48:
d7:2f:8d:d5:49:b7:5f:e8:77:4b:13:84:28:7a:56:
57:3d:a5:8c:78:2e:04:18:ad:28:46:55:2a:e1:50:
ed:03:1d:30:80:cd:da:bf:ad:17:70:08:00:79:14:
e0:04:7e:38:73:c4:99:53:bb:41:0d:c8:b7:da:d9:
8d:2f:dd:07:5c:85:de:df:cd:c1:f2:c9:a1:f9:2a:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2C:C0:4B:54:FB:E2:32:29:FA:25:2F:A9:BE:17:09:AE:A6:B6:DB
X509v3 Authority Key Identifier:
keyid:E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fe:21:17:8e:fd:a4:46:36:bf:5e:6f:eb:8c:c0:bb:a5:00:
e5:b1:d5:55:69:e9:95:1e:e3:86:8f:06:9d:66:98:9b:7c:be:
8a:b6:63:9e:f6:49:9c:87:10:91:35:a5:fb:88:99:7c:f5:99:
18:93:ec:7a:d7:9b:c7:dd:dd:e1:3d:b6:b1:f6:b6:0f:50:d3:
04:16:ea:6b:67:d7:e1:66:6b:27:f1:c2:71:fb:9c:36:7d:3f:
95:b7:fe:f7:5c:07:76:25:96:15:b1:dc:04:32:21:60:68:e3:
b5:e6:23:0a:4a:df:00:2f:a5:0e:0b:e8:cb:11:b7:ce:a0:43:
5d:f0:5c:89:8b:7b:f2:f7:0a:60:95:67:2b:20:d8:55:76:04:
58:97:33:02:2c:c3:6c:36:6e:54:35:45:1d:13:34:77:19:d5:
39:46:03:fb:f7:38:42:50:56:6f:40:af:e9:02:14:54:29:c7:
79:b6:64:f0:e2:ca:1f:9d:ed:72:1b:9a:15:49:69:d1:51:dd:
9b:df:b9:c4:7d:19:89:ee:f3:17:d7:2d:e1:96:75:a0:73:66:
a2:80:dc:74:97:50:6c:d1:5a:43:40:3c:65:1d:90:37:d8:25:
5c:39:cd:7c:3b:83:84:03:3c:9d:37:3d:d8:c8:84:fc:f1:c6:
16:ee:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:11 2025 by rpki-client