Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier: YPX7hM4nyRoOAL3BeqF0CeDwILtiKRPGntCrjHPbHmI=
Subject key identifier: D9:66:21:13:00:A5:61:5E:E9:C6:05:39:87:00:B2:51:C1:62:1F:B0
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer: /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial: 0199FCC6116136CA1167456ABCCBC6477936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number: 13CD
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=)
2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: kMcv5ftyZ/cyP7cHyeKsqwXyEmjSuo2Vys5L6b7S1PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:11:61:36:ca:11:67:45:6a:bc:cb:c6:47:79:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=d966211300a5615ee9c605398700b251c1621fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:07:36:9f:db:6e:e6:54:85:36:8e:ab:f1:
a4:18:c6:bd:8e:fe:90:d2:18:b3:71:6f:24:d2:23:
4b:88:4e:71:62:b3:e7:5c:b3:c3:f0:fc:9a:c1:52:
64:3e:1c:6a:63:95:12:21:e2:97:79:1d:be:56:75:
e1:c4:d8:eb:03:91:5c:93:6d:9c:e6:be:30:ea:b4:
c0:a0:af:cf:0e:56:45:5b:24:a1:1a:94:11:68:54:
63:e4:30:2f:e9:b4:d4:89:2a:ec:d5:fa:8b:54:ee:
18:c8:89:ca:c3:e6:4a:e4:c0:fb:58:75:1b:3c:f2:
57:2a:c8:65:77:57:c0:3f:71:14:d8:1b:7a:83:8a:
c7:df:eb:2b:1d:e0:4d:d9:e8:84:ac:92:9f:99:8b:
11:7a:32:b4:f3:b0:19:30:58:f9:3d:04:41:0d:af:
7b:41:9b:22:a5:af:86:9a:46:4d:64:2d:72:06:a8:
f1:8a:6f:7d:1b:1f:4f:34:c3:49:43:fb:0c:40:21:
f1:97:db:49:55:53:eb:a8:c4:d1:4d:9b:45:d0:59:
99:b6:55:10:c9:b6:c9:2e:4c:76:d7:23:6e:9b:e3:
cd:02:e7:fa:47:46:35:09:62:0d:a9:ac:5b:51:92:
12:92:2f:55:24:04:c1:7a:21:19:4d:6e:03:58:88:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:66:21:13:00:A5:61:5E:E9:C6:05:39:87:00:B2:51:C1:62:1F:B0
X509v3 Authority Key Identifier:
keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:08:10:3e:28:54:f1:d8:04:da:7a:7b:d1:fb:3e:5b:85:fd:
06:3b:d2:02:33:2d:16:69:87:db:1b:c7:2b:da:ba:0e:6b:ac:
a7:43:f2:61:e9:bc:06:83:18:98:d2:b3:b1:7a:3a:54:eb:3d:
88:55:d0:f9:dc:d3:02:6d:1e:9e:3a:3f:0e:5d:f6:70:a4:9b:
5d:14:25:00:2d:80:1a:8b:e1:ba:98:3f:b4:3c:fc:99:fe:1a:
83:4a:0c:cb:22:8e:f8:9d:47:be:1c:7f:08:ae:ba:70:c2:cd:
ad:cc:dd:b4:a4:67:5f:17:be:d3:f6:c3:8b:ec:26:12:1d:fe:
c6:be:47:48:81:37:59:43:f2:07:09:b4:e8:02:fe:12:9b:41:
ab:53:06:bb:2d:a3:20:4b:44:56:7c:4f:b3:91:d2:b7:ad:9b:
2b:08:6e:13:42:7a:b3:0b:a9:77:05:d3:20:d5:f0:1c:f3:15:
13:d8:3b:3f:b0:e6:53:ea:9a:d8:03:b7:21:c5:da:c3:ba:17:
b1:99:f0:45:6c:90:6f:fc:ac:cf:e3:e1:a5:1e:c8:13:d3:35:
d1:e5:95:07:d8:5e:b6:66:02:57:58:27:a6:8f:a7:6a:67:5a:
fc:75:8d:74:1a:68:4c:d0:56:e4:79:3c:32:19:cb:ed:dd:12:
90:27:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:19 2025 by rpki-client