Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
File: 1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json)
Hash identifier: fBMBF9zO3FHnTnY/PSVnE165I/XDllY/7frk0RwzVK0=
Subject key identifier: 5F:AA:31:FD:8E:7E:BE:4D:AA:3F:4C:19:89:CF:5A:01:FC:8E:A3:F2
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial: 0199FCFD19D3CB53CA688E31F479C746C328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
Manifest number: C5
Signing time: Sun 19 Oct 2025 15:01:09 +0000
Manifest this update: Sun 19 Oct 2025 15:01:09 +0000
Manifest next update: Mon 20 Oct 2025 15:01:09 +0000
Files and hashes: 1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: Nr0fxuZEHQVfuqWsxy3qrHDBimzlw12kjKtDAmjHDj8=)
2: qoiIuGZpsZyjR8YLAPW0kfgioQM.roa (hash: Bdnsy6A3scDmTAkeEHQfOrfRTQ0txD1RF6hmP7OF1Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:19:d3:cb:53:ca:68:8e:31:f4:79:c7:46:c3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Validity
Not Before: Oct 19 15:01:09 2025 GMT
Not After : Oct 20 15:01:09 2025 GMT
Subject: CN=5faa31fd8e7ebe4daa3f4c1989cf5a01fc8ea3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:31:9b:17:9d:56:a0:28:c3:22:5c:60:40:
54:94:a2:4e:53:c0:8d:23:8a:9f:5b:4b:08:4c:9e:
55:32:c9:fa:88:eb:f6:87:47:69:68:d3:33:6a:8e:
f2:21:ef:68:f4:17:92:63:cf:d5:3d:df:fc:50:7b:
56:3a:a8:fc:eb:5c:93:48:a1:11:f1:f7:d6:f8:e1:
11:f3:84:23:62:81:7d:45:0e:69:0b:b9:aa:82:b0:
02:fd:b6:64:9e:61:0c:7d:70:a3:63:d7:d6:44:c8:
c8:60:cd:a8:7b:40:31:fa:88:a8:72:6f:40:93:ba:
0f:b3:5c:9e:d1:ca:9b:e1:30:65:aa:33:ca:de:84:
b5:58:e7:fe:c6:0c:cd:d5:26:d6:3e:4b:2f:e5:4f:
a1:7e:09:c3:7f:71:f5:af:8e:44:62:18:b8:d8:c8:
3f:41:a9:b4:d3:e8:7b:94:71:95:94:e4:03:8b:69:
84:d9:b1:d5:37:f8:a0:5c:b9:fb:26:14:6f:0a:9f:
ad:1a:f7:40:50:30:28:3d:60:8d:5a:53:5f:a3:03:
55:d5:5f:cf:c1:d9:84:56:69:8f:e9:f8:fd:ec:9d:
9d:f1:7c:7a:b2:ba:87:69:1e:1a:37:e7:96:a8:0f:
87:e6:50:14:00:43:9b:a8:47:c5:62:cd:f8:3b:75:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:31:FD:8E:7E:BE:4D:AA:3F:4C:19:89:CF:5A:01:FC:8E:A3:F2
X509v3 Authority Key Identifier:
keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b2:77:f2:78:01:f5:2c:66:1f:27:15:a3:bc:7d:2c:98:84:
a9:70:cc:d0:8a:d8:1b:de:70:7c:99:6e:06:40:6f:02:14:20:
77:b7:57:e2:45:c4:21:95:d6:b9:df:c6:ac:f0:1f:20:cc:10:
42:5d:90:e1:3d:ab:d0:f7:6d:71:87:5b:c1:8f:72:ed:fc:49:
6d:51:1a:5c:5b:bb:3c:0f:7d:b5:4a:7c:07:f5:2f:1a:d2:cc:
29:11:4a:27:b6:97:b6:96:d9:2b:49:df:4c:af:ad:8b:54:a7:
27:b2:12:30:ff:1f:41:2d:76:5d:3c:a8:f6:3f:0d:23:ac:77:
0a:8d:e7:3c:3b:4a:e3:00:39:85:1d:49:e9:32:b3:ca:a2:c7:
9a:64:03:ed:dc:01:4d:60:9f:e9:e9:65:7c:4d:5b:04:35:b5:
b0:70:bf:5d:da:13:7c:cd:68:ab:48:6f:a3:d8:a6:d9:fc:37:
95:dd:10:ae:25:d0:01:8d:1a:9e:a8:10:0f:7e:1e:a0:12:5a:
48:1a:01:1b:94:9b:30:c6:2a:ec:68:8a:57:d3:ae:df:04:4c:
01:57:35:6a:34:9f:d5:70:c1:f8:8e:34:ff:58:e4:d7:81:51:
82:a2:38:ed:86:8e:38:47:09:68:0a:2b:68:00:46:cd:63:7b:
ea:9a:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:36 2025 by rpki-client