Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: VXyQO4v7zxULZXvCZnk86fCJfone+OUER95FzDnMXIs=
Subject key identifier: 5A:E5:96:7E:0C:3F:29:A8:64:AF:87:01:B2:69:95:AA:1D:2B:73:51
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 0199FC8F7CA047654870EE313975989926E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 05A9
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: 5ehB_xO0eaE5SlSwW2V8tb-9juo.roa (hash: jMw+wf8Ui1y9ucMVATcO+6jIkCejwH6WgDWFGHXHV+0=)
2: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: wvM7RrATvyuz44TN7BDUgc/VNL1bV2sOx+HMT/pM+xc=)
3: Kk5ihchNeskFCXCUlES4TL8h7AA.roa (hash: rTX+zm5JxSO5etuxfkqUkcqlRI0XlBcLpmGUj1NxYmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7c:a0:47:65:48:70:ee:31:39:75:98:99:26:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=5ae5967e0c3f29a864af8701b26995aa1d2b7351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8d:ea:7f:1b:27:01:73:11:9f:6c:cc:ff:9c:
3a:65:1a:a3:f5:25:e1:d7:4e:24:cc:e4:1c:4a:41:
db:b4:98:9b:64:ee:85:40:f8:f4:d9:ea:ad:0a:d4:
43:eb:00:82:60:1c:84:5e:4a:40:c7:61:8f:f4:2d:
93:82:f2:49:43:16:ac:bc:4f:be:53:2e:cc:7c:c5:
b0:86:13:73:56:5f:2e:22:18:45:64:f0:7f:01:20:
c7:44:0d:86:33:0f:20:d0:0e:7c:10:fb:36:e8:d5:
02:24:2d:e1:8d:0f:30:21:1a:84:2f:1b:08:2c:1e:
2c:67:8f:de:19:fe:35:1d:60:32:d0:c8:c1:17:78:
cf:e9:06:68:7f:36:91:69:1c:34:ff:b5:43:df:7a:
ae:f7:3b:6a:ac:8a:59:87:12:df:9f:8c:3a:3d:d7:
4f:53:7e:eb:bb:2e:b1:f4:0d:29:b2:f4:a7:1d:ac:
f1:62:a3:2e:a0:37:d2:f5:e7:5b:54:f9:fe:e4:b3:
49:d6:9b:2b:e3:51:71:c9:d1:92:59:da:79:62:30:
f1:b8:be:5d:7c:0b:02:46:8c:56:32:f8:8e:57:71:
34:41:c5:9e:80:72:a6:2b:11:5e:95:b6:d8:6c:4e:
1f:06:e6:ed:ee:94:a6:3a:f1:5f:2e:4f:f7:7e:1b:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:96:7E:0C:3F:29:A8:64:AF:87:01:B2:69:95:AA:1D:2B:73:51
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:12:eb:2f:3c:79:34:03:e8:0c:8f:27:0f:3b:7f:48:e2:40:
df:5c:49:fb:8f:07:9c:f3:29:6b:cc:e6:33:88:3a:0a:b5:90:
25:92:b1:cc:a0:8e:01:5c:6c:89:6b:de:af:e7:fd:89:71:13:
bd:d7:4d:8f:20:c4:9d:3f:84:e8:e8:e7:ba:58:fb:e5:54:50:
d7:bd:bd:14:50:2c:bd:3c:4a:f1:c8:23:2d:3e:81:65:0a:cd:
ba:c2:94:5d:16:f1:0f:ec:71:24:77:4f:e1:d3:ec:81:c6:75:
d1:51:f0:b4:25:5e:5c:83:16:01:ac:9a:bd:c1:20:77:fd:63:
7d:70:e0:10:01:f6:ff:eb:ce:c6:b4:19:7f:af:c9:3a:df:6a:
f8:c0:02:38:2d:f2:f6:0f:c6:04:2f:b1:af:7c:da:75:2d:14:
57:dd:e3:c7:c9:0a:7c:ae:a1:f6:e3:f3:6c:76:98:f2:ec:64:
de:bb:46:e0:34:b8:b9:22:2e:4a:20:44:db:9e:85:bf:03:1c:
43:61:ce:c3:e8:8e:ad:6e:6c:59:a7:4e:0a:61:c9:5f:c6:38:
45:4b:df:42:f4:05:ff:95:b7:31:15:4e:07:7c:55:e2:f5:e2:
e9:dd:42:db:6c:72:1f:54:d7:a9:8a:97:8a:9c:2a:a3:3b:d3:
99:6a:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:54 2025 by rpki-client