Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: LlZ6nELgi2PfcTKl3mxSujsmyyZF4ccBp2A7TVuwSt8=
Subject key identifier: 2C:36:56:EA:0A:59:88:B8:DE:44:8D:B3:B1:87:CA:C7:52:9D:C6:A3
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 0199FB7CB7B88AE883C83D54A322661BC014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: 4aO6g98dM5efl0HTNPl4AcW7wd65/6DY75uNBLVvQ90=)
2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b7:b8:8a:e8:83:c8:3d:54:a3:22:66:1b:c0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=2c3656ea0a5988b8de448db3b187cac7529dc6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:60:85:a9:ce:09:00:89:50:f9:f8:aa:62:
69:ee:89:df:d1:d1:63:07:39:73:51:cd:23:25:f0:
67:a0:8f:f8:af:91:1d:4c:f8:71:bb:84:ad:a7:fa:
69:9e:42:70:dc:49:bd:51:19:d8:7a:a4:59:1c:22:
da:db:a4:b5:e3:c7:bb:2c:7e:29:6a:52:73:ec:51:
f1:67:fe:87:a6:55:1e:da:77:31:dc:37:c4:56:c4:
1e:df:54:6c:74:f3:31:a7:41:64:f1:69:1b:b8:a2:
60:d7:70:3a:fd:4e:5e:49:57:9c:eb:02:43:a5:f8:
af:7f:77:ca:31:4e:45:87:c3:37:0e:ac:f8:f8:2d:
ea:41:cc:2d:9e:f4:b0:0b:34:3c:26:81:38:a6:5a:
f9:df:d8:0a:c0:a4:0f:ec:08:46:ec:4d:47:23:92:
ba:8a:f9:de:7b:da:8b:f3:c9:73:c3:e1:b1:f4:91:
60:82:de:0f:fc:1f:31:e3:44:39:0b:80:90:4a:de:
68:95:32:73:15:b9:2e:c8:74:6b:6b:35:36:c9:7d:
72:6a:81:b6:d3:59:a3:ad:0c:e2:95:b5:0c:c9:c7:
34:36:d9:c5:2a:0e:f4:5c:b2:4e:72:a0:98:a0:d0:
d5:93:4e:cc:13:f5:f3:9f:29:6d:91:6d:bb:25:42:
dc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:36:56:EA:0A:59:88:B8:DE:44:8D:B3:B1:87:CA:C7:52:9D:C6:A3
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:72:75:48:86:ac:44:e6:83:e3:44:1a:72:06:48:bf:26:82:
43:78:cd:bf:67:51:d1:81:d7:be:99:fb:85:1c:cf:4f:73:b2:
4e:a9:26:3e:97:31:cc:f8:57:f2:0d:36:45:4a:88:e7:72:37:
8e:d0:cf:48:7f:13:ae:53:fd:c7:e4:6e:f4:8c:07:c4:0b:12:
3d:67:d2:d5:53:05:1b:68:e7:c3:3a:80:ff:5a:a5:31:7e:d6:
75:95:ff:cc:1c:b1:c3:4f:b4:23:a5:9a:57:1b:d1:20:86:f0:
af:70:d7:29:14:46:6a:89:05:7c:e4:26:2d:58:25:fd:b2:7f:
3d:08:5b:89:04:fb:19:0d:cd:0a:ef:2c:53:94:89:87:20:32:
44:cc:0a:61:31:f1:34:e9:a9:09:ad:b2:e9:fe:cb:fd:e1:7f:
06:ad:bc:5c:04:ef:c2:5a:d3:77:16:c3:4d:17:c6:8c:50:ff:
e3:be:3a:d8:9c:42:91:e6:19:dc:8a:2d:ee:b6:14:c3:e5:0c:
ef:c4:f9:b7:2c:b1:d8:1f:2c:33:e3:e3:39:3c:7c:77:f0:7c:
81:42:b6:c8:3e:f4:e4:15:78:a5:21:7b:5f:d1:cf:b5:5e:68:
25:bd:b5:af:6f:d5:e9:b6:65:d2:df:ec:89:d4:bf:d0:a3:85:
fe:71:6a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:13 2025 by rpki-client