Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: 5G13/+7iSzpZNHLYegyRrSu9Lef6xuTQrz7EFYRSFFo=
Subject key identifier: 82:75:42:27:AA:EF:B9:D0:BB:89:6C:35:5B:BA:99:95:7F:14:B0:63
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 0199FC21629D26AC506A04F5CC71CF4B4442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: 4dkcq/LTiFlwi32XG9PoSFt2hWmTNPmMY5LVDWPU0tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:62:9d:26:ac:50:6a:04:f5:cc:71:cf:4b:44:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=82754227aaefb9d0bb896c355bba99957f14b063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:e1:3c:a7:ac:8e:ca:aa:74:9c:d9:56:9c:
8c:89:a6:67:4c:72:f6:ac:d1:cf:ca:a9:8b:7a:9d:
6b:ec:df:33:48:ed:41:f1:70:74:e1:e8:1a:97:1c:
8d:55:0d:4b:36:fb:2e:52:f4:40:9b:3b:b7:b7:e5:
47:bc:23:ad:78:a7:5b:1b:92:91:99:eb:db:4f:08:
a1:65:89:e6:73:33:52:ec:9b:78:f2:dc:93:e9:88:
71:31:5c:36:74:a2:4e:83:05:f5:b6:12:23:b1:c3:
da:be:37:40:72:69:82:57:68:3d:2d:36:e6:53:ec:
6f:81:09:f3:1b:af:d2:a0:f6:67:1f:c7:62:a4:63:
bb:f0:d7:4c:de:b7:59:0a:97:12:cb:a8:57:7d:6c:
fd:32:51:5f:af:5b:1d:78:b1:72:26:11:05:60:2e:
c5:22:1a:22:fd:9d:b0:25:5d:e8:32:15:49:a4:68:
34:6a:a4:d0:50:e1:04:6a:18:53:c8:bc:e1:1e:d3:
90:86:cf:a5:63:2b:fe:99:d6:4a:92:ab:f1:05:71:
74:57:4e:8c:c4:94:43:e4:e5:95:d4:51:4d:c6:a3:
4b:b8:10:b7:0a:59:ae:63:9a:d5:89:d2:76:2f:ef:
28:ab:de:b5:b8:cd:de:50:2d:4e:66:49:24:8e:df:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:75:42:27:AA:EF:B9:D0:BB:89:6C:35:5B:BA:99:95:7F:14:B0:63
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:5c:cd:f4:32:da:29:9d:94:bb:64:69:55:11:a2:51:11:
12:eb:3f:0e:66:dd:5a:06:09:7b:89:fe:ad:85:e0:7d:23:c7:
0f:93:86:b6:ef:86:2f:7d:19:74:38:38:2a:d3:2c:54:66:bc:
40:a0:9f:de:77:51:33:ec:2a:50:5b:63:f5:a5:c5:30:0f:f7:
85:4e:76:95:7f:c2:83:14:37:a8:87:fb:f1:00:40:72:65:dc:
18:c3:54:3f:30:89:e8:c4:02:38:67:38:e9:7e:dd:37:35:dd:
5b:ce:92:eb:f5:39:48:82:f9:21:56:bf:3b:2b:d0:87:cc:7d:
f4:3a:09:42:7a:35:fb:cd:f6:b9:b3:cd:41:b6:25:c3:6b:de:
77:e2:08:cc:9b:09:28:8d:cd:f3:a8:00:c6:27:6a:f2:d2:19:
c1:c0:23:50:5b:54:b0:2e:62:3e:11:d6:fd:c1:ed:2a:fd:11:
4c:7e:b4:f9:3e:2f:3e:f6:c3:2d:ea:2c:7e:c5:f7:90:b0:cf:
59:56:77:ef:62:e5:c3:4b:02:5e:91:2c:39:6c:10:6f:3c:d1:
3e:d8:88:10:20:5d:66:c4:5a:b2:44:08:63:a9:e4:e4:b3:96:
70:f5:8f:b4:21:58:bc:58:9a:0c:f6:45:7f:35:1c:00:ee:f5:
b3:4d:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:18 2025 by rpki-client