
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: IDwf8eb0KzGQo3PQBNJ4lJiY6ShOpy6DJt9574DSi50=
Subject key identifier: E1:1C:8F:13:50:73:26:AB:2F:A2:65:25:17:12:12:6A:AD:D6:7F:65
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 0199FAA11CD8544D2FB0BB138B640EB79FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 0F65
Signing time: Sun 19 Oct 2025 04:01:26 +0000
Manifest this update: Sun 19 Oct 2025 04:01:26 +0000
Manifest next update: Mon 20 Oct 2025 04:01:26 +0000
Files and hashes: 1: Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa (hash: G5JYSxAwHyem4a69edN/KGJ90OxsVksEMhgNs6pZaOw=)
2: fuJdLqdlLbSFzR5wICuESp5-Mhc.roa (hash: cagQfCDycKKd/UTpNij0HKDwbg7i0kvIBBf3pZu1p7Q=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: yR/V7TEYVq8FbJ2/Dl5hoypjf3tC20CRCJXcqjE8roE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:1c:d8:54:4d:2f:b0:bb:13:8b:64:0e:b7:9f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Oct 19 04:01:26 2025 GMT
Not After : Oct 20 04:01:26 2025 GMT
Subject: CN=e11c8f13507326ab2fa265251712126aadd67f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:d6:8c:82:34:6a:31:ba:34:8f:28:32:cb:
10:86:ec:f8:2d:cb:62:73:66:70:ce:eb:09:6c:a5:
f5:b9:ec:b7:39:e3:22:32:eb:8b:52:2a:08:9c:37:
ab:17:37:69:c2:0a:e6:c8:e7:29:96:63:4d:1d:ae:
80:6e:1c:08:a3:05:b3:6d:be:39:5d:3a:32:63:53:
9c:e5:6e:be:dc:22:2b:0a:cf:8c:ee:d0:e4:a4:a7:
57:a8:80:cd:70:07:b9:9e:a8:ff:ce:77:b0:ab:0c:
bf:c7:36:9a:39:5b:8a:92:b2:6b:f5:a0:e4:5f:82:
be:42:a6:b0:d8:43:7a:32:b7:0d:21:71:1c:08:8e:
e4:5d:97:a2:00:c1:03:e3:07:e0:21:27:68:96:12:
fe:cd:d1:0d:46:8c:7a:46:30:9c:bc:f8:87:0c:c1:
73:14:a6:5e:69:4e:bd:f1:b1:88:ff:36:da:05:74:
5b:1c:36:6c:52:8c:40:60:c4:fc:87:24:2e:5b:52:
bf:75:77:c4:53:9e:86:96:cf:35:57:0e:93:09:db:
62:bf:52:25:28:73:ae:a9:49:84:2e:65:8d:37:2d:
98:3e:c9:94:66:bc:c3:15:7d:1d:dc:85:8f:26:d8:
23:ff:c0:06:41:db:85:87:ac:c8:23:54:bd:f7:12:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:8F:13:50:73:26:AB:2F:A2:65:25:17:12:12:6A:AD:D6:7F:65
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cd:2e:fc:62:e5:2d:ef:d6:02:e3:e1:84:fe:46:8c:57:cf:
9d:0d:b4:19:9c:1e:3a:d9:ca:00:83:70:97:e4:d2:35:07:c0:
20:f0:98:1d:fa:f2:87:fd:e6:6c:52:bb:73:93:69:22:81:18:
9a:a1:9e:16:7c:73:d9:82:bc:79:60:2a:d7:6a:f8:a7:02:2f:
b8:90:0c:ec:26:55:ba:20:b6:59:f0:da:9d:2a:2b:7f:6b:44:
c4:4e:00:11:de:3f:a3:ac:8a:c7:fb:10:04:19:c0:30:f2:ba:
45:51:50:14:0c:ef:1f:96:99:43:7c:52:2c:26:17:9c:45:fa:
d0:61:48:12:82:8f:cf:1b:62:e9:0b:e5:a3:f8:f3:9c:d8:ef:
2c:12:c8:0b:26:85:85:cf:76:a5:5c:45:76:35:d2:80:07:10:
66:68:04:28:b2:e4:2e:f2:66:38:4d:db:f6:64:64:15:60:7c:
da:95:ee:a2:11:5f:55:92:31:06:95:67:12:62:34:5e:e5:ae:
df:49:bc:8a:6e:b0:91:77:4d:50:74:a9:69:35:61:82:13:11:
96:c9:4d:06:96:5d:cf:c0:c2:a2:82:81:21:85:c5:61:88:81:
9f:74:45:66:6d:c5:89:8e:70:ad:f3:87:5b:d7:26:3a:92:c7:
89:31:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:39 2025 by rpki-client