Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File: 5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier: Tu1QJDqBKkK7iwJ2fhdtjxKacHXQslCqRaJarPopTHs=
Subject key identifier: A7:2B:E2:EE:BE:B9:58:8D:D4:BD:E8:98:A7:25:C3:A2:9C:37:CB:EB
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer: /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial: 0199FBEB757BD76C00CCFA5C46FFF4D1A43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number: 1670
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: mDWcJhxvbNsKDiTnKwA2xO9P/dJqZXiKLLPGlIaEEVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:75:7b:d7:6c:00:cc:fa:5c:46:ff:f4:d1:a4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=a72be2eebeb9588dd4bde898a725c3a29c37cbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:27:6a:59:ae:82:f6:88:1d:4e:cb:79:b7:
ba:9c:54:64:c9:0c:d5:e4:f0:b4:41:a1:4e:e3:fd:
e3:ff:10:c0:f8:1a:6d:ca:d6:09:cb:73:a0:ee:55:
39:e2:df:50:f0:a3:fb:8d:6d:13:54:61:f6:f0:27:
ef:1e:5a:25:74:6a:df:a8:54:7a:57:db:4e:ec:92:
db:47:bb:56:79:95:d9:9a:b0:ce:9e:58:54:6b:7c:
f9:0b:ec:be:b5:72:35:a5:ff:e9:e0:2d:d0:d9:05:
68:a1:58:e4:e9:b7:a7:73:7d:3e:ff:67:13:d6:9a:
a2:37:37:63:6e:35:00:7a:06:ff:d1:fc:40:3b:00:
de:aa:eb:f3:b4:92:f2:9c:aa:f7:0a:96:c7:b6:50:
f5:b9:a3:01:5b:b7:31:a9:7a:25:fc:0e:f1:1b:ff:
ca:d7:73:fb:3b:bc:49:02:b3:f6:58:f4:ed:4e:22:
f7:a9:71:3f:a6:6c:74:7d:39:98:ab:29:1f:a6:43:
51:36:ac:65:7a:53:8c:4f:7c:a4:f8:7c:74:62:38:
c3:4a:1b:59:31:73:fb:80:77:05:86:a9:8f:e9:c3:
2a:f4:4f:a5:31:3c:24:b2:a2:01:64:fd:52:34:35:
48:61:79:e2:19:55:ab:b1:e1:cc:79:4e:92:8b:d5:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2B:E2:EE:BE:B9:58:8D:D4:BD:E8:98:A7:25:C3:A2:9C:37:CB:EB
X509v3 Authority Key Identifier:
keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:76:cc:9d:f5:af:07:b1:42:89:25:d8:28:1f:70:90:1f:d2:
f5:23:dd:52:d4:2e:e6:ce:ae:5c:23:ad:41:9e:eb:f9:16:86:
f2:cd:c7:85:b8:10:00:3f:3f:79:ff:34:e4:80:94:10:b1:50:
7b:4e:92:b6:1e:07:2d:b2:64:4f:08:4e:4b:1f:07:30:3a:81:
f5:19:3b:d1:62:2d:9a:89:f7:24:04:f2:31:14:5e:e2:ed:0d:
57:d1:b4:bd:89:5e:a5:ad:15:50:b1:92:cd:8b:b7:8b:01:87:
3d:3f:36:c7:a3:3f:ae:77:49:43:8a:24:5b:0d:4b:1b:a9:7b:
aa:76:99:2b:b4:74:ff:76:04:ba:70:e0:7e:4e:98:1b:1d:d2:
60:02:7e:13:6e:30:5c:6f:df:4c:5a:3b:ef:ad:ed:e3:c1:25:
a1:ea:1b:b5:7b:44:15:63:4f:4d:57:1b:0a:40:e7:6f:28:0b:
47:85:4d:49:d8:1f:e6:cc:97:17:2b:d9:87:d0:5a:50:66:8c:
91:df:aa:2d:3e:63:da:c2:1f:7b:37:aa:de:b6:44:1c:1f:55:
42:f0:61:de:e6:ac:e1:3e:2a:dc:0e:79:5f:ad:5b:4c:2e:2d:
b8:11:76:2a:33:a0:5d:47:de:c9:61:f3:4c:bb:55:6b:83:40:
d6:b6:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:00 2025 by rpki-client