Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: 2kJK0TQOntpK//lbAPFbAeptUEZM2IWn7iT5guONpkc=
Subject key identifier: 97:C3:2D:68:7C:17:09:1F:E8:B0:95:64:28:EF:0F:18:F2:2B:6C:49
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019A00352644DF3BF0EA2B599F4DE90C45C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0DDB
Signing time: Mon 20 Oct 2025 06:01:14 +0000
Manifest this update: Mon 20 Oct 2025 06:01:14 +0000
Manifest next update: Tue 21 Oct 2025 06:01:14 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: ErXNb1pYaT47CLeHSjRKR7+QhMrJEWLD3iqZNxni1Zg=)
2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=)
3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:26:44:df:3b:f0:ea:2b:59:9f:4d:e9:0c:45:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Oct 20 06:01:14 2025 GMT
Not After : Oct 21 06:01:14 2025 GMT
Subject: CN=97c32d687c17091fe8b0956428ef0f18f22b6c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:0a:ef:48:26:61:57:d8:ba:0e:44:e0:f2:
6b:8b:c8:06:43:3e:c9:53:cc:56:63:8b:04:40:01:
10:36:01:da:78:fd:1d:85:49:5d:56:5e:3d:c1:2a:
d2:a7:f1:22:f4:34:c3:e7:18:9b:f0:3b:30:64:8c:
52:5c:33:18:30:49:8f:de:83:c7:60:48:7f:aa:c8:
9e:b7:b4:17:76:38:14:c6:13:1e:86:70:97:07:f7:
af:ea:f0:bf:2f:97:c7:4a:32:46:bc:53:59:8e:2a:
c9:d6:b1:df:94:9d:3d:57:0a:e3:5f:5c:a5:98:4c:
0f:47:5f:6e:8e:37:1b:0e:01:77:42:9b:1c:1b:36:
c1:70:dd:4c:9f:9a:02:e4:66:c7:14:ce:8a:fe:b6:
fe:be:66:54:ba:ba:9a:01:fb:07:8d:92:9a:5e:14:
d3:7a:a9:32:a1:72:bb:8d:d9:63:d8:c5:43:eb:3d:
b5:f5:15:09:1b:87:d8:65:81:89:8e:39:16:06:83:
83:5b:fd:f5:00:61:08:40:92:93:99:78:46:21:7f:
02:c0:2a:ff:37:88:97:0e:d9:b9:56:ca:5b:5d:ca:
9e:71:50:81:d6:93:7d:6c:fe:75:23:bf:59:30:70:
99:cc:6d:e3:99:8d:b4:72:8d:15:6b:b5:d3:ed:8b:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C3:2D:68:7C:17:09:1F:E8:B0:95:64:28:EF:0F:18:F2:2B:6C:49
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bd:81:96:be:8f:a6:ec:a4:a4:35:5e:7d:ec:af:7f:a8:57:
e8:f1:c8:60:44:23:7f:2a:62:41:a7:58:8b:e7:ac:6d:5f:85:
7b:71:93:29:7e:92:84:f5:61:17:10:dc:b2:fa:07:e3:7b:1d:
31:66:fb:9b:73:97:97:78:06:81:a2:c9:1a:40:22:86:f0:07:
16:4c:7c:f7:13:5a:44:f0:5c:a5:04:4f:c8:a9:64:ef:82:83:
11:fa:97:66:8f:de:b9:91:16:79:37:dc:8c:0d:93:3f:85:64:
24:b4:ec:09:4d:b5:11:95:6f:8b:03:42:2d:cb:84:4f:cc:81:
c3:30:f7:f2:6c:69:71:b3:4d:fe:30:b2:a6:04:a6:8e:eb:f1:
a1:2f:8c:53:bb:26:8a:e7:2f:2a:eb:c7:51:4b:7b:75:fa:15:
f0:52:6e:3d:e6:99:06:0d:7c:9d:29:22:87:ea:6b:ab:07:42:
fa:a5:08:7d:36:39:12:26:dd:d3:f0:96:19:11:e0:75:88:e5:
2b:d1:d8:81:ce:6c:db:7f:b2:c2:6b:88:5b:16:47:22:03:49:
53:cb:10:0b:94:2f:c9:2f:42:f2:3a:b5:ec:df:e3:ca:fe:03:
bd:e4:74:b2:1b:78:ea:07:47:71:0d:63:b6:9d:4f:94:cf:92:
eb:e3:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:04:55 2025 by rpki-client