Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
File: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json)
Hash identifier: F7KcEhlZNNl4KHbCpweXEvMIlqHImwMXdGJ3g4Hx66I=
Subject key identifier: F0:56:BB:86:45:51:5B:99:37:47:49:27:56:05:2B:99:3C:88:C2:EF
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial: 0199FB7CB5F522C2FA0B15131658B6549CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: pCNHf+nq6P8nNXnUrV6OqNaYjtbPcgDJkF+T5M4kSks=)
2: Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa (hash: FohmZC9RjfkLWGSkIiIa2VtU1w5u6RfcN+tDaynMZcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b5:f5:22:c2:fa:0b:15:13:16:58:b6:54:9c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=f056bb8645515b993747492756052b993c88c2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:5a:04:26:ba:2b:aa:26:72:f3:73:70:2a:
c9:33:b4:96:86:b2:66:a5:a4:90:cc:2e:b8:df:6b:
38:fd:ed:ee:4c:44:99:2e:97:4c:e6:8b:70:99:82:
96:c3:8b:3e:79:8d:2d:4f:0d:cf:1c:2c:30:e4:ef:
3f:a8:3b:ac:49:95:00:da:e2:a1:ae:f0:1d:7e:64:
ee:d1:24:24:10:99:d9:e9:9e:93:19:cd:ee:e7:f5:
8b:24:f8:27:c0:3c:f0:bf:c8:76:fc:42:a0:ca:10:
19:7f:1c:be:13:17:99:fd:4b:00:b1:c9:38:57:6b:
da:2b:67:53:25:76:5e:fa:c0:69:be:16:bd:1e:4f:
c0:47:b0:5e:35:47:eb:b7:a9:bc:c5:f1:b1:da:95:
0f:b1:9e:89:ad:57:81:d1:36:08:43:e6:dc:36:25:
fa:61:35:d9:27:7c:ef:07:7a:c2:5a:31:0e:6f:3d:
e7:7f:00:81:b7:91:96:12:b9:df:c6:4e:76:79:9a:
b8:6d:5b:6f:54:e0:e6:5b:52:1c:62:e4:7c:bc:71:
3c:28:26:bb:a2:2f:02:68:00:b2:e2:43:ff:1c:c5:
85:c0:eb:4c:c1:45:91:8e:e2:94:9f:12:0b:32:d4:
81:f5:2a:f6:5d:e1:ca:39:24:7d:30:60:93:ff:f0:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:56:BB:86:45:51:5B:99:37:47:49:27:56:05:2B:99:3C:88:C2:EF
X509v3 Authority Key Identifier:
keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:10:f9:44:e7:b1:d9:9b:e4:73:5d:60:87:18:2f:10:e0:32:
23:7c:59:b1:a3:56:f3:56:eb:ff:f0:81:b8:79:7c:59:67:99:
4d:b8:97:d7:e7:24:c5:ac:a8:7b:c1:6c:b9:46:8a:d8:31:b9:
99:50:67:96:79:b0:28:56:20:8c:c9:44:c0:98:f7:b3:16:07:
69:35:af:f2:af:d2:6a:b4:43:c6:b5:18:7b:84:a2:fc:94:07:
58:67:d5:84:1b:dd:f3:b3:75:ec:2e:90:cb:77:e4:82:e9:78:
e2:27:c3:9d:d3:c9:02:48:a8:55:91:a2:cc:90:ac:aa:08:d2:
f4:37:a8:7d:0a:ac:57:e0:3e:b0:2d:d2:38:69:32:fb:3d:1f:
8b:41:67:e3:de:b3:8b:1b:7d:af:1d:a8:65:6a:70:4d:eb:e8:
9d:04:50:64:80:ad:17:c0:fe:c0:b4:89:a5:88:0e:dd:7c:d9:
19:32:66:d0:99:09:97:10:f0:aa:8f:df:2e:a5:5c:a0:f1:dd:
5e:ee:b6:35:ab:ef:fe:0f:a4:2c:1c:d7:96:4b:4e:8c:c5:56:
5f:8d:54:2d:83:77:a6:46:26:3f:dc:06:90:da:de:d3:23:e6:
1c:59:a7:02:0c:f0:94:b7:67:d7:fc:cb:03:d1:14:77:9a:84:
06:a6:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:37 2025 by rpki-client