Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: p2Y+gixpLNS2BREcK8+Pb42p+1Aq416RQ28vM5tBJZ8=
Subject key identifier: 9C:5A:0C:22:BC:DB:24:A2:89:50:8A:5A:BC:2D:58:8B:95:DD:F7:F4
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 019939B8E334C57BD61C59D9E07165F769B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 06AC
Signing time: Thu 11 Sep 2025 17:00:42 +0000
Manifest this update: Thu 11 Sep 2025 17:00:42 +0000
Manifest next update: Fri 12 Sep 2025 17:00:42 +0000
Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: 388m8Pc00iaGPwfEqMnRJs2fwQayr6icuo4BBRmTsZc=)
2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:b8:e3:34:c5:7b:d6:1c:59:d9:e0:71:65:f7:69:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Sep 11 17:00:42 2025 GMT
Not After : Sep 12 17:00:42 2025 GMT
Subject: CN=9c5a0c22bcdb24a289508a5abc2d588b95ddf7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:37:0d:d2:3e:25:60:6c:20:05:bb:65:1b:
a0:50:2b:98:7d:61:a1:b6:66:98:33:85:47:b6:f2:
59:4a:05:94:af:5a:67:0f:b8:e8:d4:16:de:c1:75:
5b:6a:bd:08:44:a7:64:ae:86:0c:78:9b:08:f1:01:
38:23:2a:27:d0:44:df:db:5a:bc:0c:13:16:5b:36:
0e:53:d2:71:27:bc:1d:a7:db:d5:25:3b:8e:14:f8:
1a:05:fc:cd:5c:8a:0e:be:0f:03:d3:82:00:cc:04:
91:1a:79:f7:d7:aa:cd:3d:bc:6f:32:8b:3e:f2:3d:
8d:f2:3f:a2:99:19:96:61:94:e2:8e:d9:04:e5:99:
fa:f2:b2:97:a1:4c:e3:0a:ed:e7:ad:92:88:09:03:
18:dd:ce:94:d8:f5:4c:37:db:94:f2:19:a0:5c:4a:
de:31:99:ba:53:d6:63:13:7a:9c:0a:30:88:5b:5a:
7a:a3:38:2f:bc:05:2c:16:da:34:c6:e4:0a:6f:58:
3e:0f:69:13:f9:b3:26:91:68:4b:a2:a5:d7:c8:9c:
de:71:d2:8c:af:de:a6:43:eb:29:ad:21:59:eb:b9:
0d:ba:4d:78:a1:ae:b7:43:cc:04:5b:87:0d:b8:7c:
c2:9c:e0:d1:68:3f:f4:16:cd:7a:3a:2f:ba:2e:1d:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:0C:22:BC:DB:24:A2:89:50:8A:5A:BC:2D:58:8B:95:DD:F7:F4
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e4:96:da:27:c6:6e:7f:7e:5b:f1:fc:07:c1:c3:57:7e:11:
71:4c:b2:bb:14:ff:79:b9:8f:7a:1c:9c:b6:6a:c7:3f:a3:df:
99:73:ca:ae:32:78:93:df:b0:98:90:f6:d8:b5:fe:45:eb:b7:
44:55:f1:9d:5a:f0:84:29:1f:b1:11:d5:70:b0:01:30:7c:40:
44:b0:85:42:6c:28:df:b0:6d:1c:d2:62:06:24:f7:ec:09:9c:
15:59:71:c5:2d:9b:bc:67:27:c8:61:6e:f1:2d:8a:c1:94:2c:
0f:73:6a:36:16:cb:1b:89:d1:f2:bc:07:ae:a7:76:b0:c8:05:
4d:ca:f3:b2:63:c0:c2:5c:11:69:8f:cd:98:bd:ad:8d:d2:c0:
ab:b8:d3:0b:2f:e0:e4:e5:8d:d3:96:cc:e0:b4:60:26:2e:c5:
b3:98:ba:d6:2e:07:1f:65:34:d0:67:59:ae:8b:c6:d9:08:d2:
80:49:e3:ba:49:b2:5f:b5:b0:98:5d:c8:64:a1:a4:67:9e:07:
cb:4e:f6:f0:ab:a1:1b:bc:f0:4b:9a:41:da:0f:50:9c:52:1f:
01:29:12:4c:9b:77:44:fd:f0:97:1a:4b:fe:a4:ba:fb:b4:3a:
c7:84:3b:22:c5:c0:b1:b7:aa:c2:0b:cc:43:ab:09:aa:24:73:
2b:05:b8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 00:59:25 2025 by rpki-client