
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File: I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier: T5CXt5KCiZxkcTSXD6w8gzLAeb7mkShNFokhtdm/f0s=
Subject key identifier: EF:FD:5A:77:28:CC:FA:E2:FB:C1:41:4F:D1:8D:CC:D9:1A:F4:98:3D
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 0199FBEB7F02E0F38A4F585E841CD007C784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: Hm930rHmOE7s7n7FqRAlqjHKtpChCfNP/AeSgpTwEj8=)
2: cEnlNHZ35kSVNo2T27Ex45pap18.roa (hash: q/g4pWJ8XYH4irxAQK7i5w/oElgLduGOhld/VI56BOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7f:02:e0:f3:8a:4f:58:5e:84:1c:d0:07:c7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=effd5a7728ccfae2fbc1414fd18dccd91af4983d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:b0:38:d1:c1:b9:e0:56:db:de:3b:8f:6e:
7f:0f:a2:9d:8b:5a:f8:61:9b:1e:5d:15:de:ec:70:
f2:1f:4f:d1:c4:99:06:d4:92:46:69:c0:3b:59:98:
e9:74:2b:c5:d8:b8:1d:cd:bf:26:39:27:db:3d:ae:
8d:de:d3:64:d1:58:44:b2:61:57:55:95:a9:7c:64:
e1:b7:65:8a:60:96:dd:38:ab:60:c6:a0:24:2e:a9:
be:58:26:7e:d4:28:cb:40:89:34:e6:5b:d6:4e:b6:
18:a7:6b:6c:14:88:d7:53:a2:88:2a:a2:88:d1:fb:
3d:f6:1e:a9:fb:ee:7a:e4:14:e3:c0:b8:3c:95:be:
51:10:7c:b8:66:77:09:11:b3:22:90:87:0e:38:f4:
af:87:1a:38:2b:c9:40:69:73:dd:7d:b2:5b:1f:f0:
eb:d6:d0:e4:6e:a0:51:3e:5a:9f:32:4d:16:e8:49:
85:28:dc:04:3e:56:3a:39:ba:63:18:98:1b:31:d4:
d6:e9:4e:76:fc:66:f7:ee:0d:63:06:2f:be:92:8f:
65:36:56:b1:6f:1e:25:1d:67:11:c6:4b:ac:2a:9a:
22:ae:82:0a:e9:6b:d2:f5:c9:c5:27:2a:87:e2:1e:
46:f9:18:b0:96:4d:dc:2b:d5:54:14:09:d1:33:fc:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:5A:77:28:CC:FA:E2:FB:C1:41:4F:D1:8D:CC:D9:1A:F4:98:3D
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c4:3f:ad:06:3e:f9:c4:2b:92:cd:a1:d7:80:56:94:82:b9:
af:ce:46:41:15:58:96:bb:b3:67:06:89:e3:f9:5c:0c:23:fb:
6f:62:da:9f:ab:dc:e9:9d:99:e4:2e:6b:2b:3e:6a:73:4b:3c:
96:72:0a:f6:b3:71:5e:e5:bf:64:75:12:54:05:06:71:80:17:
88:c8:fb:a1:72:06:38:70:17:09:39:4a:b4:7a:e1:f4:65:29:
e7:17:4d:97:d5:0a:61:79:16:b7:08:0c:fb:12:e9:45:3c:bb:
4a:db:92:fc:15:43:c3:77:18:46:3b:f6:7b:9c:a4:34:ea:02:
7b:cd:85:cb:c7:82:63:a9:67:ea:23:4e:de:b7:09:e0:0e:41:
a9:7f:37:82:13:f8:aa:cf:58:e7:ea:50:f3:90:b1:e7:3e:c7:
dc:d5:ac:75:75:f1:e1:75:fc:7b:10:96:45:f0:8d:ad:9b:75:
01:09:cd:6e:65:b6:c2:04:cd:8c:fa:04:e4:61:bb:f6:d6:14:
2a:82:97:87:70:58:c8:43:30:c7:80:04:32:95:a1:9e:ab:dc:
30:05:ee:cb:59:ee:27:05:04:7d:a5:88:9e:94:98:bf:fe:96:
72:86:c1:33:e3:f6:37:bc:fa:b0:89:4c:c8:7b:55:57:43:6a:
1a:c3:26:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:57 2025 by rpki-client