Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: LSyRlOzFdawsCfkgb88OzoJCyK9uvxxdkNV4KrKxVig=
Subject key identifier: 66:4A:1B:26:64:29:43:B9:93:4D:2E:62:F5:D8:6A:16:47:11:86:9C
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 0199FE46D1E3B2B6D1656DDEB5CE7855FF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 081A
Signing time: Sun 19 Oct 2025 21:01:18 +0000
Manifest this update: Sun 19 Oct 2025 21:01:18 +0000
Manifest next update: Mon 20 Oct 2025 21:01:18 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: nt+ebkfzE1z00XL4F3r+28fw52Gqw8y9sFkWql+SmQA=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d1:e3:b2:b6:d1:65:6d:de:b5:ce:78:55:ff:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Oct 19 21:01:18 2025 GMT
Not After : Oct 20 21:01:18 2025 GMT
Subject: CN=664a1b26642943b9934d2e62f5d86a164711869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:94:de:cd:b0:c0:66:60:bb:31:05:7a:7e:
a3:82:38:12:13:51:53:f6:56:71:2d:de:f3:70:87:
a1:e5:c5:f5:06:bc:f0:56:cd:8b:e5:a3:3e:15:05:
c9:69:a6:6d:e5:d5:59:d2:a1:e4:21:c4:b9:27:36:
9f:e7:98:cb:6c:e8:d6:2c:36:7d:da:33:3e:9d:bc:
e4:3f:46:76:26:d4:66:32:47:d3:13:65:23:4c:4c:
3a:80:28:1d:99:fd:7b:60:ce:e4:17:40:42:02:70:
2c:e9:8c:7d:19:fa:65:04:f1:6d:a7:4e:d4:c0:87:
95:2c:fd:74:a2:01:1e:ff:5c:a8:69:be:da:ac:03:
e0:68:42:67:7c:e6:53:8b:f2:70:5b:34:43:4b:63:
81:3e:5e:99:f4:3e:5f:98:11:6b:7d:d3:6a:df:27:
35:2b:bf:91:92:57:e6:b8:20:2c:6c:61:72:b7:d6:
f0:d5:51:5a:c0:30:38:b4:b3:f7:1b:3f:62:cb:91:
df:ca:0a:4f:c0:80:9b:6d:77:b3:fc:8b:05:aa:91:
6f:62:a4:c6:22:e5:06:7c:c1:bd:3d:3c:bd:ca:69:
6d:3b:c5:84:23:30:ab:bc:76:7a:09:51:be:95:b7:
85:38:70:9c:ae:3c:73:f8:e9:bd:47:1b:7f:5a:02:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:1B:26:64:29:43:B9:93:4D:2E:62:F5:D8:6A:16:47:11:86:9C
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fa:7e:b8:df:2d:68:20:a7:f4:8b:e6:7b:f0:11:cd:df:41:
7d:5e:69:7f:27:56:d1:c5:5e:33:9f:96:3a:21:2a:f8:f7:f3:
af:57:59:44:60:b9:19:f8:00:25:dc:85:5a:c5:20:de:45:54:
e1:56:92:1b:5c:82:e3:b1:12:e5:5e:ed:ff:74:51:f4:86:8b:
5e:8b:34:87:fa:3e:6a:65:be:ac:47:2b:97:3e:50:bc:f1:1f:
de:63:99:76:29:37:9c:44:b7:c8:fa:e0:0b:37:71:b8:bf:cc:
1e:4a:ec:57:88:e1:1d:28:0d:30:c4:1d:3a:b7:f5:1a:c7:fb:
ab:d6:53:14:d0:32:8e:6d:16:28:21:cf:3a:56:79:a5:f4:ac:
4b:d8:10:58:88:ba:8d:2e:ae:bd:22:42:6a:93:7d:d0:03:3c:
eb:2f:f6:e3:f7:fb:08:85:63:c8:57:95:b9:b5:30:9d:1d:ad:
bd:da:06:ed:7b:f2:4f:ec:f9:33:50:22:be:05:c9:51:2a:7e:
4e:d3:c6:de:98:ee:22:b9:51:4e:b6:17:44:9c:c4:20:9a:e2:
61:16:81:3d:ff:a3:6c:c5:7a:69:a6:f5:e6:98:ad:f2:6b:0a:
7d:7c:42:94:7a:8a:78:88:cd:3f:b6:aa:1f:6f:ff:a0:09:de:
cc:22:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:10:11 2025 by rpki-client