Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: sRwf0pvI0oDsjsmEOjLH0a5BtC06AHaQa4oqFz+Od64=
Subject key identifier: FE:C5:DF:82:23:2D:47:49:EB:A4:EE:68:A2:A8:A3:C2:78:58:50:C4
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019A22F715F2154F0F30452F5EB689BAB9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 0781
Signing time: Mon 27 Oct 2025 00:00:09 +0000
Manifest this update: Mon 27 Oct 2025 00:00:09 +0000
Manifest next update: Tue 28 Oct 2025 00:00:09 +0000
Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: v5xrkXXWxJpYp4R7QtRgcJUMY7CiQWEb3v4+ubHtO0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:15:f2:15:4f:0f:30:45:2f:5e:b6:89:ba:b9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Oct 27 00:00:09 2025 GMT
Not After : Oct 28 00:00:09 2025 GMT
Subject: CN=fec5df82232d4749eba4ee68a2a8a3c2785850c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:c1:54:b8:50:fb:5d:3c:2e:91:c1:74:cd:
f5:d7:68:cb:09:aa:b4:fd:f4:ed:11:81:9e:ec:6b:
ca:76:32:b1:6a:09:6d:1b:54:36:bc:4c:b5:c7:76:
6f:44:80:71:21:3c:65:51:bf:88:a4:51:19:3d:39:
00:97:1e:35:08:07:f9:d5:14:7a:cb:e9:ad:07:93:
37:ae:b9:e2:0f:06:13:89:ad:a6:4c:2f:1d:67:ca:
08:fb:d1:e6:30:7a:ec:38:2c:a1:53:2d:25:a4:a8:
07:cd:4c:45:28:19:b8:9d:e9:25:73:2e:24:f1:e8:
90:33:5e:f7:1a:2e:59:04:bc:67:24:b9:0e:45:95:
c1:2f:c1:c9:6c:65:35:4f:c8:2e:8c:46:48:af:24:
42:25:d4:9c:35:b9:6b:41:71:31:74:56:98:35:57:
80:8b:0d:a1:b5:e7:36:c4:6a:31:1d:ff:95:7f:cc:
1d:26:8f:f7:bb:7b:fa:cf:42:e4:07:33:cc:3c:10:
77:10:c3:bd:32:8a:4f:92:f5:51:6b:75:96:50:dc:
17:c7:0a:a1:aa:60:46:4a:1c:d0:4d:c1:b8:48:bb:
23:c1:89:6b:08:17:cd:f0:da:10:8d:51:9f:b7:87:
fa:90:21:38:ba:dc:1f:a4:ed:cf:e3:ca:02:f7:fb:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C5:DF:82:23:2D:47:49:EB:A4:EE:68:A2:A8:A3:C2:78:58:50:C4
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ec:88:4a:3f:7e:fc:74:fa:b8:26:de:69:4c:cd:e4:b9:06:
de:52:48:46:44:45:57:df:56:a9:b9:67:ee:55:29:ed:a8:84:
81:e0:1a:6f:6e:0e:c0:3e:67:07:d2:0e:e1:ae:74:1b:ea:eb:
78:26:d7:8e:ad:81:5c:08:01:ba:26:96:67:14:4e:6d:ab:80:
b2:d5:0b:f9:ae:36:4d:89:c6:6f:38:7c:7f:59:54:bf:9d:04:
39:7c:77:21:8c:98:5c:46:49:33:45:84:91:3d:25:6e:da:35:
5d:91:96:66:75:37:07:2f:28:28:5d:2d:94:20:e7:48:ae:e8:
a4:20:9b:86:c4:7d:aa:6f:bc:3c:c1:90:63:f2:1a:c7:f6:a1:
40:62:1b:67:8b:99:ac:39:8c:0c:84:03:60:ae:27:1d:75:c6:
6f:ef:77:ff:99:a8:d8:db:68:eb:8d:f2:c7:04:22:5d:7c:ca:
92:b4:18:f8:99:67:22:b2:22:7a:da:3b:a3:42:1b:bf:21:53:
22:86:22:4c:9c:19:a8:21:fa:4b:b6:55:7c:04:61:fb:08:3c:
39:8a:e7:ac:f8:19:36:ae:ca:b9:13:ae:bd:7d:b2:9e:74:e7:
a3:4d:32:a6:45:db:ea:22:32:1a:3b:f3:67:79:f5:ed:bd:20:
65:c0:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:40 2025 by rpki-client