Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
File: t5msmJxEsuHNq8JY6WypPKrUvWQ.mft (raw, json)
Hash identifier: PZEjB8VFggE0GpKjKjFqCuBmhqxuWSV2fOYADkpJUik=
Subject key identifier: 32:72:32:16:14:4E:1A:CC:4F:09:03:F7:02:CF:95:D8:FC:E0:01:57
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial: 019A01B650DE46B0534B67580577FDFC6D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
Manifest number: 0A87
Signing time: Mon 20 Oct 2025 13:01:56 +0000
Manifest this update: Mon 20 Oct 2025 13:01:56 +0000
Manifest next update: Tue 21 Oct 2025 13:01:56 +0000
Files and hashes: 1: N5hZORY6BH0_7cHTBNOVNkVCEYU.roa (hash: WR+MD/xxBtQVHPY1qaKKu6KnkMSkFI0jT+q93Z2CIUM=)
2: eG7qPRRyMuGDnTaL5wdOylUl9yc.roa (hash: wEVy8BCY3//obLJ2YEaxXlAcf2i+3jpwZETui93UpjU=)
3: eZ9lsBSBE-9HylowSORYyQP1H3Y.roa (hash: 4bc1g2EfiPBsisazV/A2lyPDwqt6FApY78qkMRjIEcc=)
4: t5msmJxEsuHNq8JY6WypPKrUvWQ.crl (hash: Zr7UgKm12XmHW+UuMK8onGjaubAOeOYWC6nIIDajwAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:50:de:46:b0:53:4b:67:58:05:77:fd:fc:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Validity
Not Before: Oct 20 13:01:56 2025 GMT
Not After : Oct 21 13:01:56 2025 GMT
Subject: CN=32723216144e1acc4f0903f702cf95d8fce00157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:09:42:ed:f6:15:e5:dd:73:f1:f4:1c:52:f0:
74:7f:ab:2e:5f:5d:c0:63:8f:14:90:75:06:4c:e2:
8a:74:75:e9:5b:f7:6e:ab:4d:bc:92:a3:4c:cf:0d:
04:8f:10:fa:64:6d:d0:d3:e9:4f:a2:e8:99:5a:b1:
9c:4a:99:76:65:d1:9a:83:45:e0:72:64:f2:1c:97:
e0:4a:4b:24:32:dc:8b:70:87:42:48:4e:22:f6:a0:
0a:0e:25:d2:2e:bf:a1:ed:66:c1:5f:49:a0:25:bc:
ee:e6:95:b6:18:2c:dc:2d:c0:6a:43:a4:ed:5f:45:
8b:aa:af:fb:dc:44:94:ae:0e:68:30:1a:e2:9c:cc:
37:7e:21:43:46:f5:ea:42:c3:11:10:fa:3f:5d:33:
23:43:01:4c:e9:de:e8:d7:91:97:bb:65:2e:41:78:
e6:66:01:c6:2c:0e:92:b1:00:2f:28:d3:c8:52:c9:
f4:10:1e:30:7f:fb:b0:93:38:3e:68:15:74:e7:af:
cb:43:c7:76:81:81:20:6a:44:67:22:d8:ee:b1:e2:
ea:4e:2d:6c:df:23:68:d7:e5:9f:02:c3:c2:3d:33:
d9:1a:63:4c:29:75:d6:59:60:58:5d:b7:ac:d9:d3:
ab:1a:34:a3:47:78:e0:20:95:24:b4:9c:51:61:98:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:72:32:16:14:4E:1A:CC:4F:09:03:F7:02:CF:95:D8:FC:E0:01:57
X509v3 Authority Key Identifier:
keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:49:9f:ae:88:6d:b4:11:14:d2:dc:c0:bf:f1:28:99:d5:a7:
81:45:47:29:9d:22:80:24:a9:9d:3c:1e:15:75:80:26:5f:9b:
e9:d5:b3:2d:e8:57:70:6d:3e:30:52:b7:c7:32:82:01:ae:f8:
7b:6f:d3:4d:f0:57:d6:02:b1:3f:c8:b7:eb:9a:49:6b:71:52:
66:3d:62:e3:9c:c5:51:71:19:95:66:30:de:bc:60:35:e8:26:
ba:82:53:d4:08:27:82:7e:e0:70:19:43:29:b9:14:85:5d:ef:
96:d8:4b:65:0b:c0:62:7f:59:06:0c:2c:98:34:2d:97:7c:bd:
f7:dc:c4:0f:89:09:9b:22:44:61:94:39:35:0c:80:84:b6:b2:
76:3f:86:17:d4:ad:43:32:4d:9d:ab:78:98:3a:11:23:68:ee:
6a:a1:66:fe:ad:52:b5:c0:cf:5f:e3:17:0d:b2:71:83:d5:fb:
61:1e:1c:34:a4:90:60:28:d4:91:10:3e:d8:73:1a:64:f6:e2:
15:6f:cc:9a:22:75:3c:02:34:c4:fe:b8:35:28:23:79:65:3b:
a7:70:91:30:eb:60:f0:3c:f6:d2:ae:32:1e:ca:32:f0:ef:52:
bd:06:27:6b:b7:e0:8b:ea:41:30:c3:7a:30:8c:e0:a9:5f:f3:
d7:f5:47:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:20:22 2025 by rpki-client