
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier: Hu2QNROOolRCM2uf0lHm5S6LFlMTwFK2n4gpL3EVYUY=
Subject key identifier: 50:57:54:BE:86:15:AA:9B:F8:24:E8:52:56:E2:81:2F:2F:68:29:FA
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial: 0199FBEA75DCF599BE29970C095B5238CE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number: 12CF
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: b7evdJcjW0Vlzu0QwIEUiR4kaNl2GWV2uaovepiGNAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:75:dc:f5:99:be:29:97:0c:09:5b:52:38:ce:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=505754be8615aa9bf824e85256e2812f2f6829fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:65:0f:9e:21:13:31:a0:26:aa:4d:13:ad:
6d:8a:59:41:36:7d:a3:fe:67:fd:49:fc:4e:fb:29:
ff:b8:bc:7e:0d:6a:c3:07:78:0c:c7:de:19:8b:ff:
d1:86:c1:88:16:55:af:90:18:23:93:b1:dd:ac:bb:
7f:a8:86:52:69:8f:7e:0b:e2:d7:c5:75:57:8c:69:
ae:96:23:a2:d1:e1:20:47:52:aa:75:1d:04:f9:dc:
30:93:e5:ae:97:c1:42:cc:8d:88:2f:06:3d:2a:2d:
58:27:4f:42:89:72:dd:02:32:6e:c3:aa:6a:e7:95:
aa:32:f4:35:c1:c1:ca:0d:03:d1:24:1a:27:23:27:
ba:76:2c:07:7d:af:f3:a2:d3:08:84:2a:ab:36:93:
7a:8c:40:f7:4a:9c:08:b6:dd:5e:89:1e:aa:0f:f8:
ee:b8:54:f8:6d:27:b8:a2:76:7f:cf:4e:4f:f9:c7:
e1:90:66:e2:b5:06:f5:f0:81:54:cc:83:f7:ed:81:
41:e0:ca:9c:76:71:bb:f2:ba:2f:a0:cd:c9:b0:b8:
15:41:d2:55:e4:22:b5:fe:37:1d:c0:b7:b1:4a:47:
b6:43:ea:f2:08:be:e6:25:3e:f2:34:05:e4:60:ac:
4c:83:4f:dc:d5:01:f7:5c:a4:d2:42:b2:97:d9:64:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:57:54:BE:86:15:AA:9B:F8:24:E8:52:56:E2:81:2F:2F:68:29:FA
X509v3 Authority Key Identifier:
keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:41:7d:46:ae:e4:27:87:2c:b9:c5:0c:0c:7d:16:ff:bc:fb:
e8:a6:e4:ae:f7:da:eb:d6:dd:43:70:16:df:85:55:eb:a7:7e:
b2:e1:90:de:72:8f:c0:10:61:ab:ca:11:f1:8d:08:ca:a2:61:
68:c3:b5:bc:09:89:d8:1f:d9:c9:0f:3b:9a:02:73:c5:e8:2b:
b1:ad:06:c6:05:4d:5f:54:fb:00:86:98:ea:63:c3:20:e1:33:
8a:0a:cd:4f:2c:8d:24:b7:33:51:c8:44:0b:8b:ba:3b:9a:6d:
a9:45:48:f6:95:77:9f:97:68:13:9a:fb:58:11:be:2d:d4:bf:
46:a2:27:ac:1c:b9:2e:d6:62:bc:3f:e7:2b:51:92:2e:e2:5e:
12:74:8c:5b:14:07:59:8c:7c:99:8e:02:a6:9e:ca:95:9a:04:
e1:94:37:7d:fb:9f:4f:d7:ad:6f:41:cd:ad:c0:73:e9:65:cd:
6f:43:51:7e:99:1e:8a:68:70:14:f2:b7:db:69:04:a4:27:a4:
57:c0:4e:e3:03:f5:d1:22:32:f5:a9:11:4d:54:fa:9a:ed:df:
e1:a4:e0:8c:41:d3:c2:fd:aa:7e:a6:56:2c:61:ae:e4:ea:63:
3b:c2:52:24:4c:47:0b:a4:f9:d8:d4:f4:18:a9:26:1d:44:eb:
a7:24:3f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:13 2025 by rpki-client