Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier: ZhplgprRPXAuYFjQqS1LRL1rrjyrSkMqZLUWc+xi7hw=
Subject key identifier: 12:AA:F1:81:24:6C:60:99:53:56:90:2C:63:4B:A2:D9:F5:FC:46:E0
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 0199C47D1EFF131C9E39751C87037962BCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number: 02
Signing time: Wed 08 Oct 2025 15:42:38 +0000
Manifest this update: Wed 08 Oct 2025 15:42:38 +0000
Manifest next update: Thu 09 Oct 2025 15:42:38 +0000
Files and hashes: 1: 4T1bySiGudbsbv8Y6SYMT68IAlk.roa (hash: j45Gs5R+QR12QMbnB1e3ALfJJc32d03rqtj+AWZZhSU=)
2: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: 84jfY7tyjBe6+kmRBKJa+6C8FATALv6NyvC954ErkgQ=)
3: yLhKfT4WYSZkn2VNCGfPfTmwkYE.roa (hash: 8tnnWUxQ+gmE22xkxlM/+md2moZokj3FfemqmCXdm1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:7d:1e:ff:13:1c:9e:39:75:1c:87:03:79:62:bc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: Oct 8 15:42:38 2025 GMT
Not After : Oct 9 15:42:38 2025 GMT
Subject: CN=12aaf181246c60995356902c634ba2d9f5fc46e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:ec:4c:1b:2a:11:d0:6d:64:37:cb:64:28:
eb:ca:28:05:51:13:37:ea:7e:a0:37:c5:cb:e4:97:
2c:18:a5:9e:e5:aa:11:eb:3e:b9:7d:16:f6:72:cd:
1d:18:4d:cc:83:5d:26:e7:e3:08:5a:d9:84:36:f1:
e0:ba:ad:65:b7:58:96:78:e8:c8:24:d9:b9:1c:8a:
c3:11:aa:c7:37:8d:84:d9:da:95:c8:3a:14:d8:aa:
d2:e8:a1:53:3b:e9:3c:fb:eb:4e:ac:03:64:71:67:
70:32:57:23:45:11:34:fd:a9:93:be:17:26:40:90:
69:0b:a5:32:e7:c8:2f:ec:67:99:cf:a4:3c:73:fa:
38:20:b5:16:7c:11:15:98:e4:78:1f:bd:1b:44:61:
b7:3a:4e:2b:3c:66:0a:e8:17:26:43:a3:7a:cd:a9:
dd:8a:09:f3:6c:a1:dc:27:c7:07:52:12:e3:39:f9:
c4:04:04:f2:0a:e1:14:30:1b:e7:d4:a9:7d:5f:6d:
27:7b:ed:86:34:b3:5c:20:ff:27:fa:f5:77:ae:70:
1e:35:15:dd:34:d0:e4:98:8a:b1:9b:bf:f4:0e:0a:
b7:8c:2b:8b:d6:aa:ec:66:2f:f6:0c:6f:ff:35:f2:
60:6a:c3:58:12:84:f9:15:76:2d:75:ee:17:b1:51:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:F1:81:24:6C:60:99:53:56:90:2C:63:4B:A2:D9:F5:FC:46:E0
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:96:d0:aa:38:31:52:7d:94:51:18:30:cd:4f:47:98:91:72:
dd:29:bd:84:10:35:55:c5:46:52:46:a0:a8:57:01:76:12:e4:
19:92:33:94:a9:23:65:36:c5:8d:ba:2b:df:41:6b:d8:12:53:
ab:8f:77:84:50:01:30:98:3a:d0:cf:7a:a0:95:80:42:cb:4c:
96:c1:5c:ec:cb:d4:cb:9d:4a:5c:e3:33:19:c8:36:2d:5c:6f:
7f:d6:eb:a7:8d:84:57:ea:74:a6:3c:8c:ff:f7:7a:2b:2b:97:
b1:57:61:ca:e1:ff:ec:f5:d9:1c:fe:fe:90:78:3e:55:1b:d0:
5f:47:5f:b0:d6:97:61:11:91:0e:4d:30:3a:a5:31:4a:f7:8a:
2f:27:2d:17:5d:e6:8d:6a:79:e9:db:cf:a1:d9:55:87:fc:48:
b1:32:f9:6d:75:f7:e5:8d:45:6c:c4:36:ae:07:95:c6:0d:1e:
5a:4e:68:49:cb:64:a9:ff:b1:3e:4c:e0:5f:1e:3a:80:4f:38:
04:b4:28:1f:55:c9:10:13:fd:1b:03:99:69:3b:eb:c6:bb:6a:
0a:45:ce:89:96:10:32:86:58:b9:0f:9e:ca:33:65:26:59:7e:
5c:01:a0:d6:4a:24:c3:9c:e5:0a:49:b1:1d:4b:f9:1c:88:62:
d0:9f:81:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:11:25 2025 by rpki-client