Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
File: 5UhKt1Cby72jUeIACRdC1DNms0c.mft (raw, json)
Hash identifier: dQaNGIYusi8XGfDNJkDBsX22GNQEOOWhWyiUh6TboUQ=
Subject key identifier: D5:DC:78:7A:CC:4C:EC:C3:3C:2A:EE:46:72:CB:7B:5A:A8:F9:27:17
Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
Certificate issuer: /CN=e5484ab7509bcbbda351e200091742d43366b347
Certificate serial: 0199FC21B92664F998299FE1A53CD8E13DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
Manifest number: 123E
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: 5UhKt1Cby72jUeIACRdC1DNms0c.crl (hash: LCjB2AkW47CxxdfagxAWkt4TWCGYuJT1g79fxJJyDQY=)
2: wJBjAczRrgGosNqanCxFfo-dFjI.roa (hash: cA7B9NV3PGLqMbvMdkJgYrBm37cd4VUUTrn9CCk7CJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b9:26:64:f9:98:29:9f:e1:a5:3c:d8:e1:3d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=d5dc787acc4cecc33c2aee4672cb7b5aa8f92717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:97:f8:17:65:b7:22:a2:cd:4c:44:c9:47:
a0:4b:5b:87:9e:2e:4d:4d:ac:a6:26:de:cc:ba:05:
27:4a:e3:69:f5:0e:bd:13:6a:1b:ff:9e:a1:3a:0a:
41:e3:37:fa:ed:b8:16:f2:bc:dc:a0:33:df:9f:54:
86:fa:67:77:0c:86:a9:9c:b6:36:da:a1:8c:34:3c:
b4:c0:f3:88:16:b4:b6:ac:d7:d9:a9:d7:03:a5:40:
61:f7:22:1d:a1:3a:0f:02:22:9e:07:15:3a:08:40:
e3:da:61:2c:c8:5e:e8:a3:c4:ab:fb:14:61:7c:59:
e3:b5:54:fc:97:b5:48:cf:7b:65:c0:af:80:74:a0:
7c:3b:6d:98:1c:55:72:7d:6d:b2:e1:b9:ca:88:4a:
b9:30:f6:d3:27:d6:ea:1b:46:90:71:a9:6e:28:7b:
2c:c7:3c:22:1c:70:a1:af:80:b7:f5:8d:4d:e8:df:
d9:ce:e3:64:65:60:76:25:5a:c2:43:0c:f0:a9:bc:
4a:d9:34:84:df:2b:66:a1:78:de:a0:e1:19:bb:3b:
7a:22:57:3a:dd:a4:37:a5:0a:db:57:25:6e:56:89:
99:f9:ef:03:89:85:74:f8:35:f4:59:f4:a4:99:cc:
cb:ac:0f:de:a5:68:13:e1:74:f9:9a:5f:f4:52:cc:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DC:78:7A:CC:4C:EC:C3:3C:2A:EE:46:72:CB:7B:5A:A8:F9:27:17
X509v3 Authority Key Identifier:
keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a5:05:82:64:9e:4a:a6:e0:00:56:39:7a:92:0e:6c:f0:49:
7e:45:ae:86:24:e1:fb:2e:47:8e:8e:66:ba:60:63:91:48:46:
13:5b:25:06:fc:99:54:ed:4d:44:a4:02:be:29:d8:4a:bd:76:
cf:51:bd:7e:15:d6:fd:7e:91:42:a0:fc:e2:91:91:92:32:9e:
40:8a:1c:a7:9a:d0:e2:28:eb:6f:ce:c4:e0:d7:92:29:db:ee:
09:8b:1d:3a:da:18:4a:9e:8f:ac:1e:83:98:5d:88:e0:42:03:
54:f5:b0:1f:4b:b5:45:37:a9:d6:eb:97:01:04:1b:e3:61:1f:
9b:cc:36:58:b6:34:71:16:c4:0b:ea:06:99:30:af:2b:f0:fa:
1f:6d:5f:47:ef:79:a4:10:af:ec:93:3f:3c:c9:f0:e0:85:2f:
06:e8:8c:06:fe:f6:fb:7e:b5:72:5c:7d:ef:12:0e:5a:88:e7:
16:b2:1b:8c:68:fe:dc:b7:99:ec:b9:2d:70:74:79:c8:88:43:
46:60:da:6d:27:92:f8:c6:b9:98:f7:03:86:30:a0:ba:df:55:
bd:4b:1c:b5:36:90:d6:2f:b3:61:ce:eb:5e:da:a6:ad:2b:7e:
12:fb:6e:5e:44:cd:63:fb:da:12:d3:6c:b1:dc:99:90:9c:9b:
82:2f:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:38 2025 by rpki-client