Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: ueRgKR5mFj0HmFszpnOSPOCe8xh/qTYFs11niqn7gLs=
Subject key identifier: 16:0A:C1:10:A8:40:B0:2C:91:75:F4:84:1C:33:1E:D2:D7:D4:7F:AD
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 019A1FF675F2DFE0AA10F7E2ABFFA880F953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0EC3
Signing time: Sun 26 Oct 2025 10:00:36 +0000
Manifest this update: Sun 26 Oct 2025 10:00:36 +0000
Manifest next update: Mon 27 Oct 2025 10:00:36 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: tdt4GZ0pvj2hWiUcnbXyhCyEHXhwcINj+7kkcK9z4xw=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:75:f2:df:e0:aa:10:f7:e2:ab:ff:a8:80:f9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Oct 26 10:00:36 2025 GMT
Not After : Oct 27 10:00:36 2025 GMT
Subject: CN=160ac110a840b02c9175f4841c331ed2d7d47fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:a7:52:97:d1:11:81:5f:77:5c:6c:e6:98:
48:8d:c3:24:c9:4a:32:48:e9:a5:e8:3f:48:3b:36:
4e:66:c5:31:25:38:4c:7c:fd:b0:f4:38:70:96:65:
29:f6:33:35:86:0a:62:fb:6f:72:5c:a0:79:ce:b1:
18:c0:8c:45:30:42:a5:8e:40:c4:e9:8e:8b:57:aa:
b3:47:57:9b:e7:6b:70:86:ae:9d:e5:9c:3c:5d:59:
ae:ad:26:d2:b6:f0:9d:86:4f:d4:38:0e:6e:65:68:
2d:3c:ef:ee:1b:fe:76:96:88:b8:04:da:81:dd:3d:
cc:16:f4:36:8d:e1:bb:72:4e:84:b3:74:5c:1c:54:
df:5a:b6:89:68:4b:f7:29:5c:52:95:b0:70:f2:9c:
87:a7:40:00:e4:26:b9:af:fb:f9:e2:44:18:df:9f:
aa:a5:51:83:1a:e2:f2:ec:fe:02:40:0a:b8:f8:b7:
a5:d2:b3:3f:3d:98:f5:21:27:80:0e:42:d7:47:69:
35:41:e4:72:78:6e:bc:a8:4a:5f:de:37:70:6f:9d:
12:06:04:e0:ce:46:8b:35:7e:f4:ef:84:56:59:64:
ff:e5:8b:2c:26:9e:fe:8e:09:ef:9c:46:fe:61:45:
ec:13:5d:b3:21:41:fe:ba:ec:19:90:46:2f:e0:28:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0A:C1:10:A8:40:B0:2C:91:75:F4:84:1C:33:1E:D2:D7:D4:7F:AD
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:24:02:19:f8:4e:46:e9:ec:2a:05:09:4a:ba:03:af:3e:64:
11:f4:58:d3:3b:35:55:99:cc:e9:0f:58:09:75:4b:f4:75:88:
58:7e:cd:14:0d:7b:d3:49:9d:b5:cc:4f:4d:3d:92:87:4c:22:
32:ca:52:95:27:03:ec:7b:3a:93:72:9f:5a:06:30:ec:07:76:
ed:4c:2d:c2:60:ae:46:9f:14:08:5a:e3:78:91:ea:bd:2b:f5:
aa:49:68:28:ed:ec:f1:d3:89:91:c6:9c:ed:64:bf:8b:58:b7:
ea:ca:21:cc:86:bf:26:c6:cd:21:e6:ed:3d:6f:00:e8:f6:f7:
f3:2b:dc:e2:80:b7:65:8d:88:cd:27:5a:65:28:f2:59:83:a7:
e4:c8:67:d5:b0:e6:87:07:8f:ad:73:96:c3:9f:39:d6:5e:c1:
2a:f1:b3:ea:6b:e8:07:60:f0:c3:1d:ff:f0:30:b7:37:b4:88:
1f:60:0e:b5:98:93:f0:61:52:e8:7a:1c:99:2c:8d:85:b8:89:
c6:2a:ab:57:b1:8c:d1:af:94:bf:80:28:60:a5:a2:54:2b:f0:
c8:c2:7d:c9:28:54:ec:f9:d0:66:d8:52:b3:14:ef:cc:06:6f:
a5:09:8a:5b:d7:98:ef:f7:85:8f:21:18:e1:96:6a:dd:88:80:
35:d6:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:22:40 2025 by rpki-client