Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
File: V5G7EVC-rF6gxyTznSzn_M_BVGo.mft (raw, json)
Hash identifier: n23uWFaCDqDfaZY/0MKzCt7WHeqPE6k4DPidX/0WhIU=
Subject key identifier: D8:54:62:6C:D8:72:12:4C:EB:AC:93:ED:BA:61:BA:79:07:06:F4:A8
Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
Certificate issuer: /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Certificate serial: 019A228A3F04D8E1097D752C85B3378725A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
Manifest number: 1610
Signing time: Sun 26 Oct 2025 22:01:16 +0000
Manifest this update: Sun 26 Oct 2025 22:01:16 +0000
Manifest next update: Mon 27 Oct 2025 22:01:16 +0000
Files and hashes: 1: 20JIcxX-YRfmUdZsM-A9KFCVQ9A.roa (hash: Jy9A0VoisBWre1TOkMryXEsS8YexNx87KiBRG3mU7GI=)
2: 64bniClUPfUDALDLv0vwIlVjfMA.roa (hash: lL8XeUncI5mQZtyJg5Qencz5SVSK52g5YBySwrx2+kI=)
3: V5G7EVC-rF6gxyTznSzn_M_BVGo.crl (hash: 2rcbC05VoWdD9YW8e60eyEtFd97M5B4f2H8OwiaQ7qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:3f:04:d8:e1:09:7d:75:2c:85:b3:37:87:25:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Validity
Not Before: Oct 26 22:01:16 2025 GMT
Not After : Oct 27 22:01:16 2025 GMT
Subject: CN=d854626cd872124cebac93edba61ba790706f4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:31:8f:15:bd:b3:96:6d:14:3f:32:45:d9:e6:
34:99:bc:a0:73:d7:2f:27:bd:99:36:f2:44:41:9d:
51:5a:4e:54:f6:1f:2d:02:1e:50:05:2d:b7:0b:df:
39:97:09:79:d1:23:bb:cf:47:60:7a:ba:42:ca:52:
41:3e:12:b8:1b:71:0f:3d:07:04:99:a8:33:ed:48:
78:30:5c:55:c7:3c:50:37:20:75:1f:c7:36:bb:e6:
1c:47:1d:5a:98:e5:b0:48:97:4e:20:8a:66:25:e8:
3e:17:1a:1d:79:8c:01:8a:ec:91:66:0d:0c:21:99:
ad:e2:31:1a:f4:6c:86:b8:6f:d3:0c:02:e7:5d:c3:
fb:66:9e:07:9f:7e:7f:71:eb:ca:ea:9d:a0:c3:3f:
1c:ae:7d:5e:c0:0e:db:6d:a6:29:13:1c:5a:ab:55:
47:b5:ff:83:91:3b:49:e5:89:3a:79:34:20:d6:e2:
11:7d:b2:8d:9a:ee:ea:cc:7a:9b:44:09:0f:44:3e:
5b:a2:93:41:ff:41:94:f7:94:dd:61:06:b2:17:36:
13:94:0e:03:7a:94:d4:42:aa:ba:a8:1b:f9:a5:d9:
9b:03:b7:e9:03:b7:d3:46:fc:52:b6:e2:a1:4c:e7:
c5:71:90:ed:7f:de:d2:74:6f:31:d8:ae:9f:de:99:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:62:6C:D8:72:12:4C:EB:AC:93:ED:BA:61:BA:79:07:06:F4:A8
X509v3 Authority Key Identifier:
keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:35:b5:dc:24:fc:27:23:ae:41:bd:23:2d:9a:87:23:12:ae:
64:b3:e1:e4:3a:40:4d:e6:66:96:21:dc:bb:78:94:c3:ae:31:
84:46:ae:cb:6f:47:69:83:9f:13:c6:e8:e2:5f:c5:cb:11:b9:
18:d2:eb:28:47:19:9e:11:66:4b:c5:92:b7:e6:0a:02:c4:3e:
c7:b5:9b:64:d0:66:4f:7f:39:e6:65:83:57:13:82:bf:c7:cd:
ae:fe:c0:28:a1:e6:8e:ce:e8:e5:62:86:e1:59:7a:ef:6d:96:
ff:c0:32:67:a6:c1:13:05:d4:1b:39:38:15:fc:0f:ac:f2:db:
98:94:79:ca:e7:60:dc:ec:d4:72:00:ab:d1:37:52:38:34:99:
7d:5c:99:cb:0e:b7:6c:d0:41:32:ed:e8:01:8a:df:71:b1:89:
7b:d9:bd:2e:3a:e9:ac:84:75:03:53:e7:0f:1f:80:c6:96:ff:
bd:12:f1:fa:ae:ef:4b:83:b7:1e:33:86:7a:5c:34:ed:f0:12:
7e:3a:0c:dd:15:1e:35:2d:01:0e:f1:24:41:00:e8:87:b5:6c:
89:30:4a:b2:75:81:b0:4c:f5:2e:61:28:ab:da:a6:36:9e:64:
d2:d1:bc:0e:c6:ba:5c:9b:b9:37:e4:d3:5c:01:34:5f:7a:cd:
42:66:a3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:38:47 2025 by rpki-client