Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File: 5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier: dDK80x3t0jdDy6PWCqMSq/BcejoQ6gpLIiCcEQhndxE=
Subject key identifier: 19:5B:5D:9F:FE:A2:F7:5C:9C:7C:21:41:45:E0:86:B2:42:0F:F2:59
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer: /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial: 0199FE10033F6118CEF984E0707E5192BBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number: 02FE
Signing time: Sun 19 Oct 2025 20:01:26 +0000
Manifest this update: Sun 19 Oct 2025 20:01:26 +0000
Manifest next update: Mon 20 Oct 2025 20:01:26 +0000
Files and hashes: 1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: dNuJ5o4FFToGWgn3Kon6nL5USOESic+62t6Seu7WMAo=)
2: WZ6QV7I388WfR1atNyelt0Q9Mso.roa (hash: KwrEk8zO8slIVjQv6gkfQCNK8LKZkPpOkNAIgKKlEQo=)
3: cYRGhzL82eBqpmxlM9QdQCYRf0M.roa (hash: JsKzcZfq1zGMtrEgXsSMPufU5mv03rsq7Q409GdhdZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:03:3f:61:18:ce:f9:84:e0:70:7e:51:92:bb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Validity
Not Before: Oct 19 20:01:26 2025 GMT
Not After : Oct 20 20:01:26 2025 GMT
Subject: CN=195b5d9ffea2f75c9c7c214145e086b2420ff259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:ed:a5:20:c9:8e:4e:33:1b:c0:2d:ab:ae:
a8:cf:ee:49:34:57:f3:6e:3c:15:5c:66:6a:12:0c:
e5:86:5b:a7:54:68:80:d5:71:58:18:7b:a3:60:a6:
b7:f2:04:86:33:bb:3b:86:f4:47:95:06:a5:5e:94:
91:84:73:6a:4b:56:0d:ca:0b:f6:17:55:7d:bd:55:
2c:69:6d:4a:9a:e6:a3:0a:4d:b2:f3:9f:ac:34:0d:
fa:50:da:1a:9b:74:5b:bf:46:7b:4a:0a:68:3e:6c:
d9:d9:f3:b3:fd:ca:bb:be:fe:5a:06:b2:50:ca:ec:
22:44:f0:61:e9:bf:52:5f:d6:c2:67:88:3b:7c:be:
27:45:f0:8e:48:11:95:aa:33:5a:e9:7d:bc:a3:07:
cf:a9:58:02:ab:9a:41:f4:cd:8f:55:66:c1:94:62:
aa:7c:c4:12:e5:c6:22:56:9e:ae:11:8f:33:42:98:
58:1e:4f:ac:6a:5e:d0:9f:ee:36:15:aa:d9:91:39:
bf:a3:89:6b:6b:a7:78:8a:0d:92:10:2c:76:ee:10:
74:fe:55:1d:97:a1:8e:d9:41:21:26:f6:fd:00:c3:
97:98:d5:67:f9:fc:55:c9:fb:4a:5e:52:aa:1d:d2:
0a:97:b0:a0:9b:00:da:19:75:72:98:43:f1:25:c5:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5B:5D:9F:FE:A2:F7:5C:9C:7C:21:41:45:E0:86:B2:42:0F:F2:59
X509v3 Authority Key Identifier:
keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0f:43:5f:73:fc:31:68:02:2d:f5:0d:95:ce:42:69:14:96:
17:1d:51:47:74:a6:03:17:d4:cd:45:b3:41:7b:e6:8e:b6:0c:
c7:8c:5c:71:de:6a:79:12:98:29:66:ce:94:02:a3:23:9a:d6:
69:13:d7:30:88:0c:40:94:61:f4:0b:b3:ef:f3:e8:25:2a:96:
30:67:75:21:90:a2:2b:79:8e:e1:14:dd:0b:e0:0e:c2:9a:0a:
c7:c5:09:ba:03:55:1a:6d:13:b4:db:6d:34:c7:a3:ac:81:10:
2f:a8:00:f6:64:fe:3c:3b:4e:8d:c0:61:9d:23:fa:c3:1f:3a:
b9:ad:32:51:bf:a7:4d:1b:97:db:ba:0f:c2:b5:3f:66:7b:8a:
30:1c:18:1a:b7:55:20:d0:8a:3e:73:d7:8c:0b:33:35:df:cb:
90:b2:a3:5b:ba:90:6d:da:59:39:bd:53:c5:89:80:b8:4f:9b:
8a:1d:5f:ab:94:ec:d6:22:83:e3:d3:01:03:1a:18:16:b9:2a:
9f:c0:c9:37:63:53:42:4c:16:14:65:5c:2b:eb:e3:50:8f:39:
fe:25:0f:3e:02:91:d4:6a:43:11:fb:70:64:c4:19:0d:97:e3:
be:f6:59:61:b0:c1:87:7f:d2:d2:b1:34:1b:ab:4c:4a:1c:41:
5f:1c:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:00 2025 by rpki-client