Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File: 00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier: bmiVbpRcddxp2//V26jUJc67c7hQMYxnM+zysbQvJH8=
Subject key identifier: 8F:81:FB:EC:5D:67:E5:7F:B9:78:5F:D0:BE:07:F7:4C:72:5E:34:E8
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer: /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial: 0199FEEB82C8FE7656B4483B7A5F5D3723C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number: 1130
Signing time: Mon 20 Oct 2025 00:01:11 +0000
Manifest this update: Mon 20 Oct 2025 00:01:11 +0000
Manifest next update: Tue 21 Oct 2025 00:01:11 +0000
Files and hashes: 1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: 0Z94YHBy78YU1d2XPjuSD/ve2A4kkxdsXuy/PF/2uP0=)
2: RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa (hash: OSpIkZE/LwbO5i/Rwo6y7sjYoRsMMhhcextuc6NzOpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:82:c8:fe:76:56:b4:48:3b:7a:5f:5d:37:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Validity
Not Before: Oct 20 00:01:11 2025 GMT
Not After : Oct 21 00:01:11 2025 GMT
Subject: CN=8f81fbec5d67e57fb9785fd0be07f74c725e34e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:a2:6c:e7:79:d5:5b:4e:e1:30:a8:0a:23:
8c:2f:c4:db:f8:c1:24:a1:4d:e1:95:f3:44:a0:47:
d7:ef:19:02:04:ae:aa:0e:92:c5:35:ce:dc:fd:da:
f2:1e:30:ff:62:75:8a:84:22:53:b9:f9:71:3d:10:
9d:a9:dd:3a:e8:6d:27:55:3c:e0:81:5b:4c:fe:4a:
20:f8:60:85:ad:56:67:55:61:09:e2:ed:69:f2:81:
ce:12:08:97:74:9c:da:a4:3a:3b:18:c3:d7:06:cf:
53:6d:ac:e9:55:34:fa:69:b7:92:24:4e:2c:e2:d1:
fb:32:03:14:9e:8b:91:0a:b6:7f:d9:ec:e1:04:f2:
5d:fd:cf:58:c8:18:94:d9:c1:67:f9:4b:4e:69:4f:
0a:20:11:d1:a3:bc:17:c7:82:3b:2e:42:98:d2:24:
8c:fa:21:c2:b9:12:9b:ab:96:53:e5:9f:f3:d8:e4:
35:bb:95:71:71:5d:8a:f2:f1:36:ee:54:9f:16:57:
b7:9c:e9:ae:71:fb:df:3b:89:75:ea:06:df:a4:5c:
2d:06:06:a0:8d:bb:55:f6:f8:56:36:44:bb:5a:ae:
e2:b1:8a:3f:a2:71:d7:68:09:2b:d1:84:9a:70:4e:
01:01:e5:43:a3:86:97:b7:3b:cb:b9:c2:13:9d:e8:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:FB:EC:5D:67:E5:7F:B9:78:5F:D0:BE:07:F7:4C:72:5E:34:E8
X509v3 Authority Key Identifier:
keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:0f:73:47:08:bb:05:3f:41:41:f5:3c:ac:e9:eb:2a:12:
18:30:cf:22:54:38:ac:f5:bc:5f:26:91:2f:5f:ac:73:79:02:
d5:44:2b:c8:3f:a1:2f:dc:74:a1:dc:b3:43:91:d2:17:73:70:
33:ce:ab:19:72:09:86:f2:a4:40:42:a5:3c:82:85:b3:21:12:
a3:5c:37:60:72:1a:2e:fb:b0:6a:d4:37:2a:62:5b:44:4b:20:
32:81:54:ef:15:26:1b:b8:64:e4:b8:5a:35:17:eb:2d:b5:66:
9a:bb:a4:25:7a:d5:60:54:a2:18:8e:e1:03:4e:47:e5:a1:04:
80:1b:2e:e9:0c:ed:5c:70:44:51:83:eb:de:29:d1:a8:f0:0f:
ec:c2:87:cf:54:b1:7e:c5:3b:93:cb:3e:08:1c:78:ee:a3:23:
8f:ed:f1:c9:a5:32:d5:e5:a2:d4:c2:03:92:94:35:82:ed:81:
d5:93:5f:d9:85:00:41:fe:84:64:de:57:90:f1:93:ef:22:5a:
12:6d:bf:3c:58:1a:95:da:c8:9c:80:fd:e2:9b:39:8e:eb:14:
45:fa:03:ef:d1:f2:5e:ed:11:f9:5a:a3:0d:16:2a:c5:8a:49:
73:3e:cd:8a:ac:ea:49:98:17:80:f6:12:52:ca:dc:75:82:4e:
29:99:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:08 2025 by rpki-client