Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json)
Hash identifier: JFCUgVcwxGDaleUZqDQp2USeTlibkiaP0K8s1l1H5Vw=
Subject key identifier: F5:41:56:59:BF:FF:FF:17:82:09:E4:9B:F4:4A:D6:9B:0C:53:61:74
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 019A50E28C69459C5B5E5EA080B48E4685F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:00:15 +0000
Manifest this update: Tue 04 Nov 2025 22:00:15 +0000
Manifest next update: Wed 05 Nov 2025 22:00:15 +0000
Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: EVUGFiT/rJjI7ar2U0oQbaCXGz66Ou+Sq5fiTDXm4Nc=)
2: vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa (hash: X8Ll3xNOyDNsY8OoD7P2fm6g2ckrfD35bOMThe6H4RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:8c:69:45:9c:5b:5e:5e:a0:80:b4:8e:46:85:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: Nov 4 22:00:15 2025 GMT
Not After : Nov 5 22:00:15 2025 GMT
Subject: CN=f5415659bfffff178209e49bf44ad69b0c536174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:e8:87:01:3c:43:04:75:96:72:be:46:5c:
c5:b3:e9:1c:ed:ac:84:66:82:45:c3:cc:57:aa:79:
14:09:56:50:e1:e5:2b:2c:8d:3f:c1:b3:75:b3:d9:
a7:0d:6d:58:bd:16:66:44:23:4e:23:d9:67:82:32:
a6:05:80:38:32:47:04:7c:23:5b:9e:d4:55:b1:0f:
43:03:e7:1b:f6:8c:c5:85:e1:5f:c5:ff:fa:3d:8f:
80:0f:29:97:f0:41:29:34:5e:45:eb:7b:fd:4c:1e:
ec:4f:11:17:98:b8:fd:fe:d0:ed:0b:05:81:f9:00:
2f:3f:bd:41:9f:40:c4:0c:18:ea:3a:82:a1:b7:09:
76:b8:e1:40:c7:93:13:55:bf:2e:00:ef:a2:c9:96:
aa:80:3a:59:5d:0d:c1:a3:a0:e4:12:bc:88:88:e9:
30:05:27:d0:64:1a:d1:a9:9e:ac:53:d6:73:d8:04:
cf:e7:42:f4:73:34:43:97:55:1e:09:bd:90:66:6c:
7f:b0:80:36:49:e6:12:59:fd:4d:ab:16:b9:ee:1c:
44:6d:fe:11:7d:02:2f:26:57:88:57:13:aa:54:0e:
47:ae:e7:1d:e6:54:6d:e7:8f:d8:60:b9:1e:12:12:
d6:1e:ed:9c:76:69:97:bf:89:3d:8b:51:ed:6c:b3:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:56:59:BF:FF:FF:17:82:09:E4:9B:F4:4A:D6:9B:0C:53:61:74
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f6:8b:98:52:66:c4:80:44:3f:e1:69:d2:00:c4:09:dd:37:
9a:66:74:87:5b:44:48:b8:73:d5:25:62:91:c8:8e:5c:39:ce:
f6:6a:1f:d9:dc:98:ec:23:b9:f2:f2:67:e2:77:4e:8f:75:62:
39:da:1e:78:bf:a8:f6:01:ad:ea:0e:21:e3:22:19:ef:90:68:
f0:e4:53:ed:9f:ab:40:7d:9a:ab:f3:5d:5c:03:2a:da:55:bd:
ab:b4:d7:9d:71:9e:f1:9d:72:79:04:79:58:5c:61:ba:dd:c7:
cd:ad:92:cb:e5:7c:83:ae:06:df:bf:54:9f:44:02:80:b9:ce:
9c:99:ec:be:4b:1b:b2:ae:36:6d:df:b5:0a:3d:49:1f:5c:12:
25:35:a9:19:27:32:d8:08:1b:c5:4b:c6:93:c0:53:c5:30:4f:
68:09:76:a3:10:d3:1b:e5:b1:e8:63:fb:b2:f7:bd:ce:23:de:
7d:89:94:fc:c0:e4:ce:30:cf:9c:df:8f:df:39:98:0d:62:ee:
34:d6:33:d4:23:8c:58:22:f5:e6:85:f5:25:79:46:c1:bf:15:
c7:fd:ad:b0:81:8c:16:b9:63:64:a9:3d:f0:14:98:1e:e7:da:
1d:00:26:47:d8:57:f3:3a:d0:d1:00:54:d7:8a:e0:ef:4b:33:
f3:8b:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:29:06 2025 by rpki-client