Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
File: J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json)
Hash identifier: 93QtvCYcySrOZdkbK8tSNwIaeCazWYnRxXgSlQjM9zY=
Subject key identifier: B5:C5:04:6C:D4:70:0C:87:E3:4A:3E:93:0E:89:1F:68:04:20:8A:1A
Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d
Certificate serial: 0199FCC62547AA3B59DA8C7623DEF4FCB5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:08 +0000
Manifest this update: Sun 19 Oct 2025 14:01:08 +0000
Manifest next update: Mon 20 Oct 2025 14:01:08 +0000
Files and hashes: 1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: yfBbY3VAYhnfg+Px5Ffrn4TzszQmphSJz2uOwKjWWkk=)
2: hTYp4tVFk2Iv0MXe_TkiKDxhHf0.roa (hash: 6GO6BRanOpSP6VfdzTHxANKln0jgA0SAFTnzf0Z3Hfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:25:47:aa:3b:59:da:8c:76:23:de:f4:fc:b5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d
Validity
Not Before: Oct 19 14:01:08 2025 GMT
Not After : Oct 20 14:01:08 2025 GMT
Subject: CN=b5c5046cd4700c87e34a3e930e891f6804208a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:2b:16:25:40:6a:ab:22:bb:6f:68:0c:e7:
1b:93:67:bf:70:1e:f2:f3:d4:f6:eb:f8:4a:06:63:
b2:5d:a2:24:cc:d6:4d:53:b3:07:c4:cd:ab:b1:61:
12:77:35:ef:ef:ad:80:7e:a7:d5:78:55:21:f8:e4:
0c:ab:fe:aa:f0:7e:41:d4:3c:4b:a7:4c:96:9c:27:
b1:99:35:1f:81:92:da:41:27:bb:e8:66:08:cb:61:
1a:53:ba:2b:74:a9:8a:96:35:12:6d:b4:96:81:e9:
e1:70:b2:9d:95:ba:37:dd:99:0c:c2:00:67:91:17:
f8:a2:08:0e:b1:b3:2c:c8:3a:6d:45:db:25:ed:73:
3d:31:67:1e:bb:40:21:75:b8:c0:9c:50:33:8a:c7:
6b:df:a4:99:98:dd:5d:b2:fb:07:e3:16:ad:f2:b2:
bf:3a:90:f7:e8:9f:1f:e1:96:43:17:cd:2a:ce:17:
b1:e7:cf:b3:00:56:e6:18:ed:7e:1b:fe:a6:95:a2:
11:e3:b1:4c:b7:ce:de:1d:e1:d6:cb:86:0b:4a:2e:
d2:f5:38:94:16:d8:b1:a6:fd:a0:c3:70:d8:32:9e:
b2:61:ed:7d:5d:c8:a1:04:e9:25:0a:56:eb:c8:a8:
94:73:01:29:41:ed:cb:0b:c3:3e:a3:8a:fe:c6:41:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C5:04:6C:D4:70:0C:87:E3:4A:3E:93:0E:89:1F:68:04:20:8A:1A
X509v3 Authority Key Identifier:
keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a6:bf:e4:83:1b:d7:5e:84:15:ac:70:7b:5b:c0:ad:63:0b:
01:d1:ec:78:6d:e1:87:9a:3b:2d:07:cf:d0:06:b9:e4:18:c4:
27:d8:c6:2c:ca:64:21:82:fd:21:52:9c:b4:16:5c:99:b4:37:
19:70:c4:e3:7d:1d:9c:38:78:4e:c5:38:e9:b6:08:21:89:eb:
10:e5:42:1b:f1:a5:61:29:38:20:c3:5c:e9:54:ae:94:35:32:
81:30:90:a0:fd:c5:ec:53:1a:e0:03:a5:90:6c:88:62:48:65:
eb:78:88:53:ce:3f:5e:50:4e:17:c3:96:2b:79:85:f2:c7:45:
50:c5:93:7d:d2:f4:83:c4:66:e6:23:69:17:8b:49:cb:e0:06:
ab:96:42:fd:da:18:ff:43:fd:2a:45:05:d3:d6:11:d6:b3:7d:
2c:1b:d7:96:98:e9:98:67:41:58:2d:9c:b0:76:c5:de:8b:d9:
2b:3d:22:54:43:e9:b2:55:fd:bf:88:1c:25:7b:1e:69:08:32:
c7:c6:75:df:df:b1:7b:6f:3a:1e:bd:bc:22:08:7a:4b:76:96:
6d:41:6c:6a:dd:67:98:11:7d:c9:02:85:41:de:30:b7:1d:71:
fe:f7:f8:9e:5e:69:e4:eb:45:f0:fb:3d:0b:11:05:ef:ba:a2:
f1:d5:bd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:28 2025 by rpki-client