Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: qPxWf67rDPQoU7ftOy1pA0rctxgEYV6VI82pw6eikQQ=
Subject key identifier: 45:D3:2D:AB:10:EE:52:6F:97:F5:07:18:B6:9A:21:E5:91:9A:AE:B5
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019A23D366F8032F30AD212A3FC5D64B2785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 04:00:48 +0000
Manifest this update: Mon 27 Oct 2025 04:00:48 +0000
Manifest next update: Tue 28 Oct 2025 04:00:48 +0000
Files and hashes: 1: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: cUHm7RYvfOpQTCfYJwOfXpC5vxf9EeGbCWra6JrfiJ4=)
2: fa2xL7e2aYTTbMhl_eMXhRGEZpA.roa (hash: 4D/qV6WfDp4qjlu1okYKw3p24HY8ZFTwy17zgAk2RbY=)
3: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:66:f8:03:2f:30:ad:21:2a:3f:c5:d6:4b:27:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Oct 27 04:00:48 2025 GMT
Not After : Oct 28 04:00:48 2025 GMT
Subject: CN=45d32dab10ee526f97f50718b69a21e5919aaeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1e:69:f7:93:59:45:98:7d:89:b3:01:f2:d8:
c4:e2:f5:67:42:f6:9e:80:eb:21:df:88:3d:f5:72:
6b:d2:2c:f1:d7:ed:23:1c:50:16:15:35:17:84:29:
4e:82:c4:06:2a:c8:ec:0d:f6:46:c1:4f:4c:fb:1c:
a8:8a:3e:89:43:12:74:88:c4:2a:fd:9f:af:36:c0:
9a:3b:7f:af:b2:51:b2:25:b8:d9:ba:d4:0b:e2:c3:
31:67:d0:c3:ce:0d:19:f3:fc:f5:d4:09:00:8d:bf:
16:28:71:1c:aa:62:51:76:71:26:3b:fd:23:67:c8:
d1:c4:a9:8b:a4:d7:f9:bf:fe:33:90:41:7d:09:2d:
03:41:8d:e1:f1:0a:45:5a:b3:cb:d6:83:42:df:65:
1a:4d:68:a7:1b:fe:23:50:cd:a7:c9:28:9a:e5:08:
f9:dd:24:5b:25:f7:1a:ea:eb:ef:f4:68:e5:49:55:
9c:07:d7:fd:06:a6:72:1f:fd:0f:49:a6:8e:de:c4:
e5:19:2d:49:bd:ba:ff:bd:ae:2a:7c:7c:d8:f6:80:
51:df:2a:c0:de:15:fb:06:e5:fe:2f:dd:1b:68:10:
c5:0a:e5:56:ee:81:c7:28:4c:24:f3:90:31:0d:36:
82:1f:4b:df:79:90:b0:bb:0a:5f:8f:b4:cf:bd:12:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D3:2D:AB:10:EE:52:6F:97:F5:07:18:B6:9A:21:E5:91:9A:AE:B5
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c9:d5:63:0a:27:b5:fd:5c:21:db:16:6e:20:e7:4d:c2:ff:
a0:7a:d1:17:bd:3a:7e:9a:fa:e2:33:f5:c9:e3:c9:17:49:11:
a1:5c:98:4d:52:3d:31:34:9d:fd:fd:84:24:2d:d1:ef:ef:f5:
97:76:86:7a:4e:c8:c0:0b:be:f2:72:e5:d2:73:45:5b:73:c8:
de:b8:cf:ec:6a:d8:a9:ce:68:a3:05:4a:b1:93:98:05:62:62:
3d:74:4d:eb:6e:9b:a7:da:8d:ac:04:43:d7:37:25:ed:8e:b5:
cc:9d:7c:46:95:db:a4:12:86:51:bd:13:49:2b:3b:c8:87:ca:
85:46:d7:66:8f:a1:4d:39:4e:ed:f1:58:7b:0d:82:10:1c:38:
bc:89:d7:60:25:81:9e:6b:55:d0:4b:84:2f:a3:6b:aa:97:95:
e5:f9:f9:64:68:a9:82:a4:6c:29:cc:82:f4:7c:aa:8d:e7:04:
59:ff:e7:3e:97:33:f9:12:35:09:fc:f9:80:c0:36:e6:38:70:
78:e1:5b:05:12:5d:79:29:78:c3:86:2e:6a:73:7f:9e:04:a4:
cc:81:3d:6d:4e:9c:cd:43:0e:b1:96:c5:47:40:1b:ca:2b:45:
3b:74:89:13:8b:53:60:fb:5a:3a:4c:f3:3b:c6:fd:fc:01:20:
7a:78:23:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:45 2025 by rpki-client