Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File: 1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier: gfc0IEh45xTD/C8v3L2+69CFMnISF36XGhU8KXPfMis=
Subject key identifier: 11:90:00:5B:82:00:68:97:4F:62:DF:E4:D9:8E:54:F9:77:E5:27:0D
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 019A53759488332F2519418D4DA954545C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number: 0299
Signing time: Wed 05 Nov 2025 10:00:05 +0000
Manifest this update: Wed 05 Nov 2025 10:00:05 +0000
Manifest next update: Thu 06 Nov 2025 10:00:05 +0000
Files and hashes: 1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: XI5zZiQaLSaKx8v88btMMGmefGi5x4N+yqRn739dd3k=)
2: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (hash: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:94:88:33:2f:25:19:41:8d:4d:a9:54:54:5c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Nov 5 10:00:05 2025 GMT
Not After : Nov 6 10:00:05 2025 GMT
Subject: CN=1190005b820068974f62dfe4d98e54f977e5270d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:47:80:b0:68:35:ae:39:5b:4e:29:54:d4:
53:58:51:ae:b4:46:14:78:5e:f4:7c:2b:84:07:52:
43:41:01:91:d8:04:12:9e:c4:7e:d0:c9:03:5b:bb:
b2:a3:3e:92:36:1e:79:56:2d:96:b5:bc:1c:47:8e:
d6:4e:e3:90:44:90:bd:3a:ea:f9:a3:47:56:8e:0c:
c1:d6:9b:34:cf:bc:f4:68:44:b9:61:fa:42:31:33:
97:86:bf:ae:6d:26:54:88:21:72:c3:48:a8:df:b9:
5e:82:00:25:41:6e:f3:14:6d:bc:45:a9:fb:99:59:
c6:92:4e:19:dc:e6:14:22:5f:43:1d:78:7a:8c:23:
de:a7:c5:1c:ef:29:82:69:13:f6:a5:0a:a4:c9:7b:
8f:18:a5:38:c9:f1:66:9f:24:49:0f:11:bd:c4:bf:
21:a3:50:95:94:87:c9:4b:3e:5b:dc:cf:63:95:1b:
c8:70:c0:1b:1d:5d:9a:a9:fa:0a:0d:9d:a0:d6:95:
e5:97:a6:6d:d1:03:77:7b:84:85:54:f2:6a:cd:f6:
d0:1f:af:0a:89:d1:57:f4:db:7c:77:9a:67:bc:ba:
5b:4b:aa:4c:d0:a3:a1:22:69:81:88:f4:b9:9c:ce:
94:d9:7e:f8:87:3a:39:34:7e:61:1b:f7:76:e8:54:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:00:5B:82:00:68:97:4F:62:DF:E4:D9:8E:54:F9:77:E5:27:0D
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ed:b8:36:d5:7c:24:c2:04:00:d8:87:eb:89:1a:3d:61:68:
8f:72:9e:00:36:7a:75:d1:5d:e9:41:af:b0:e1:2d:cd:97:51:
df:85:c7:ac:7d:ce:f6:bb:86:b6:3f:5f:81:35:e9:1a:81:54:
a2:38:77:3c:e4:d2:5a:d8:1c:87:7c:25:55:1a:d9:85:d2:d0:
e3:a1:cc:4d:d0:8d:a0:71:72:0b:04:25:64:af:44:ce:23:32:
b7:bf:9d:f0:04:b9:44:38:a1:cc:65:34:12:4b:a5:dc:bf:c6:
f6:b3:e7:fc:20:66:c2:3f:c8:da:53:a7:44:6a:38:08:fb:a3:
69:2a:40:62:4d:dc:1b:b9:7e:f5:b9:dc:b3:b9:a1:11:e5:44:
18:ff:01:45:b1:61:57:7d:92:95:75:fd:d0:5f:92:59:fa:99:
e3:fa:e2:2f:6c:b9:2d:0e:da:05:d4:14:55:75:43:cf:24:21:
44:54:77:cf:74:7f:54:da:94:a5:67:a4:52:7c:b5:af:ad:7b:
c4:7e:59:91:fa:06:eb:70:f0:19:1b:4a:ec:da:41:e4:c9:ec:
ce:03:ef:eb:01:d3:a2:e6:22:3e:83:08:a5:58:06:07:ff:d0:
d7:16:29:3b:16:d4:b8:14:f4:ee:f1:35:fd:aa:61:f9:ee:d4:
34:34:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:11:37 2025 by rpki-client