Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: 5sacxqxj/YzP2SQXgMuaXB7fwiR+DhUePWPkR8V9/sk=
Subject key identifier: 8E:81:0F:79:5A:24:16:C8:CB:05:C9:60:A5:3C:A0:3A:30:BB:F5:5C
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 0199FDD9FFA29EE80FFC915AA9A35160A717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 0915
Signing time: Sun 19 Oct 2025 19:02:26 +0000
Manifest this update: Sun 19 Oct 2025 19:02:26 +0000
Manifest next update: Mon 20 Oct 2025 19:02:26 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: 7viu63ACYhnaBALZkYjXPN6fSiBF6X1isGkRnuzulZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ff:a2:9e:e8:0f:fc:91:5a:a9:a3:51:60:a7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Oct 19 19:02:26 2025 GMT
Not After : Oct 20 19:02:26 2025 GMT
Subject: CN=8e810f795a2416c8cb05c960a53ca03a30bbf55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:06:fd:f1:fd:0c:68:64:48:c2:7b:40:b5:
4d:cc:e9:e8:dc:b8:c0:cc:b3:c9:7a:e1:40:24:00:
98:7e:3b:7d:57:eb:89:c3:ca:cc:9f:46:86:bd:e5:
c5:58:92:de:6a:d0:dc:2d:7f:37:66:32:28:9a:8a:
75:2a:f6:2c:55:77:9f:d2:b2:a3:78:9e:a9:e6:c0:
3e:dc:91:d2:a0:a7:cb:cd:6d:b0:c7:b7:38:9d:72:
11:a6:fe:c9:cb:7e:0e:2e:75:4e:72:2f:a8:d2:68:
68:ea:a9:e7:c1:29:fa:ef:57:f9:6e:fa:d1:02:39:
c2:2b:07:5f:63:fc:6e:cd:62:d3:45:a4:31:af:4a:
d1:ca:9b:b2:58:85:59:78:9a:42:09:61:94:64:84:
fb:fc:d6:74:37:f6:89:9d:ec:2c:1c:3b:f3:e8:c7:
26:6a:87:e6:08:5e:bb:80:98:f5:a6:42:8c:fb:8e:
aa:58:46:48:3f:45:b7:40:21:7a:d8:4f:b0:cb:36:
f8:92:63:22:9e:bd:37:8a:78:8d:95:f6:49:7f:05:
60:dc:6c:7b:2a:8a:3e:b6:ce:35:83:a9:2b:cf:db:
60:69:8f:32:d5:61:f9:6e:76:e1:5e:f9:3b:4a:18:
a5:8f:93:c4:4f:fe:64:8b:a3:af:e9:d0:cb:14:bb:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:81:0F:79:5A:24:16:C8:CB:05:C9:60:A5:3C:A0:3A:30:BB:F5:5C
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:29:bb:45:95:d0:f8:e5:8e:ff:f5:c1:1c:c2:de:e3:a5:ca:
cd:81:40:a4:7e:ee:26:a1:97:43:2b:49:09:9a:43:3e:37:da:
cf:2c:0d:1d:ba:53:df:27:03:0d:35:20:01:9b:11:48:65:40:
06:fc:44:6e:3d:01:25:d7:a6:1c:9a:dd:f7:77:06:86:ed:59:
ef:8b:5a:45:62:d9:69:a6:4d:2f:d6:f1:16:ae:59:07:6b:7e:
45:a7:77:9c:45:9e:c4:be:58:c0:1f:44:f0:42:c2:8d:1c:ce:
47:25:4d:47:18:c3:90:52:fe:75:cc:a6:e4:84:3c:59:15:e1:
99:67:d9:d4:81:ec:0b:2d:80:26:a7:43:26:16:06:07:ba:4c:
1e:d8:e5:57:08:6b:75:cb:22:8a:88:38:7a:b4:74:08:e4:3c:
73:14:57:1c:2d:34:ef:ce:8c:81:dc:ac:f3:05:76:cd:08:81:
e6:c0:e7:e3:2e:82:24:4e:00:ec:73:d0:77:28:c0:11:25:f0:
f4:cc:dd:2a:06:28:78:b0:c5:c8:f3:b6:15:0a:74:f3:19:f1:
1e:9e:33:c8:a3:15:20:65:a9:a1:67:16:fa:d0:00:fe:a5:53:
e6:96:5a:78:77:95:ae:39:35:ae:b5:06:a6:35:89:88:26:e6:
e8:b8:fa:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92f+inugP/JFaqaNRYKcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzc0ODI0MzRhNDU3YjA0OGI3ZDYyNjFkZGQ4MDk1YzVj
MDkwMjAwHhcNMjUxMDE5MTkwMjI2WhcNMjUxMDIwMTkwMjI2WjAzMTEwLwYDVQQD
Eyg4ZTgxMGY3OTVhMjQxNmM4Y2IwNWM5NjBhNTNjYTAzYTMwYmJmNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshsG/fH9DGhkSMJ7QLVNzOno3LjA
zLPJeuFAJACYfjt9V+uJw8rMn0aGveXFWJLeatDcLX83ZjIomop1KvYsVXef0rKj
eJ6p5sA+3JHSoKfLzW2wx7c4nXIRpv7Jy34OLnVOci+o0mho6qnnwSn671f5bvrR
AjnCKwdfY/xuzWLTRaQxr0rRypuyWIVZeJpCCWGUZIT7/NZ0N/aJnewsHDvz6Mcm
aofmCF67gJj1pkKM+46qWEZIP0W3QCF62E+wyzb4kmMinr03iniNlfZJfwVg3Gx7
Koo+ts41g6krz9tgaY8y1WH5bnbhXvk7Shilj5PET/5ki6Ov6dDLFLvITwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6BD3laJBbIywXJYKU8oDowu/VcMB8GA1UdIwQY
MBaAFOTHSCQ0pFewSLfWJh3dgJXFwJAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUt
YzQ1MDhiNTU1MDcxLzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUtYzQ1MDhiNTU1MDcx
LzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCm7RZXQ
+OWO//XBHMLe46XKzYFApH7uJqGXQytJCZpDPjfazywNHbpT3ycDDTUgAZsRSGVA
BvxEbj0BJdemHJrd93cGhu1Z74taRWLZaaZNL9bxFq5ZB2t+Rad3nEWexL5YwB9E
8ELCjRzORyVNRxjDkFL+dcym5IQ8WRXhmWfZ1IHsCy2AJqdDJhYGB7pMHtjlVwhr
dcsiiog4erR0COQ8cxRXHC00786Mgdys8wV2zQiB5sDn4y6CJE4A7HPQdyjAESXw
9MzdKgYoeLDFyPO2FQp08xnxHp4zyKMVIGWpoWcW+tAA/qVT5pZaeHeVrjk1rrUG
pjWJiCbm6Lj6Zw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:28:04 2025 by rpki-client