Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier: YOmi2R51AHXvk0rvWTIojiLUkGz7zijfBY3cOTbkwjU=
Subject key identifier: 99:54:82:3C:E7:C1:58:06:CA:FE:C6:35:26:DB:B1:ED:B5:E8:F3:D2
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 019A25536005AC3430BD6DE912D0BE5E6566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number: 168A
Signing time: Mon 27 Oct 2025 11:00:12 +0000
Manifest this update: Mon 27 Oct 2025 11:00:12 +0000
Manifest next update: Tue 28 Oct 2025 11:00:12 +0000
Files and hashes: 1: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (hash: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=)
2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: FdX40MB5MIP7ygFGXQgZhR30vpGMKj8qEVNsXMG/i3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:60:05:ac:34:30:bd:6d:e9:12:d0:be:5e:65:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Oct 27 11:00:12 2025 GMT
Not After : Oct 28 11:00:12 2025 GMT
Subject: CN=9954823ce7c15806cafec63526dbb1edb5e8f3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:2d:63:5e:42:8f:f0:bd:70:ac:87:8a:f3:
3a:b3:9c:2f:4c:75:b7:25:96:56:30:71:61:b4:b2:
3c:1f:6b:16:b0:b0:8a:39:ab:70:78:9e:86:3c:f9:
5a:e0:b0:16:2f:38:53:aa:0f:56:2c:6e:f4:4b:f9:
e8:5c:9b:0c:75:58:23:93:90:78:53:7f:b7:f5:24:
19:5a:e1:32:88:55:ee:aa:96:92:43:5b:84:ab:4b:
bd:db:e1:cc:09:af:a7:86:fd:69:a7:45:92:9e:f0:
26:c2:a5:7a:d3:0e:a1:30:e5:e9:93:16:ca:94:55:
c1:8c:64:0b:03:b5:33:92:e5:93:aa:5e:81:d4:7c:
d1:17:40:95:2f:04:f5:79:3f:b6:01:56:f5:15:bd:
0f:66:ca:2f:60:4e:2f:0b:bb:6c:c4:22:f6:ac:13:
a8:ff:73:61:51:b6:5f:3a:fd:77:f1:52:48:f4:f2:
ee:81:52:23:79:7e:db:d5:c1:fb:dd:67:59:97:9b:
d6:c4:22:20:e8:ae:18:ff:95:2c:0c:59:d1:6b:4b:
bc:85:9e:15:be:7e:fb:6f:5f:74:43:c7:e9:95:38:
14:20:ad:f3:d7:3b:52:b7:36:a9:3a:a9:20:72:20:
9a:dd:7c:5c:e1:ab:09:a5:bb:19:c7:1a:c4:7e:7b:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:82:3C:E7:C1:58:06:CA:FE:C6:35:26:DB:B1:ED:B5:E8:F3:D2
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5e:f7:95:bd:b1:5b:7e:db:dd:fd:9f:8d:d0:89:a2:c5:33:
a8:f2:6c:86:e7:36:cd:60:9b:cb:e4:4e:e3:50:57:ca:62:33:
57:b0:af:18:c4:0a:3c:51:61:36:17:ce:e9:99:8b:e8:d3:ab:
6d:c8:08:9a:e7:86:65:0e:40:0d:5a:74:a5:16:1c:cf:75:ce:
ca:15:05:f8:7f:47:0e:65:ba:9f:83:a8:9d:08:a0:49:6a:d3:
a1:4b:f0:ef:f0:65:02:12:a6:7c:b9:83:cf:4b:bf:73:f9:6f:
cc:77:f8:32:ed:19:b4:90:e8:aa:ef:df:ae:76:97:e4:93:f5:
96:f0:40:01:0d:9d:86:82:ba:6d:26:f0:4d:af:5b:a7:a7:60:
ce:a3:f2:b9:1c:f7:d2:ab:aa:d9:e1:88:f7:a7:0c:4e:62:e2:
17:3f:d7:75:9f:53:80:f4:0a:f9:be:72:00:3a:da:99:44:bb:
a4:1e:f1:12:18:43:c1:f0:15:aa:ef:cd:c8:7b:0d:48:6f:ae:
39:8f:b8:77:94:63:1f:4c:87:9d:77:f6:f9:8d:e8:68:91:b0:
70:51:95:11:fc:54:2b:86:45:5c:b9:8d:44:72:34:0a:95:1b:
0c:88:a6:11:fd:b0:67:bc:aa:62:e9:b4:3b:66:db:e0:d0:fe:
c9:21:f8:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU2AFrDQwvW3pEtC+XmVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOTJkZjc2MTBmMDQ4ZjQzYmY0NGMzMzZkNDFjNmMxMTU3
ZWYwZTIwHhcNMjUxMDI3MTEwMDEyWhcNMjUxMDI4MTEwMDEyWjAzMTEwLwYDVQQD
Eyg5OTU0ODIzY2U3YzE1ODA2Y2FmZWM2MzUyNmRiYjFlZGI1ZThmM2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplotY15Cj/C9cKyHivM6s5wvTHW3
JZZWMHFhtLI8H2sWsLCKOatweJ6GPPla4LAWLzhTqg9WLG70S/noXJsMdVgjk5B4
U3+39SQZWuEyiFXuqpaSQ1uEq0u92+HMCa+nhv1pp0WSnvAmwqV60w6hMOXpkxbK
lFXBjGQLA7UzkuWTql6B1HzRF0CVLwT1eT+2AVb1Fb0PZsovYE4vC7tsxCL2rBOo
/3NhUbZfOv138VJI9PLugVIjeX7b1cH73WdZl5vWxCIg6K4Y/5UsDFnRa0u8hZ4V
vn77b190Q8fplTgUIK3z1ztStzapOqkgciCa3Xxc4asJpbsZxxrEfnuOyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlUgjznwVgGyv7GNSbbse216PPSMB8GA1UdIwQY
MBaAFH+S33YQ8Ej0O/RMM21BxsEVfvDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEt
N2Y3MmY0NGI4OTgyLzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEtN2Y3MmY0NGI4OTgy
LzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ173lb2x
W37b3f2fjdCJosUzqPJshuc2zWCby+RO41BXymIzV7CvGMQKPFFhNhfO6ZmL6NOr
bcgImueGZQ5ADVp0pRYcz3XOyhUF+H9HDmW6n4OonQigSWrToUvw7/BlAhKmfLmD
z0u/c/lvzHf4Mu0ZtJDoqu/frnaX5JP1lvBAAQ2dhoK6bSbwTa9bp6dgzqPyuRz3
0quq2eGI96cMTmLiFz/XdZ9TgPQK+b5yADramUS7pB7xEhhDwfAVqu/NyHsNSG+u
OY+4d5RjH0yHnXf2+Y3oaJGwcFGVEfxUK4ZFXLmNRHI0CpUbDIimEf2wZ7yqYum0
O2bb4ND+ySH4FA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:36 2025 by rpki-client