Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File: 5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier: QS1JspVMfaGnkX8HNfho1ZYIEAqu027M1R1NT8CU63Y=
Subject key identifier: F1:0C:1B:4E:05:40:73:80:01:25:03:98:4D:9D:F8:5C:A5:21:94:4C
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial: 019A221B5C6F1B089F57D06441742497BDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number: 124B
Signing time: Sun 26 Oct 2025 20:00:09 +0000
Manifest this update: Sun 26 Oct 2025 20:00:09 +0000
Manifest next update: Mon 27 Oct 2025 20:00:09 +0000
Files and hashes: 1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: XZyaKNl2Kkn9hS8wEWKWlFspSkEFt1fWDwzcarbxikc=)
2: Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa (hash: VlhL3UjyA76HwKj7J4uOubCMpMfYtpjO6fp5e/1c/W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:5c:6f:1b:08:9f:57:d0:64:41:74:24:97:bd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Validity
Not Before: Oct 26 20:00:09 2025 GMT
Not After : Oct 27 20:00:09 2025 GMT
Subject: CN=f10c1b4e05407380012503984d9df85ca521944c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:9a:96:a6:87:37:de:49:34:a8:aa:7e:cf:
eb:5a:92:17:9e:f9:64:43:51:37:04:30:c1:3b:44:
fd:0d:82:d7:8b:79:82:4d:05:af:63:8d:0c:9e:d6:
f5:5a:58:bd:af:f2:2a:a5:e5:b8:e5:c0:c2:b2:69:
e1:6a:3d:f5:ab:8f:06:53:1c:cf:f4:e3:11:e8:53:
75:69:ed:0b:57:3b:f0:88:07:f4:66:e0:b5:4a:87:
5b:83:3a:f7:66:d8:4f:2e:8f:c5:2f:12:88:7b:62:
63:04:c0:ed:56:ed:89:d4:cd:9d:c6:fd:18:f8:71:
85:1f:7b:dd:fc:07:6a:04:ac:49:b5:1d:8a:42:e6:
e2:a2:a2:b1:66:9d:7b:0a:46:c2:53:3a:d2:1a:50:
be:f1:33:2a:42:d9:11:26:aa:d7:e2:c2:fa:18:ed:
8d:cb:95:e0:81:75:0a:56:8d:e2:0e:b7:1e:11:04:
3d:31:b6:74:35:61:05:36:4f:8b:5a:cf:1e:47:0d:
9b:1d:e7:52:0c:12:33:74:b6:87:f4:b1:95:9b:36:
73:12:f3:4b:cd:b2:f9:f3:d7:95:cd:f6:db:e7:72:
7c:41:20:9d:8f:e3:8d:e7:61:03:89:0a:d9:a1:fc:
b7:25:cd:8f:fa:bf:2c:b8:90:5d:28:e3:fa:3b:21:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:1B:4E:05:40:73:80:01:25:03:98:4D:9D:F8:5C:A5:21:94:4C
X509v3 Authority Key Identifier:
keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:51:61:3d:9f:72:bd:84:5a:a0:c3:60:e7:56:6b:38:c9:3a:
42:d7:da:89:2f:1f:79:1a:e8:11:b8:2e:f6:81:bc:33:14:c6:
c7:cc:c4:94:94:8e:8f:97:ae:59:58:c0:2a:b7:ba:db:10:9b:
be:9e:f8:6d:68:73:6c:61:d4:f1:d3:e0:3e:41:77:e2:00:e9:
e6:01:1d:b0:9c:74:0e:59:16:5d:ab:ac:37:38:25:53:4b:15:
8b:5f:3c:c0:13:cc:c3:79:d1:a3:60:49:cf:d3:b8:fc:e6:50:
72:5e:b3:3e:4a:18:cc:3d:ad:39:77:c9:c3:26:03:ac:82:ff:
d7:64:7b:38:ca:13:be:1d:67:b1:01:5c:b6:ef:41:82:53:20:
7c:44:ad:b9:02:dc:00:c7:d4:21:49:f9:de:dd:aa:01:38:58:
32:f7:64:86:9b:80:3b:33:7e:24:a5:c0:e5:ae:94:8e:a3:02:
53:19:9c:14:4c:f8:9a:65:4b:1b:3c:51:4e:22:ad:ea:23:16:
e8:12:22:6a:c8:8d:68:12:ee:ff:5e:67:d7:50:d2:0f:71:35:
f1:06:e3:7b:06:b0:3f:bb:8f:61:ef:d1:77:b2:4c:0d:5e:0b:
7a:4a:34:1b:9b:1e:f1:14:bf:6e:fe:c5:6d:82:10:5b:27:72:
86:c2:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:37 2025 by rpki-client