Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: ZacJjKqYPYbl/znx4CvkcNACVyo3h4h3VC3fqOcg0wE=
Subject key identifier: 27:24:70:D4:7C:2F:EE:EC:18:EC:62:02:D6:D4:5D:55:9A:B2:10:FB
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 019A239C3457B2897EE2CD05E2C55C763D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 03DA
Signing time: Mon 27 Oct 2025 03:00:30 +0000
Manifest this update: Mon 27 Oct 2025 03:00:30 +0000
Manifest next update: Tue 28 Oct 2025 03:00:30 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: Uwx5eF/9htKcG+Nk+/YxyOQjhI2Q2vs8E8md4ISi3OY=)
2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:34:57:b2:89:7e:e2:cd:05:e2:c5:5c:76:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Oct 27 03:00:30 2025 GMT
Not After : Oct 28 03:00:30 2025 GMT
Subject: CN=272470d47c2feeec18ec6202d6d45d559ab210fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ce:1a:1b:f0:0c:cc:26:4d:41:a1:20:4d:ce:
f7:e9:1f:07:69:38:ff:db:42:5b:c4:d7:b5:b7:b9:
d1:35:80:60:c4:76:c7:0b:94:4c:c1:14:5c:35:39:
19:af:36:cf:b5:ea:e0:30:08:a6:db:92:9f:d2:e1:
c8:0c:69:c4:2c:51:2b:23:10:ee:ce:be:8b:8f:88:
54:fc:89:41:bc:9e:ca:c5:f9:ac:ed:19:30:7c:f0:
b5:a6:51:9f:33:be:8a:62:5e:7b:dd:3a:57:97:8b:
0f:f1:10:05:fa:f7:5e:6e:7a:6d:a6:fa:75:1f:63:
69:30:85:b1:74:d5:8b:e0:e4:4a:be:bd:88:5c:0f:
94:83:90:66:c3:b9:7a:db:20:74:63:e6:5c:c3:88:
ca:d3:82:e8:6b:36:41:1b:0e:0a:73:fd:9a:91:21:
d8:69:bc:16:71:ae:c0:29:c9:7c:85:b6:39:18:48:
7d:a0:ce:9f:87:9c:58:d0:55:21:20:e3:4c:c4:88:
b4:b8:1a:df:04:58:26:78:81:e4:9e:a6:05:c8:52:
60:72:9e:2a:2a:6a:ed:7d:77:69:f3:55:17:62:17:
d6:ce:a0:70:e1:ef:8a:23:f3:cf:55:00:a0:41:fa:
b5:37:03:75:82:23:8d:48:80:0a:8a:ef:23:87:05:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:24:70:D4:7C:2F:EE:EC:18:EC:62:02:D6:D4:5D:55:9A:B2:10:FB
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:40:f7:e1:0a:04:ff:8f:3c:79:f3:07:44:36:2f:03:af:52:
ab:da:ad:42:a9:4e:8c:82:0e:60:05:f0:1f:5a:e8:57:85:86:
0f:54:2d:bb:3b:95:a8:dd:a7:25:b9:a2:0e:53:8d:e0:7f:f4:
79:91:a4:6c:22:de:bb:b5:33:ba:24:d6:71:b7:a4:10:bc:f3:
51:d3:8d:b6:bb:d1:b7:19:a0:34:37:12:7f:52:e8:f4:54:56:
5b:2c:c8:f2:c6:13:f6:aa:1d:55:12:19:87:89:a4:e7:a9:25:
d0:6b:39:37:42:d6:d1:ec:08:75:ed:dc:ab:84:41:d0:e6:42:
a8:83:8a:34:31:03:fc:62:7b:b0:76:04:0b:2e:4f:8f:b3:9e:
f7:90:4d:70:b9:d9:9a:87:2a:81:eb:1b:2b:41:35:d6:a5:95:
aa:a9:7a:df:3e:2a:bc:3f:ca:2f:ff:4d:e5:a7:36:29:19:18:
14:c0:e0:f8:c5:20:56:6c:b6:96:7c:07:6a:66:08:76:1f:90:
5f:4d:d8:61:4d:00:d7:f1:15:5a:de:73:bc:64:22:97:32:fa:
4d:39:8e:ff:fd:9b:25:9f:07:c6:a3:d0:aa:a7:2f:e9:cf:2d:
53:1b:f5:e1:83:86:3b:5f:34:ce:10:61:de:90:6e:18:dc:1a:
3b:ab:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:31 2025 by rpki-client