Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json)
Hash identifier: qUhUeYJzrdw+Btyq6JhIfdqOSIv4Yaz6APSpAb/rfgE=
Subject key identifier: 05:4E:29:CD:6A:E6:7D:42:E3:53:65:96:8E:33:7F:06:9A:E5:61:9D
Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Certificate serial: 019A25F8B13591987C924B7B805182543EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
Manifest number: DD
Signing time: Mon 27 Oct 2025 14:00:46 +0000
Manifest this update: Mon 27 Oct 2025 14:00:46 +0000
Manifest next update: Tue 28 Oct 2025 14:00:46 +0000
Files and hashes: 1: aMimPGKaT2G8XuuZ7-2O1Nh1hh8.roa (hash: k/8LZ3MzLnclzjgMcW5jgVcEL+c+Ow+osyP79ShIXpk=)
2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: pSvsBiAzsEnNzLirR3NExz9FpaT40pLS5ypwvDwqF8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:b1:35:91:98:7c:92:4b:7b:80:51:82:54:3e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Validity
Not Before: Oct 27 14:00:46 2025 GMT
Not After : Oct 28 14:00:46 2025 GMT
Subject: CN=054e29cd6ae67d42e35365968e337f069ae5619d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:6a:92:95:84:4a:ff:a2:81:f9:0d:e9:57:
aa:f7:39:6a:b8:15:83:2b:c1:a6:89:3a:3a:a1:17:
bf:7e:c4:58:da:b9:51:25:58:8d:2e:4f:54:80:4e:
c1:69:51:73:e8:a7:15:99:85:12:56:a9:4e:28:18:
11:37:71:ca:b5:d0:72:b2:82:c8:41:3a:4a:01:22:
62:8d:0d:26:4c:a6:13:8d:02:22:82:70:8b:df:72:
8b:bc:50:5d:26:89:c8:2e:00:c1:ba:60:2c:0d:7b:
38:e4:ca:bc:0a:d8:43:05:aa:8a:54:54:3a:92:ec:
85:92:f0:2d:b9:7f:1e:ca:ee:e5:01:ed:b3:7f:ec:
db:65:11:a1:6e:52:e9:3a:b1:49:3c:83:1e:9c:a2:
b1:b9:65:f8:77:3f:85:27:f2:71:f3:b9:c1:a4:d3:
4b:54:30:53:a8:92:c5:60:bf:7f:c9:1c:57:dc:a9:
30:49:95:51:e4:b9:0c:a3:ae:16:1b:08:46:2b:e5:
72:cd:b1:eb:92:c9:52:5a:ea:e6:ac:31:9d:63:90:
4e:4c:9e:70:d1:c5:a7:fb:68:2f:c2:1b:17:39:6e:
82:93:7b:63:f7:63:34:d7:2e:f2:93:cd:53:bd:c3:
0d:29:3f:8c:c0:1b:ed:da:2b:4e:79:89:aa:fc:04:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:29:CD:6A:E6:7D:42:E3:53:65:96:8E:33:7F:06:9A:E5:61:9D
X509v3 Authority Key Identifier:
keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:aa:02:67:75:af:8e:8d:df:22:1a:63:0c:fd:b6:27:66:95:
db:d3:98:c1:bf:0f:3f:78:81:2d:6c:fb:87:e3:bd:e2:48:e0:
92:e1:35:91:25:ae:6e:bb:8f:5b:3d:e6:23:cd:54:73:3c:a5:
81:3a:ff:b1:ff:50:8d:75:7f:61:40:12:25:c1:cb:20:24:8c:
c1:f9:69:3c:68:1c:be:4f:d6:22:3a:df:e5:bb:89:8c:4b:5b:
c7:35:a1:44:e8:48:08:5a:5c:f6:19:b2:b9:e5:c9:ff:04:9c:
72:2a:86:c1:ee:70:ed:32:a6:b9:4b:78:b2:84:c2:da:ae:91:
f5:7a:b1:a1:b2:74:ad:9f:30:d6:45:9b:fd:2e:05:c5:99:fb:
ca:ce:24:3f:fb:19:8c:46:08:c6:52:d9:21:02:71:34:a3:e3:
86:10:d0:21:cf:9b:05:55:bb:4c:1f:cc:d9:b9:a5:cc:17:bf:
78:79:3c:23:78:b8:0c:77:bd:1d:d4:20:55:e9:6b:ec:ef:55:
7b:42:9d:0c:af:60:1f:2b:4f:65:e0:df:47:6b:21:46:2b:02:
c8:09:e0:d3:f6:5c:d6:90:bb:17:21:86:4e:b6:b2:12:fd:9c:
55:cb:a4:f7:63:2a:e3:86:bc:68:78:10:d8:93:89:c5:58:ce:
cd:9e:a9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:40:36 2025 by rpki-client