Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier: 5iC2+VIzw+0XNhCr0+5Jxih3iF8F6royhk0H1HoYp6M=
Subject key identifier: DB:1B:BB:49:DB:D0:96:95:70:3B:01:F9:41:A3:A3:9B:DD:B0:19:4F
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 019A2477E00F8BF13B49039EC4F4BC03114D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number: 117C
Signing time: Mon 27 Oct 2025 07:00:27 +0000
Manifest this update: Mon 27 Oct 2025 07:00:27 +0000
Manifest next update: Tue 28 Oct 2025 07:00:27 +0000
Files and hashes: 1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=)
2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=)
3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: 4i77nGk5KtJsdUqiv9QD1vezg/+fGQ3R/D5cxsVqaXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:e0:0f:8b:f1:3b:49:03:9e:c4:f4:bc:03:11:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Oct 27 07:00:27 2025 GMT
Not After : Oct 28 07:00:27 2025 GMT
Subject: CN=db1bbb49dbd09695703b01f941a3a39bddb0194f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:22:00:a8:7c:4e:21:2d:47:92:61:8c:2d:
2b:ec:70:57:43:d5:81:b7:d0:94:4d:2a:53:fd:11:
e4:82:d8:06:f9:4b:36:4a:c2:b6:d3:90:2a:55:df:
95:dc:e5:0b:6c:f7:01:f4:7a:3f:65:28:60:29:0a:
58:cd:72:c1:21:8d:ca:9e:75:49:ab:03:ae:aa:74:
c8:f1:5a:8c:de:03:3a:d5:bd:4b:a0:98:d6:b2:8e:
07:92:ea:20:1d:4c:e4:a3:a9:89:61:8a:63:f8:44:
10:52:8d:71:ae:59:14:b3:5e:c2:5d:0a:0c:a6:eb:
a2:c2:8a:83:e1:4d:60:0f:c4:9c:9a:08:ff:03:f2:
88:14:39:3b:91:d7:15:ec:a5:b0:4f:21:b4:9e:83:
f9:c8:88:50:53:52:18:2c:97:f5:89:8b:d3:e9:40:
b9:cd:ae:b3:d5:19:58:84:89:72:9b:7a:fc:49:76:
ce:f5:21:3f:ed:f9:c8:c5:35:14:4f:c5:52:ce:0f:
73:31:2b:fa:6c:15:9c:30:b6:99:c1:f5:96:5f:77:
ee:02:d2:a3:7b:41:f5:5c:6a:89:e1:85:39:53:37:
c0:25:96:2a:cf:c1:fa:ba:c1:0a:5b:cc:4d:12:16:
4d:90:7c:35:be:9e:d3:30:ea:51:93:1d:18:20:b0:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:BB:49:DB:D0:96:95:70:3B:01:F9:41:A3:A3:9B:DD:B0:19:4F
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:aa:ea:f4:52:e3:ea:c4:3e:68:59:ec:e2:3c:23:c6:98:8f:
7a:26:eb:5e:54:5e:55:b0:b3:6b:4b:17:91:5f:f7:5f:c2:e9:
d3:36:68:95:c8:84:e6:9f:6f:b6:41:4b:80:25:1f:06:41:c5:
35:39:89:d3:ed:0d:c5:c4:56:fd:de:df:29:64:0e:af:93:c4:
31:91:e6:03:51:31:ff:62:68:87:af:dc:23:d9:a0:6c:25:8e:
c5:3c:0d:9c:e0:a6:2d:c7:46:b6:12:36:32:ad:dd:d2:96:8e:
a4:92:6e:c0:cd:fb:a4:0e:e8:5d:b5:04:86:98:55:f9:13:84:
4c:9b:dd:8a:ac:96:c1:8f:86:40:4b:73:b7:98:76:41:5d:95:
e1:f3:73:d1:b4:53:58:47:d0:f0:99:53:4b:4d:cb:5d:32:b1:
8c:dc:19:f8:90:c7:c5:bf:63:77:32:d0:ac:57:6c:74:04:5a:
d1:9e:27:b4:14:1f:2b:65:bc:57:8f:48:bb:8a:70:68:43:91:
5b:43:7d:ce:f4:8b:ab:af:de:5b:b1:c5:3e:e7:15:b9:d2:00:
70:c0:53:08:7d:6f:60:8e:e6:35:8c:8a:32:ef:9b:ae:eb:b0:
00:fd:da:3a:87:58:33:18:51:44:b5:fd:ed:c0:5d:85:23:6c:
31:cc:ac:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:17:10 2025 by rpki-client