Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File: 5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier: IpYpKg0sV6gymuoDq788hWEnMu7IZVa4r1YFFivCupc=
Subject key identifier: AA:20:2D:68:66:85:AF:34:0A:67:06:F2:21:46:7C:F0:D1:AD:72:77
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 0199FE7E02C2141F5F6FE027AF06221B78C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 22:01:35 +0000
Manifest this update: Sun 19 Oct 2025 22:01:35 +0000
Manifest next update: Mon 20 Oct 2025 22:01:35 +0000
Files and hashes: 1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: OkO0CxhP2OnKlC6Ex+qUSDRr9btGzUyyG7LllmWFQ3w=)
2: 8liaJL0g-7zotMbXe_sm2ys9BE8.roa (hash: 30a8wxGDwl2f7yhZhDFSqSXr3+9jtWYD0pYLCfzDZkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:02:c2:14:1f:5f:6f:e0:27:af:06:22:1b:78:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Oct 19 22:01:35 2025 GMT
Not After : Oct 20 22:01:35 2025 GMT
Subject: CN=aa202d686685af340a6706f221467cf0d1ad7277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:e3:50:7c:b9:bf:a9:6c:dd:01:04:44:04:
29:1c:a4:21:2a:6c:ea:c1:39:5c:7c:89:6e:9d:23:
83:f5:cd:c5:2c:d3:e5:1e:59:f0:37:4e:21:16:30:
93:09:3e:55:ba:f5:05:d2:17:91:52:80:6f:a8:ac:
83:97:18:2a:29:0a:17:dc:d8:2e:99:45:0f:1a:42:
6c:ca:96:9b:1b:96:78:a7:43:33:93:3d:65:14:58:
c3:0c:b1:1b:49:a4:ad:4c:26:23:c4:f3:91:8b:1a:
0c:4b:80:c3:f1:86:f0:ad:19:06:fd:f4:de:cd:91:
eb:2b:2d:06:a5:e9:c1:ce:72:9d:dd:bc:b3:ac:c6:
3e:37:e9:2a:77:b9:93:c3:f5:81:fc:3e:d0:0a:5f:
97:9a:53:49:76:f3:79:01:a7:fe:8e:1b:6f:22:ee:
ab:16:b7:8a:b3:7c:32:89:6c:22:1e:95:bd:79:1e:
78:76:8e:ce:60:10:38:be:a0:7f:97:f4:ac:80:9e:
54:05:43:a0:e2:74:db:e7:e9:61:8c:9d:6c:7e:f2:
2a:01:3f:67:1f:51:91:b5:91:78:d8:bc:d2:00:1b:
6d:47:11:40:9a:54:25:f3:86:83:f4:e5:1f:2a:1c:
89:7f:c9:54:44:2a:51:44:a9:dc:d2:47:ab:89:6b:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:20:2D:68:66:85:AF:34:0A:67:06:F2:21:46:7C:F0:D1:AD:72:77
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7c:de:90:49:a6:85:e1:50:8e:2f:49:88:6b:36:5c:35:e5:
64:51:9a:00:07:7f:b9:ed:02:cc:34:67:5c:ad:8a:75:43:7c:
06:e7:e9:ee:87:02:82:91:89:31:40:ea:82:69:c9:d4:92:81:
10:d3:2b:bf:3b:c8:1e:50:96:d4:c5:96:43:bb:ed:37:71:3d:
24:88:a7:e7:e7:65:34:1e:22:1b:8f:fe:fc:ea:cb:96:50:cf:
7f:da:51:70:08:42:32:ba:bc:39:f3:5f:a2:c9:ba:28:c4:59:
0a:a0:a1:0e:c1:60:1c:3d:ff:05:82:85:12:2d:98:2d:37:cd:
e2:aa:19:ff:e1:44:d7:e6:b2:b0:9e:70:db:d8:c1:11:00:2e:
b4:21:17:37:df:38:25:5b:a9:47:3e:e5:df:b3:00:87:f4:94:
bd:78:25:88:57:ef:e8:6a:f9:fd:a6:0f:f2:aa:87:96:0a:14:
65:32:0c:61:13:01:18:e9:5d:95:00:fa:e7:68:4d:b3:de:73:
47:6b:65:83:ee:43:da:07:d1:51:41:7a:34:2e:d4:e4:a5:e8:
6f:ff:34:f5:a1:32:c1:a2:21:6a:15:ad:7a:0e:93:0d:82:8e:
af:62:e8:e4:22:c7:9e:37:ea:ba:d6:c2:fa:20:8b:df:56:3f:
a9:91:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:48 2025 by rpki-client