Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: Z7rV/IE+ahWL5uTRHVa9uo5vNLa/RUoVgHBkdYP7me0=
Subject key identifier: 00:41:11:37:5B:DA:17:68:E0:D0:8A:21:62:C7:1B:09:46:DA:4B:B5
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019A18E1C7DD3262D7AE16A2CACB08FFF8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 16F1
Signing time: Sat 25 Oct 2025 01:00:41 +0000
Manifest this update: Sat 25 Oct 2025 01:00:41 +0000
Manifest next update: Sun 26 Oct 2025 01:00:41 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: 0IHvC+7513iI1voizI7p3TEzNX7lpS4nk+/2uWBdHDs=)
2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e1:c7:dd:32:62:d7:ae:16:a2:ca:cb:08:ff:f8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Oct 25 01:00:41 2025 GMT
Not After : Oct 26 01:00:41 2025 GMT
Subject: CN=004111375bda1768e0d08a2162c71b0946da4bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:38:a5:57:83:4c:b8:d9:a7:15:51:4b:e9:
9a:65:2b:e0:16:35:52:03:eb:68:04:ca:59:80:f5:
c1:44:80:c5:05:61:e7:dd:4f:ff:36:ca:38:57:bf:
4b:23:ee:f2:a6:51:7f:ce:34:6a:9b:d3:3e:18:c3:
39:7c:67:e2:e1:bd:5f:8f:1a:3a:f1:e4:52:48:07:
33:bc:44:b4:63:73:a0:d6:ed:19:46:fe:da:b4:9c:
8b:48:07:d4:6c:a3:33:32:72:dd:4f:29:6b:f3:e9:
9a:22:d6:1b:e5:3c:aa:b1:d9:82:44:a8:a3:09:96:
af:8a:4e:b1:8e:47:8e:b3:60:dd:15:dc:de:d1:a4:
59:dd:1f:0f:8e:05:a3:dc:17:26:da:21:10:aa:b9:
46:af:f7:c3:14:9f:94:08:a6:29:14:22:04:c1:ce:
d6:40:d8:af:26:7f:b4:7b:53:f0:a7:d1:47:da:35:
9f:e2:8a:43:2f:e4:f2:3b:e4:79:30:79:54:f6:42:
b2:d6:61:3e:f6:ac:01:17:c1:04:81:cd:3c:67:56:
fe:7b:07:df:40:64:93:71:8f:2c:68:63:cf:fc:67:
58:04:d7:73:02:3f:cd:b3:47:a9:84:88:59:59:2c:
80:25:f0:a3:e8:94:ce:26:3f:49:2f:ee:fe:8d:ff:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:41:11:37:5B:DA:17:68:E0:D0:8A:21:62:C7:1B:09:46:DA:4B:B5
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8f:8a:6c:0d:38:22:4b:53:19:74:38:be:78:4f:56:f8:47:
11:3d:30:39:05:85:98:b2:df:be:d7:e1:80:d2:c4:e8:9a:70:
91:06:38:d2:bc:e2:5b:94:0b:67:dc:9f:0d:1b:4b:79:dd:c0:
12:aa:a5:f4:37:4a:d2:e4:fd:aa:0a:8f:c9:2c:1a:2a:86:f8:
d0:02:d3:f9:51:90:d3:37:a1:c0:f8:d2:2a:7f:6d:e2:d6:3b:
8a:56:71:34:1f:04:b9:6d:fa:a7:6d:09:52:ed:4f:19:d9:e1:
b8:1c:f5:1d:bc:3f:a1:c3:06:ae:80:9d:0a:d8:85:90:a4:a0:
a3:b5:e1:77:92:e9:27:9c:87:54:2e:5e:0c:b8:2a:6b:ec:c9:
f1:4f:33:6c:d6:4b:7a:6c:72:3f:49:ac:07:13:5b:10:34:95:
06:11:79:3c:08:99:a3:5d:c8:77:25:f3:b6:a4:e9:1e:08:bd:
31:a7:da:81:8b:50:22:f8:15:9d:04:a5:4c:33:56:90:3e:1f:
88:8a:c7:fb:3a:c6:15:f3:eb:60:bc:78:da:1e:0c:b7:4b:23:
fc:e1:77:8a:c3:f8:e0:ab:33:6e:86:74:a2:45:9a:00:0f:d5:
a3:6a:84:21:e7:31:41:bf:42:4c:1d:55:aa:c6:f3:65:ed:b7:
2a:0a:d2:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoY4cfdMmLXrhaiyssI//jkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0
ZjM1NDQwHhcNMjUxMDI1MDEwMDQxWhcNMjUxMDI2MDEwMDQxWjAzMTEwLwYDVQQD
EygwMDQxMTEzNzViZGExNzY4ZTBkMDhhMjE2MmM3MWIwOTQ2ZGE0YmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzig4pVeDTLjZpxVRS+maZSvgFjVS
A+toBMpZgPXBRIDFBWHn3U//Nso4V79LI+7yplF/zjRqm9M+GMM5fGfi4b1fjxo6
8eRSSAczvES0Y3Og1u0ZRv7atJyLSAfUbKMzMnLdTylr8+maItYb5TyqsdmCRKij
CZavik6xjkeOs2DdFdze0aRZ3R8PjgWj3Bcm2iEQqrlGr/fDFJ+UCKYpFCIEwc7W
QNivJn+0e1Pwp9FH2jWf4opDL+TyO+R5MHlU9kKy1mE+9qwBF8EEgc08Z1b+ewff
QGSTcY8saGPP/GdYBNdzAj/Ns0ephIhZWSyAJfCj6JTOJj9JL+7+jf9OOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABBETdb2hdo4NCKIWLHGwlG2ku1MB8GA1UdIwQY
MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt
MWQ2NjZjNDIyYzZhLzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh
LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADY+KbA04
IktTGXQ4vnhPVvhHET0wOQWFmLLfvtfhgNLE6JpwkQY40rziW5QLZ9yfDRtLed3A
Eqql9DdK0uT9qgqPySwaKob40ALT+VGQ0zehwPjSKn9t4tY7ilZxNB8EuW36p20J
Uu1PGdnhuBz1Hbw/ocMGroCdCtiFkKSgo7Xhd5LpJ5yHVC5eDLgqa+zJ8U8zbNZL
emxyP0msBxNbEDSVBhF5PAiZo13IdyXztqTpHgi9MafagYtQIvgVnQSlTDNWkD4f
iIrH+zrGFfPrYLx42h4Mt0sj/OF3isP44KszboZ0okWaAA/Vo2qEIecxQb9CTB1V
qsbzZe23KgrS5Q==
-----END CERTIFICATE-----
Generated at Sat Oct 25 09:00:14 2025 by rpki-client