Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
File: 5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json)
Hash identifier: +pUtVPBB9vBUrkUr9CAYAV2DfFRnutfbFqH767hMP44=
Subject key identifier: A7:45:5B:3E:0B:20:67:5D:39:2F:8B:74:83:96:19:78:CE:D7:0D:8C
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Certificate issuer: /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial: 0199FFC778CC145627B2373EFFFE4F0A4C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:26 +0000
Manifest this update: Mon 20 Oct 2025 04:01:26 +0000
Manifest next update: Tue 21 Oct 2025 04:01:26 +0000
Files and hashes: 1: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: MoijnPPAHczNqh9cPgYUV+MAc6lpYQ/bngB8WYVUj9Y=)
2: DwTC30oaWKwssRCXrBoUlk9Q5bw.roa (hash: ijzA7vHvds3BxvrPMvxvhrjeIw/3n+d/qJzXMvHrD7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:78:cc:14:56:27:b2:37:3e:ff:fe:4f:0a:4c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Validity
Not Before: Oct 20 04:01:26 2025 GMT
Not After : Oct 21 04:01:26 2025 GMT
Subject: CN=a7455b3e0b20675d392f8b7483961978ced70d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:28:79:a5:06:12:d0:d6:ce:25:24:6b:0f:
88:4a:9d:6d:07:e0:eb:4e:4d:6f:64:7f:e5:f9:ff:
a3:23:f9:1e:54:c6:df:10:0d:1a:8c:d4:6d:54:d7:
03:41:9b:4d:68:88:a4:84:c4:4e:aa:24:dc:c8:b0:
c5:8a:83:ad:53:db:9c:c2:fc:13:91:a2:34:d3:3a:
93:67:65:95:8b:59:16:48:dd:4c:92:92:a8:e4:9e:
24:a5:3a:8d:96:fb:48:8f:63:0d:4d:b8:b3:42:87:
22:bf:87:b3:db:53:5a:96:e2:0d:19:00:29:5b:ea:
18:ad:ee:ea:0a:be:95:74:af:fb:6d:99:71:98:bc:
2b:3d:00:39:b1:fb:7a:a3:0d:b5:3b:d2:f2:f3:a8:
52:7e:c7:f6:80:ed:28:e2:75:d5:4f:08:4c:ee:13:
f4:53:f7:ce:e8:02:75:23:0c:80:3c:46:68:bf:43:
3f:26:f4:b4:9a:3e:0f:0d:c1:21:98:e1:bc:db:1d:
ca:3a:cc:0a:d2:22:dc:45:78:a4:13:3c:86:12:3f:
64:b8:ea:35:f7:9f:e4:03:f4:e4:93:af:04:ef:57:
2a:b1:78:d1:bc:11:32:9c:b3:ff:74:70:39:55:b2:
e5:5c:18:aa:2a:8c:12:d3:c7:39:19:f8:ff:56:e9:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:45:5B:3E:0B:20:67:5D:39:2F:8B:74:83:96:19:78:CE:D7:0D:8C
X509v3 Authority Key Identifier:
keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2a:6a:d7:a9:83:1a:3f:68:90:62:85:0f:74:63:73:60:43:
ce:1c:7e:d2:89:5c:a3:6c:8c:c6:98:fd:72:25:db:82:61:02:
c0:1c:16:f7:82:99:29:c7:02:69:4a:c6:93:eb:c8:6b:f5:53:
34:3a:58:ec:2d:d9:cd:d5:6c:9e:fb:d8:2e:e1:98:97:95:dc:
e1:b7:78:49:a9:92:dd:a1:19:d2:9f:af:9d:56:21:3f:10:b5:
1e:52:4f:e1:06:49:0c:5c:81:33:4d:fe:31:aa:67:b5:5a:e8:
78:ae:47:59:2c:c8:ee:93:d0:ee:50:ee:b9:ad:9d:39:a0:c4:
b5:47:c2:3f:43:d6:60:2a:1c:28:d2:77:e2:7e:10:21:82:42:
c5:d7:a2:61:8d:cb:27:18:cf:4d:5f:a9:bb:66:b3:c3:34:97:
bc:ab:e7:30:c7:c1:d0:a6:9a:bb:63:e1:8a:7a:02:12:08:84:
3b:03:0f:c3:7e:cc:7a:1e:65:23:ec:65:af:ba:19:fb:b2:d6:
65:9f:02:7c:a2:47:8d:4f:66:67:f1:a4:19:82:1b:81:63:4b:
6c:f6:75:6a:0d:39:03:d8:2a:22:77:28:53:7c:69:b3:03:0c:
72:83:5f:37:19:09:a8:35:19:91:86:46:55:81:cc:34:bf:e6:
30:1c:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:58 2025 by rpki-client