Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File: 5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier: o/vfn2GZFN3imHZuKTvSzJQKOjn08WnoQFL5XOTwbU8=
Subject key identifier: D1:53:49:3C:4D:78:27:8A:97:15:6D:24:1A:20:7B:68:2A:DF:69:2E
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial: 019A4DE1E6A8777E7D4AD92F8818EE7E0E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:41 +0000
Manifest this update: Tue 04 Nov 2025 08:00:41 +0000
Manifest next update: Wed 05 Nov 2025 08:00:41 +0000
Files and hashes: 1: 1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa (hash: Ohp9jg/lWKCAW1pqYiDBNHfJGsbI7n6Nnedeq9nVw0Y=)
2: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: w51KtfAw1wHkpbgaZIkGJY7V6V6mrkBf7mqzdDhd1AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e6:a8:77:7e:7d:4a:d9:2f:88:18:ee:7e:0e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Validity
Not Before: Nov 4 08:00:41 2025 GMT
Not After : Nov 5 08:00:41 2025 GMT
Subject: CN=d153493c4d78278a97156d241a207b682adf692e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:80:a4:91:01:95:b4:45:7a:e3:8a:d1:f4:
be:43:e2:89:9e:41:ab:b7:0b:d3:0a:d4:88:af:a9:
76:a6:71:c3:73:9e:f5:15:4a:08:29:61:00:31:f6:
35:76:1d:e1:57:96:7a:a5:f0:f9:87:47:9a:75:0a:
30:da:34:b3:bf:ef:ae:56:fe:37:48:a2:f7:56:35:
93:ba:a1:34:1b:01:f7:6f:25:98:41:42:b4:b2:af:
42:eb:76:d6:5f:bf:1d:4d:05:45:c4:b5:c0:49:fe:
e9:4a:d5:78:21:da:3b:c0:1b:ee:d0:75:76:38:a9:
12:3a:9a:10:eb:d4:c9:c1:2f:92:93:d0:88:5d:5b:
07:d2:18:4b:e6:c9:93:ae:6c:04:49:12:c2:50:67:
06:bd:09:fa:3b:9a:68:4d:8f:96:35:42:d2:6b:96:
83:ec:3c:53:6d:fe:c0:75:1d:07:59:24:08:31:f1:
0a:f7:1c:ba:70:a8:cf:d4:6f:63:5f:a2:f7:d3:cf:
6f:9e:13:cf:27:21:4d:30:15:3d:36:91:82:d6:18:
0e:af:9c:c4:51:8e:06:55:ea:2b:f9:1c:69:9b:de:
d5:36:cf:b1:bf:fa:6d:23:4e:9f:3a:eb:6b:83:f0:
a1:a9:09:3e:d1:4d:46:4a:1b:8c:32:0c:b4:cc:68:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:53:49:3C:4D:78:27:8A:97:15:6D:24:1A:20:7B:68:2A:DF:69:2E
X509v3 Authority Key Identifier:
keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1c:40:8a:7a:6b:97:83:e9:7e:c4:5b:74:ea:6c:73:40:6f:
5f:43:ae:93:4e:8a:dd:39:e9:66:11:59:7d:40:81:97:ed:21:
8e:78:98:46:ba:4c:31:9a:a9:97:98:e3:44:2c:a1:91:93:b0:
90:e3:1b:23:93:e4:8d:db:80:e2:86:c7:33:40:36:73:f1:2d:
10:37:21:17:c2:46:7a:df:c6:ee:55:51:2e:42:cf:ce:5e:80:
10:33:4e:39:51:59:88:0d:89:29:9b:4a:54:4a:46:88:7d:19:
80:20:12:a6:0b:3c:9e:9d:d3:d0:2d:3b:43:af:6b:0f:40:18:
da:97:de:02:c8:fd:3b:30:6e:be:26:ca:f8:54:1f:9b:25:bf:
9e:4c:74:bf:4a:da:91:6c:e7:12:3b:65:83:e7:22:70:ce:e8:
0c:79:0f:95:5b:df:d6:c2:b0:09:34:f2:8e:2f:42:5b:c9:d5:
70:f4:01:09:87:8e:ce:82:d3:d1:fe:60:68:4f:8e:a0:b0:62:
96:f1:6e:60:b9:ea:cd:9b:8a:2a:14:a9:93:39:0f:73:55:a6:
1f:69:d0:cb:17:82:57:ed:e1:bc:a2:d9:f2:7d:f8:96:0f:52:
be:30:4d:1f:2d:22:48:31:94:31:92:c3:9c:f2:5f:73:2d:fd:
3a:7a:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:10 2025 by rpki-client