Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File: 5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier: RDcY2pqZr5posAb6fEa/nIXjplKc96Gd00j8TlHlaAE=
Subject key identifier: 49:2A:54:DE:5B:57:8A:93:CB:25:71:9F:9E:BA:9A:14:1E:BC:16:44
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial: 0199FEB4B0DB5EFE262541855174A7F4D48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 23:01:18 +0000
Manifest this update: Sun 19 Oct 2025 23:01:18 +0000
Manifest next update: Mon 20 Oct 2025 23:01:18 +0000
Files and hashes: 1: 1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa (hash: Ohp9jg/lWKCAW1pqYiDBNHfJGsbI7n6Nnedeq9nVw0Y=)
2: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: TMJHFpPIpfqFBF27toTgBw2laXIG4pV05cAm0qsQxuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:b0:db:5e:fe:26:25:41:85:51:74:a7:f4:d4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Validity
Not Before: Oct 19 23:01:18 2025 GMT
Not After : Oct 20 23:01:18 2025 GMT
Subject: CN=492a54de5b578a93cb25719f9eba9a141ebc1644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:cd:64:2c:06:8f:8b:27:73:36:b9:2b:44:
93:30:e6:c7:fd:98:41:0a:06:05:4f:08:30:c7:f5:
8c:6a:82:6e:a8:7e:af:a4:bf:2d:10:35:b9:0a:8c:
1f:a9:75:bf:47:84:51:e3:fa:68:57:9f:d2:56:d4:
7b:cc:c2:e7:32:c5:fb:56:51:dd:5e:33:87:54:d8:
5b:3b:95:4d:54:45:1c:0e:93:b7:50:25:90:77:6c:
3c:6e:1b:7a:3e:c7:c5:fd:85:99:12:e9:9c:2a:66:
f6:7e:03:9b:30:40:cc:e7:3b:75:08:56:b6:74:b5:
b3:e9:51:06:62:7c:18:65:1b:4d:96:8a:a0:fe:db:
2f:9b:5c:e0:9f:1e:99:35:a2:47:a9:17:b7:0c:17:
f9:f1:e1:2c:b5:60:87:7b:a4:e6:22:2e:43:48:37:
97:d0:e7:cc:31:b7:1f:2e:7c:b9:3f:c9:a1:05:4a:
df:96:3f:c2:2a:ba:c8:24:f2:e8:2e:3b:dd:8e:3a:
9e:35:37:43:03:c3:21:4e:8a:65:b8:a9:9a:74:a1:
5e:b6:70:98:d4:d3:7d:a5:7d:96:62:fb:46:f4:0c:
dc:89:09:bc:69:cd:da:86:b7:89:9c:bc:2a:4f:6c:
2d:4c:b9:8f:41:97:5b:7e:c2:fb:ce:56:10:62:cf:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2A:54:DE:5B:57:8A:93:CB:25:71:9F:9E:BA:9A:14:1E:BC:16:44
X509v3 Authority Key Identifier:
keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f3:35:19:9a:89:a8:38:50:17:38:b9:06:91:54:83:57:f7:
23:5b:f9:2d:eb:63:fe:e4:d5:d8:8a:af:d9:c6:e7:d7:01:aa:
44:7c:88:a8:18:5b:fc:75:54:55:b9:47:0d:2e:89:8b:9c:6f:
7d:e0:ee:dc:d8:ab:f2:2d:65:f2:f0:04:cc:d3:83:13:6e:fa:
05:c1:3f:ae:38:b1:94:7b:f5:15:e4:7c:f3:99:ed:e4:cb:0c:
9e:95:aa:5a:d5:8f:f8:d8:d1:8c:28:9e:50:ba:5c:d8:8e:18:
ac:33:1a:70:68:f6:95:04:02:3c:28:15:7a:ad:1e:e4:d6:03:
b8:a1:2c:7f:93:92:e1:46:47:90:62:1c:8e:26:54:1f:a1:d1:
ba:a7:35:1a:ac:ab:e4:6c:8b:3f:30:83:4a:d3:63:78:97:74:
a1:d9:27:b1:e8:4a:48:bb:9e:07:91:5d:1a:9b:81:87:14:aa:
3e:96:1d:94:f8:ae:eb:83:d5:62:3e:d8:31:52:cd:56:be:f2:
84:eb:e3:7f:a3:90:32:63:f9:d4:0d:5b:62:6e:b5:5f:5c:2f:
b7:8b:e7:b0:d6:ae:49:b8:46:58:db:d6:b1:ce:0d:c7:98:6d:
20:1c:11:21:3e:51:1c:fd:74:a9:ab:eb:12:21:ed:9b:1a:8d:
ba:31:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:58 2025 by rpki-client