Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File: 5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier: tiCBhwYGK6IhOyd2CXPy0wfGrF+IrcOWdyXy3r/Wlnk=
Subject key identifier: 04:07:DA:7B:3B:92:6E:D5:56:5D:DC:5E:D2:B6:E1:11:D5:50:34:99
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial: 0199FD6AD126C5E456DC3C0D12439B82353E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number: 1238
Signing time: Sun 19 Oct 2025 17:00:59 +0000
Manifest this update: Sun 19 Oct 2025 17:00:59 +0000
Manifest next update: Mon 20 Oct 2025 17:00:59 +0000
Files and hashes: 1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: w1AUzHNE7RVHcgPRjNdXtoC+j1Xh/p0y3Y7DeLV0Gk0=)
2: Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa (hash: VlhL3UjyA76HwKj7J4uOubCMpMfYtpjO6fp5e/1c/W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d1:26:c5:e4:56:dc:3c:0d:12:43:9b:82:35:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Validity
Not Before: Oct 19 17:00:59 2025 GMT
Not After : Oct 20 17:00:59 2025 GMT
Subject: CN=0407da7b3b926ed5565ddc5ed2b6e111d5503499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:e2:16:4e:20:9d:7c:85:b7:f6:63:3a:bd:
4f:e6:4d:14:56:3f:74:c6:bc:aa:80:d0:46:24:fa:
3f:f3:b8:92:6b:f8:df:e3:ef:75:bf:1c:1c:10:4b:
1a:0f:e3:34:82:03:01:0d:ac:fe:e0:c8:55:4d:84:
18:28:1d:83:3c:ad:0a:fa:f8:d2:77:4f:6d:d7:67:
07:95:83:c7:49:05:76:c2:22:f2:0f:52:45:9f:32:
6b:59:8e:82:6c:a8:f0:b7:6f:4d:17:36:d4:df:e4:
87:26:5d:e1:56:54:f2:58:2a:cc:f9:8a:e9:cb:a9:
2c:f1:3d:15:58:ae:d5:1d:90:66:a6:df:36:e7:81:
94:b0:fb:b2:5d:50:f3:54:9d:e9:8b:7b:05:2e:31:
e0:ad:a9:73:fc:c1:27:85:e1:b1:28:10:9b:0b:f6:
f7:d0:31:22:f3:da:5b:7f:c1:13:20:a0:ab:20:99:
89:75:0b:0b:41:29:66:fd:ba:f4:4e:0f:c7:21:cf:
4d:91:56:85:1f:84:07:d1:51:60:c3:e9:55:e8:88:
e0:c5:9b:98:73:27:2d:83:86:dc:68:1f:b7:1b:24:
f7:3a:51:1a:ba:fd:41:82:17:22:81:4c:3b:6c:41:
d0:9b:bf:4e:2b:84:33:09:ca:61:82:83:85:60:fc:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:07:DA:7B:3B:92:6E:D5:56:5D:DC:5E:D2:B6:E1:11:D5:50:34:99
X509v3 Authority Key Identifier:
keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7a:52:09:07:13:4e:f6:7a:a3:38:65:ba:f9:74:61:01:83:
ee:8d:e7:b2:cd:45:79:c8:3d:dc:34:fc:43:cc:ec:3c:39:78:
43:4f:4c:e4:0e:b1:02:26:cb:02:9a:5e:16:4a:8f:23:ac:f5:
2d:b9:dd:8f:cb:e8:de:9c:c1:39:99:ca:2e:d5:a2:4e:25:2e:
08:6c:19:28:7a:92:e7:d1:35:08:ec:bf:24:05:de:86:57:7f:
ef:cc:6b:ab:88:7f:f2:49:55:b9:56:20:0d:03:8a:30:80:7f:
b8:32:1f:8d:44:72:50:db:95:f4:c7:2a:90:61:bf:c1:89:2a:
64:66:ae:30:c1:3a:92:7d:f7:d7:44:02:85:94:5e:35:1b:d9:
48:1c:b0:9f:3f:29:69:d4:ff:f5:8d:20:d5:77:f3:68:54:73:
91:62:9d:35:89:47:4e:7b:58:f8:d5:b8:0e:de:e5:d4:d9:03:
0b:9a:ca:2a:b9:88:e9:1d:d2:29:fe:9d:10:1a:df:47:a9:5a:
6e:1a:24:0d:8a:ae:04:09:6b:8d:4f:08:8a:60:84:76:b8:3b:
73:45:d0:0d:e7:6e:17:e4:db:53:18:7c:f4:9a:5f:f0:72:82:
52:64:75:61:f8:0b:3f:1b:5c:39:98:6f:6e:00:f3:93:9e:c6:
61:c2:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:50 2025 by rpki-client