Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: 0AfI++SSjmPZ8DiFUzcJy9nRUlF3yw45HPTNIAVFpRE=
Subject key identifier: 1C:0C:F1:1D:A0:44:7D:6B:50:BD:52:30:68:45:BF:2D:25:2D:5D:AA
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019A299E47C0B54748DEEA973C213FF7910A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 07:00:30 +0000
Manifest this update: Tue 28 Oct 2025 07:00:30 +0000
Manifest next update: Wed 29 Oct 2025 07:00:30 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: TYi25JIHRfEY6Mj4WHteHulOPeabBl6b1VhguhKITrM=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:47:c0:b5:47:48:de:ea:97:3c:21:3f:f7:91:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Oct 28 07:00:30 2025 GMT
Not After : Oct 29 07:00:30 2025 GMT
Subject: CN=1c0cf11da0447d6b50bd52306845bf2d252d5daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:ac:ac:e3:27:c4:48:82:8b:92:0b:2c:c8:
ff:73:60:a3:dc:89:15:b9:e7:a4:e7:b5:9a:fe:60:
b2:96:1e:6f:99:a4:3c:99:2c:0a:50:3d:8f:29:24:
86:5e:a2:df:cb:cb:4a:8c:b9:6a:94:35:1a:b3:8b:
0e:2c:a3:a0:03:52:4b:d2:f7:65:f7:38:96:0d:8a:
65:64:5c:41:71:85:e6:d8:b9:20:02:5f:33:4e:ad:
5c:6f:83:13:ff:54:ac:9b:44:d8:d6:ca:9d:03:fd:
d5:2b:d0:1e:7a:84:4e:81:e5:f4:82:d3:26:08:1a:
23:80:7e:bd:a2:b4:12:9e:d1:21:84:4e:dd:46:58:
52:8d:fb:55:b3:c6:55:53:2f:37:10:f7:a9:95:88:
7c:ad:81:71:64:b4:68:0d:44:ed:39:2a:5d:a4:00:
6b:19:18:49:cc:39:ce:b7:49:7f:ad:50:e7:10:d8:
26:4e:6d:7b:c9:07:41:51:03:1e:bf:d8:b9:26:4a:
35:b7:77:8e:d2:e1:e6:e8:6e:3f:46:f1:5e:a3:5f:
d2:92:27:ed:7b:40:93:d7:e9:d7:83:4f:5f:19:a1:
e6:4f:6b:f0:61:0e:99:f5:70:b5:ac:01:a3:46:c1:
0c:92:94:af:4b:13:3c:80:d6:7d:b1:ab:40:ac:ca:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0C:F1:1D:A0:44:7D:6B:50:BD:52:30:68:45:BF:2D:25:2D:5D:AA
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a2:d3:a9:39:a7:a1:e2:18:19:bc:fe:a6:35:fc:8b:09:4f:
6f:c1:76:66:14:e4:05:e0:3b:ff:0a:73:8c:51:0f:a5:f6:fa:
be:a0:a4:7d:97:44:20:53:57:26:07:da:08:9a:d5:41:08:50:
5a:e7:be:3b:bd:e0:f1:84:e4:c0:23:69:b6:2e:62:e9:44:d4:
b6:72:59:ac:7c:3b:86:b5:8c:73:c7:cf:b7:dc:94:a0:99:b0:
08:f9:04:42:4e:7f:0e:da:72:d5:d3:e2:a9:12:5d:9f:33:7e:
42:ef:ec:ce:d8:73:af:51:7d:1b:72:35:89:da:e6:8d:14:d3:
a8:f2:c7:5c:7f:67:69:43:a6:54:15:2d:75:5c:42:83:47:51:
9f:6c:de:b6:02:56:47:13:e4:58:48:f9:51:b8:9e:4a:9d:6c:
90:12:cf:17:d5:81:18:a9:c9:48:39:4e:ad:b5:1c:59:d2:fc:
26:d9:e9:d5:30:c4:2d:14:04:63:4e:b5:b2:8e:01:af:f3:d8:
6d:ae:96:1a:cd:80:bd:3d:96:bc:f4:f8:5d:4d:87:3a:d3:f5:
06:62:2b:0f:d8:4d:8d:ce:7a:21:2e:0b:3c:d3:ca:6a:05:cf:
89:94:9f:41:0a:4c:c8:66:da:dc:ab:14:b8:9d:73:2b:b7:bf:
d1:88:5f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:34:45 2025 by rpki-client