Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
File: 5kdeNHqvK1nU7oU6ilS05L03R-s.mft (raw, json)
Hash identifier: d0Dhzn9Y+JTZyao/QfIWYAW87F+LMxPBMbQb1Qj8W2c=
Subject key identifier: FF:00:81:61:90:6E:2B:30:17:33:86:D7:59:9A:B7:F0:84:70:92:C5
Authority key identifier: E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
Certificate issuer: /CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Certificate serial: 0199FC21DDB542076072A0B3AD5610514715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
Manifest number: 022C
Signing time: Sun 19 Oct 2025 11:01:41 +0000
Manifest this update: Sun 19 Oct 2025 11:01:41 +0000
Manifest next update: Mon 20 Oct 2025 11:01:41 +0000
Files and hashes: 1: 5kdeNHqvK1nU7oU6ilS05L03R-s.crl (hash: /rYBtvJVqc1TEAE1FnBzK21V1O2N/VzecMwwb8UE7A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:dd:b5:42:07:60:72:a0:b3:ad:56:10:51:47:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Validity
Not Before: Oct 19 11:01:41 2025 GMT
Not After : Oct 20 11:01:41 2025 GMT
Subject: CN=ff008161906e2b30173386d7599ab7f0847092c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:c4:91:42:22:47:49:a1:e8:e6:72:ae:37:
d5:96:e2:5e:5b:24:ae:f6:4a:e5:e8:0d:e6:26:15:
a9:8a:8a:29:94:ea:b2:2b:7d:19:e3:e3:17:9b:91:
bc:e3:33:a8:ad:d4:89:34:4e:6c:61:c3:c7:fc:c5:
33:55:bf:15:50:f8:c5:3b:45:c6:90:c3:3b:a1:e7:
be:27:ee:84:b6:53:b3:6b:05:a7:af:36:01:25:b7:
60:52:5b:93:ea:ea:dc:60:d3:ea:b8:ec:69:79:5d:
d1:c1:0a:f7:43:95:c0:78:f3:19:c1:d5:9f:b1:c2:
29:6a:71:9a:d4:13:d6:2a:67:a6:57:97:ab:62:d6:
48:5f:c6:fe:b5:56:33:99:6f:92:e3:6c:21:da:d0:
63:fa:8f:32:cf:ed:03:03:e8:81:31:6e:d5:d7:c9:
36:53:eb:92:d6:f5:d4:5c:42:61:7e:3d:d2:82:a7:
1e:9f:ba:ae:aa:f4:a7:63:52:0c:64:3b:41:5a:d6:
a1:5f:fd:cd:98:0d:af:e6:ce:8c:a3:71:33:c3:fd:
1e:08:2f:e6:be:f9:14:25:1a:b7:61:f0:ff:50:07:
4a:4a:44:01:8e:16:91:b1:28:1b:08:0c:7f:3a:90:
42:bd:2c:28:e2:85:05:6c:66:77:bd:29:df:b1:c8:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:00:81:61:90:6E:2B:30:17:33:86:D7:59:9A:B7:F0:84:70:92:C5
X509v3 Authority Key Identifier:
keyid:E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:37:e8:a9:43:22:96:00:7e:0a:ce:00:72:15:5b:8d:78:e0:
3e:7a:52:6f:ca:05:4f:90:1d:86:3c:5d:f5:df:45:22:08:59:
fd:e9:f0:16:02:d9:a6:99:d7:e4:aa:f9:7c:5b:78:19:44:65:
18:84:2f:44:7c:ad:38:04:2c:10:5e:4b:cf:5c:13:66:51:69:
7b:36:f1:68:cc:22:cd:eb:aa:b4:5a:df:fb:52:56:5d:c8:52:
4b:42:f5:9a:f4:b9:57:2b:22:76:68:af:95:cb:4d:0a:86:97:
2b:72:ff:05:c6:6d:d2:36:55:31:bd:93:0e:4e:8c:3e:15:9a:
fc:c8:6b:2b:47:00:66:f8:12:db:7d:1b:d7:ec:cd:82:12:31:
6f:1d:2e:94:a6:16:f4:c4:76:c2:6c:52:ed:07:88:84:9c:85:
81:a1:5c:ae:3d:f3:e2:c0:64:f2:5f:1d:8c:ce:3b:ea:ef:68:
9c:14:80:76:fd:eb:47:f0:fd:b5:8d:85:ce:6e:77:45:cf:55:
86:07:06:e0:36:a1:ca:b7:2b:5f:05:2e:89:b9:b6:60:9f:1e:
e3:77:db:a9:3e:4c:b3:22:a0:84:de:67:0e:c9:46:8c:41:f7:
e9:56:09:bb:05:5a:21:aa:92:46:21:77:8a:ff:5c:3c:b3:b4:
37:d9:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:49 2025 by rpki-client