Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: 0bGMARknATtROuB4ViXJAT1TI6uuB6ZCMoFY2Y0TvpY=
Subject key identifier: E3:EC:50:40:AC:C9:E1:09:D8:F7:4A:B3:BD:C8:88:A8:CD:BB:E1:28
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 0199FCC692243BEDFD28EF2C22D7450CF0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 0711
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: j+/ic4R0G7jJqjSEaW0gXJptztbz/zmIeYYbNPypi5s=)
2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:92:24:3b:ed:fd:28:ef:2c:22:d7:45:0c:f0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=e3ec5040acc9e109d8f74ab3bdc888a8cdbbe128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:41:3e:b1:b4:b8:fe:9c:af:6a:3c:5a:76:
1e:44:2a:4e:a7:94:97:93:ec:af:e4:d5:f9:21:b4:
b6:e6:47:fb:a3:c1:e1:6f:bf:2d:52:2b:7f:ec:ae:
6e:ed:70:1d:76:50:fa:7c:e4:12:34:02:b0:d3:4c:
3e:ac:be:c5:e4:f7:d6:ba:c0:d5:39:38:cb:41:10:
73:a2:4d:0c:e1:0b:7c:37:cb:a2:3b:ad:1c:73:d9:
3f:25:ac:6c:1f:51:53:f0:e2:b7:0b:03:a5:1f:f4:
a8:bc:e0:db:43:08:8f:ec:d8:28:02:ca:ff:af:6c:
c7:3f:ca:10:9f:46:16:7c:e3:f2:1f:72:45:34:fc:
a8:a5:2a:b1:89:aa:ff:4b:66:d3:da:bb:69:18:16:
3d:51:95:9c:bc:58:26:3c:aa:53:44:62:ad:fe:2e:
d1:7a:6f:24:14:67:3c:9a:bd:03:e5:b3:ec:e1:61:
12:59:ee:20:18:3b:42:39:51:6a:35:75:4b:24:3b:
27:27:65:dd:cb:73:45:df:3a:b6:9b:13:fb:55:ed:
a5:bd:c8:7b:95:c9:cc:55:30:77:1a:ad:e6:ee:4e:
87:07:c7:bf:9a:b5:d9:05:a8:0e:2d:b3:19:09:c0:
86:33:53:0c:12:60:8a:0f:38:2d:6a:69:ab:ba:cc:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:50:40:AC:C9:E1:09:D8:F7:4A:B3:BD:C8:88:A8:CD:BB:E1:28
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:90:dc:4c:9f:67:da:ec:02:cc:14:94:73:84:fb:ae:8b:51:
3e:08:5d:12:fb:d4:ef:64:80:6d:bf:1d:b6:00:dc:f3:da:5e:
d8:b8:88:6e:1a:aa:43:45:91:57:77:65:f0:5e:80:89:52:36:
f5:cc:78:24:55:a7:8c:c6:31:3a:63:93:56:20:6f:69:e8:5d:
70:3f:c1:f3:56:79:26:bf:03:79:95:72:49:21:94:cf:4c:8a:
fc:d1:a2:26:a8:d5:3b:26:47:67:90:ab:5a:fd:73:4f:d2:74:
5f:72:25:42:cc:3c:fa:65:4f:f6:72:52:91:24:7e:4d:eb:ed:
82:3d:6e:cd:86:a2:2a:a4:f2:a5:fb:94:30:c3:37:ed:27:4a:
cb:74:54:4b:b3:76:10:ff:64:11:4e:a0:48:32:9b:17:8c:51:
33:86:b9:ae:26:dd:5e:b0:3d:93:2c:ab:71:8d:69:07:ad:cd:
59:2d:08:3b:a5:41:c1:33:42:fa:6b:ea:af:92:e5:ac:33:eb:
ec:31:1b:2a:b1:3f:cf:d1:86:1c:4e:53:aa:76:5b:4e:66:7a:
1f:21:eb:43:27:24:18:8e:ad:0a:00:8b:8b:77:fc:1e:28:b6:
e0:25:7f:4c:0f:c8:da:94:c9:12:56:69:37:5d:66:78:0a:1b:
73:3d:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:45:00 2025 by rpki-client