Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: A+9KOtiEoJ7wUZPFG55KxKimBn3OBA7HKdXfghLJzL0=
Subject key identifier: 1E:6B:CA:80:B6:0F:27:C6:D8:A1:1F:31:AE:E8:B3:F1:DE:65:3F:1E
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 0199FB0F2083FFFE75BF0D6038A18C354B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 0510
Signing time: Sun 19 Oct 2025 06:01:36 +0000
Manifest this update: Sun 19 Oct 2025 06:01:36 +0000
Manifest next update: Mon 20 Oct 2025 06:01:36 +0000
Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: dQmkeggfKa/O5ft6ci0/GCgfdYQa2xI4wzpnEcU+qZA=)
2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:20:83:ff:fe:75:bf:0d:60:38:a1:8c:35:4b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Oct 19 06:01:36 2025 GMT
Not After : Oct 20 06:01:36 2025 GMT
Subject: CN=1e6bca80b60f27c6d8a11f31aee8b3f1de653f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:5b:64:06:57:0e:a1:df:00:e8:da:84:51:
c0:55:e3:1b:4e:13:ac:81:5b:2e:a9:61:0d:2d:02:
81:72:e7:be:8d:a5:78:cc:de:63:d3:96:80:c4:8f:
46:59:b7:f8:e4:7f:03:f2:0f:a2:26:6d:16:1a:c3:
8c:32:d1:1c:ad:4a:42:f9:bb:92:c8:d4:13:35:24:
58:62:28:85:47:34:9b:f1:70:21:9a:60:3d:4b:ad:
98:b0:04:ce:f9:e5:0c:8b:a6:e5:12:32:62:a2:d2:
61:d6:d4:36:7e:01:0e:f5:a5:eb:44:25:43:8a:b9:
8d:a4:90:24:02:91:8f:d0:c8:01:3f:ca:d3:e3:19:
f5:74:d2:ef:66:0b:e6:2a:2c:85:29:93:4a:b3:9d:
1e:6a:3e:b8:e4:f0:8a:b0:89:15:83:83:19:cf:b1:
b6:87:de:ee:e6:f5:10:68:b6:22:ac:5a:ac:fa:ed:
93:f2:e4:07:30:2a:2d:22:10:40:3f:b4:42:2a:2f:
c8:50:88:8b:93:3e:38:09:61:dc:e4:70:21:81:1f:
75:af:30:77:43:d7:cb:20:81:f0:0f:73:c7:23:2f:
b5:84:11:32:1d:7f:7e:c6:5b:5d:cd:0c:e8:8c:83:
b0:f3:a0:17:b4:a0:a5:f2:e7:17:07:e7:fe:fc:fd:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6B:CA:80:B6:0F:27:C6:D8:A1:1F:31:AE:E8:B3:F1:DE:65:3F:1E
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:50:57:a0:7f:4b:1b:48:0f:51:0d:9a:e4:9d:5c:44:a2:
4f:40:73:55:41:54:ff:ef:af:1a:d7:32:94:fc:a6:3e:b2:fe:
ca:c4:4b:1f:96:9c:8b:b8:b6:6a:58:4d:d3:78:5b:9f:0b:d4:
ff:3e:12:18:98:d6:49:1f:19:09:06:08:17:c2:f4:38:14:c7:
b3:cd:aa:e4:0d:81:a3:9f:3b:1f:90:dd:e3:ff:32:65:39:7e:
2d:6e:80:4f:8c:0c:23:9a:41:8b:13:89:ab:e2:f5:cd:d1:ea:
6a:18:e2:d1:14:d6:6a:54:ae:4e:1b:97:58:09:9e:05:94:ef:
4c:90:2b:09:b7:6c:41:bd:43:24:8e:ff:df:e6:58:3e:ad:cb:
bf:e8:9e:8d:b3:43:0f:c5:3f:e0:fb:1e:32:a6:89:4d:d6:73:
28:1c:67:c0:57:a0:5e:ca:15:24:ab:39:e7:65:fc:17:6f:6f:
47:c5:80:50:e6:91:c7:16:f5:59:72:b8:f8:7f:93:7d:b4:40:
6e:a0:43:76:b7:cc:05:9a:94:50:ff:56:c7:8d:5e:06:4b:4f:
b9:8a:b4:4f:65:b9:b1:a0:fd:82:c0:e3:d0:be:24:9e:15:42:
72:dc:60:74:b3:ac:85:c5:87:e3:96:d6:c3:ce:2d:62:79:7f:
f2:f5:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:31 2025 by rpki-client