Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier: 7xOUcsc3nUvc3Deu24H23A8fUAMUhpTubkh4AgLso8E=
Subject key identifier: D3:A1:EC:A1:9C:B0:2C:F3:AA:3B:C7:4D:CF:C5:09:5C:12:82:62:BA
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer: /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial: 019A251CB7EC388519D6C6D897ECFB337602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number: 0DF1
Signing time: Mon 27 Oct 2025 10:00:30 +0000
Manifest this update: Mon 27 Oct 2025 10:00:30 +0000
Manifest next update: Tue 28 Oct 2025 10:00:30 +0000
Files and hashes: 1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: Q4j5QkxDdzu4zOIFyBv8GTEJq9FheIFkQXXoO/TuGNM=)
2: nD9K7BuoobBm0UoH5h6nnInzZ5M.roa (hash: n+EpS4FTLeyovvcIgss8uVwl4+ZqeSqmuV4HpNA3yWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:b7:ec:38:85:19:d6:c6:d8:97:ec:fb:33:76:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Validity
Not Before: Oct 27 10:00:30 2025 GMT
Not After : Oct 28 10:00:30 2025 GMT
Subject: CN=d3a1eca19cb02cf3aa3bc74dcfc5095c128262ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:69:f2:13:06:bd:c4:f0:23:47:43:33:a8:
d0:39:f0:62:78:a0:1d:9d:f9:b2:30:cd:5a:34:53:
ce:02:8f:24:0b:0d:50:49:f0:4c:d9:c1:68:86:cb:
63:15:80:6b:54:56:aa:73:16:01:2f:c5:e3:7c:3f:
d7:bb:42:13:bc:56:3a:80:4b:88:cb:ee:ba:c7:37:
a6:6f:c3:b0:50:60:b1:8f:d1:af:f9:ae:97:26:a4:
06:42:a0:71:87:a3:fe:94:c9:a8:6c:d4:4b:80:b8:
9b:bd:2d:f3:d4:63:e0:d3:f7:2d:d5:fb:54:41:5a:
68:54:f8:d3:39:12:ce:be:74:33:c0:f9:33:02:26:
ae:a3:68:aa:87:a5:19:4b:b2:d1:57:4a:0e:60:60:
fd:b4:9d:93:53:b5:53:45:08:59:30:a0:e2:fe:17:
16:8c:10:4c:b5:48:ad:21:59:cd:80:8d:f8:b1:6b:
19:bc:68:8c:cc:f4:13:5e:b0:52:e8:3c:4c:54:e8:
44:c8:0a:8e:99:77:01:b1:13:33:6c:73:7e:7e:e8:
28:03:6e:67:f7:4c:fe:f7:30:c7:72:d7:fc:38:76:
82:e1:68:a3:9b:27:18:06:1b:6d:4f:c3:ca:c2:e0:
bd:0c:45:38:a4:c8:01:1f:b2:63:05:73:d9:55:b8:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:EC:A1:9C:B0:2C:F3:AA:3B:C7:4D:CF:C5:09:5C:12:82:62:BA
X509v3 Authority Key Identifier:
keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:33:60:f9:bd:6d:63:b3:21:fe:f6:a6:90:3c:13:b8:95:
c3:be:f1:51:6d:0e:5f:b7:07:19:f5:31:25:ac:fe:6e:76:df:
d3:24:62:86:54:12:35:b2:6b:d6:86:c7:74:1b:8d:f5:97:2e:
ff:b5:79:6e:63:99:c7:a3:ef:24:9a:ac:11:5a:b6:a8:c3:4f:
32:46:33:4b:af:6f:3b:41:a9:f7:1a:ca:fb:2b:d5:b1:16:e6:
b4:7f:db:00:73:c7:d3:11:4d:be:7f:2e:00:be:1b:90:5f:12:
75:c7:80:55:fc:6f:c6:8e:2e:c4:29:3a:c8:82:4c:dd:0e:a6:
64:25:cf:cc:50:93:95:ab:b0:40:bd:6d:11:71:56:fe:df:ae:
39:97:4e:6b:ae:09:7e:b9:b5:d1:dc:82:9d:98:18:68:ca:16:
0a:b5:1f:eb:bf:14:42:30:5e:03:e6:28:7e:f8:35:23:5a:5e:
cb:7e:44:8f:3a:79:86:f3:dd:7e:b7:d4:91:9e:74:57:e4:b5:
d3:5a:d7:3c:13:27:a0:04:9b:7c:f6:16:eb:df:48:6a:38:06:
56:ff:e0:e3:87:0a:df:fd:f9:8a:b2:f2:cb:b9:c1:34:76:06:
f3:b9:ce:df:74:8f:49:9d:79:d5:86:e1:6b:94:e8:68:cc:e6:
f0:c0:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:31:09 2025 by rpki-client