Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: 6RfvUUnX3Ogo9RbvJ6JXoYOIVId1pZRRvvbaPhxkIEE=
Subject key identifier: 47:AE:85:CF:83:F9:68:B8:4A:F0:65:4D:28:37:71:47:92:3D:79:30
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 0199FD34848FD9C60A4FFEFBB796873D5C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:41 +0000
Manifest this update: Sun 19 Oct 2025 16:01:41 +0000
Manifest next update: Mon 20 Oct 2025 16:01:41 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: ANANDBhVQKKYDa/zWeqJuPV3OmcNfCGTDjewe+73FR4=)
2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:84:8f:d9:c6:0a:4f:fe:fb:b7:96:87:3d:5c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Oct 19 16:01:41 2025 GMT
Not After : Oct 20 16:01:41 2025 GMT
Subject: CN=47ae85cf83f968b84af0654d28377147923d7930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:05:9a:2e:44:44:5d:5c:d5:30:01:ce:1b:
eb:2f:9f:5f:8a:be:8c:40:d7:ee:0f:07:ea:d8:81:
97:84:f0:60:ca:0f:56:e6:22:67:0c:3b:3b:12:0f:
e9:fb:52:df:06:6d:a0:02:4f:dc:8c:13:7e:e8:59:
f2:69:56:68:b1:d5:10:9c:00:91:f3:ae:ac:10:81:
5d:57:ed:c9:bc:83:7c:d3:8f:54:22:27:97:ff:a4:
15:cf:aa:22:e2:e7:35:7e:92:7f:9b:db:c6:dc:ce:
45:f4:9e:9a:c7:05:36:54:8f:a7:4c:a5:f5:0f:14:
74:3c:90:7f:bc:83:05:97:cf:a6:6c:d8:6d:70:66:
18:5e:74:fe:04:2e:81:e5:a0:98:a1:14:de:e9:1e:
31:6c:b3:97:46:a7:66:b1:8f:95:ec:cb:28:72:fb:
68:4c:ee:cf:5f:45:be:80:b4:5c:47:98:38:57:c5:
d2:c3:4e:80:47:c7:84:d0:24:6d:52:e9:fa:bd:0a:
58:41:b0:5c:e4:50:c6:7c:ca:80:3e:fa:88:ec:01:
15:2f:40:c3:6b:f1:f3:1d:94:12:cd:a0:07:ef:8b:
d7:13:41:cf:54:61:4c:32:31:4c:44:55:05:46:3b:
e5:7a:22:cd:df:c0:f5:37:ff:f7:9d:03:45:ab:c1:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AE:85:CF:83:F9:68:B8:4A:F0:65:4D:28:37:71:47:92:3D:79:30
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c6:0f:ed:1f:d6:08:5d:eb:86:76:2c:17:4f:ec:00:94:58:
f2:03:67:72:14:30:44:09:30:a7:e5:12:8c:97:fa:3d:81:a2:
02:07:3a:3a:22:86:85:fa:06:83:36:1b:4d:12:b9:ea:5f:c6:
58:47:81:59:db:cb:f1:b6:f8:57:fc:57:0d:54:e7:c0:c5:d4:
a5:7d:bc:d1:53:70:6c:c1:ef:f9:6f:08:30:2f:19:99:24:0d:
db:c4:f9:39:8e:bd:1f:d0:f3:04:46:85:dd:25:48:b8:e8:ea:
ef:0a:24:83:2f:f8:e8:6f:03:57:c8:2f:c5:d4:d6:e6:6a:d3:
7b:f3:da:11:73:f4:c8:4f:7e:8d:2a:7c:98:0d:81:a0:3d:42:
2b:28:92:d8:af:e9:b9:89:03:2d:66:91:f7:13:75:79:f7:61:
70:ce:80:51:07:36:6e:a7:91:d7:4f:94:3b:01:ae:aa:f6:35:
ea:9b:68:81:e4:66:d2:ce:ee:03:4c:43:7d:7d:42:e3:e6:f9:
50:e8:17:8f:ca:6e:57:c3:4e:02:03:93:21:40:86:9d:6a:6b:
19:59:50:44:9a:df:c2:eb:19:71:fe:0b:56:0d:d0:d1:83:03:
1f:2d:41:29:97:b5:5b:13:4d:bf:82:29:37:c0:34:dc:5a:30:
ac:4d:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:33 2025 by rpki-client