Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier: fXIy6cwxM7sVuJE8+Rhjrpmb58jwfE4m7KbeoiMW4eM=
Subject key identifier: 85:4D:B8:45:68:48:F2:2C:B0:06:85:B6:EA:09:04:89:98:B7:2E:F1
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer: /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial: 0198D73B4F850FD9481B6DE3C55BF114BA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number: 1335
Signing time: Sat 23 Aug 2025 14:00:44 +0000
Manifest this update: Sat 23 Aug 2025 14:00:44 +0000
Manifest next update: Sun 24 Aug 2025 14:00:44 +0000
Files and hashes: 1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=)
2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: 0zM2heI39G2NWjXIgzrEVms3vBre9Mey3hXymhE4y3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:4f:85:0f:d9:48:1b:6d:e3:c5:5b:f1:14:ba:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
Validity
Not Before: Aug 23 14:00:44 2025 GMT
Not After : Aug 24 14:00:44 2025 GMT
Subject: CN=854db8456848f22cb00685b6ea09048998b72ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:a2:ca:7d:4f:e1:b8:dc:28:5a:ca:c7:19:
27:e0:f7:8e:f7:80:66:27:27:94:78:94:f7:e9:ec:
95:2c:89:fd:77:4c:e3:07:59:d1:c3:df:cd:1d:1e:
70:29:59:e3:17:81:30:f2:a5:71:06:27:e6:a3:b7:
f4:6a:a6:02:3c:f9:0c:e3:49:98:9d:7d:60:e2:7f:
ea:b9:97:48:c0:be:a3:b2:8d:a1:ec:9c:ad:a8:49:
fe:af:ae:75:76:61:77:74:19:32:67:aa:43:b3:6a:
de:e1:62:8a:00:e7:dc:a2:d4:6c:73:f0:44:48:b5:
e1:13:e9:1f:68:ad:4f:6f:f7:55:08:30:13:d4:f0:
28:dc:95:b5:51:be:4c:3d:7a:fc:7c:d9:c9:7f:38:
ca:ed:e8:10:aa:55:93:0f:d7:bd:4a:12:ea:07:64:
96:1b:47:38:59:1d:8b:17:9c:0a:1a:fa:c4:02:e4:
d5:a7:58:c8:64:b3:21:ed:72:e5:59:d1:e5:6d:81:
4a:a6:99:65:d6:ad:58:4d:17:35:50:cb:18:ec:19:
a7:30:df:ef:65:51:dd:55:d0:7f:c8:3f:b7:99:43:
ca:8f:e0:27:b1:dc:5d:c0:8a:a5:bb:b9:b4:53:f8:
57:66:cb:94:b0:69:3b:02:97:5a:3f:6a:1f:63:7b:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:B8:45:68:48:F2:2C:B0:06:85:B6:EA:09:04:89:98:B7:2E:F1
X509v3 Authority Key Identifier:
keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f0:0f:c9:79:56:dd:ab:53:fd:39:09:87:33:c3:44:5e:05:
fd:2a:73:11:69:fb:85:47:b5:43:5a:46:9f:16:1a:98:20:db:
38:09:41:ee:aa:2b:b9:b8:31:43:8f:5f:7c:ea:de:c9:0d:18:
47:1c:b4:27:7c:8c:91:9a:c5:6d:0a:d1:44:96:b6:09:ef:32:
01:c8:f1:10:9d:66:a4:05:2c:fc:07:5f:c6:06:97:16:6c:57:
b5:60:8a:e5:ad:37:7f:b6:34:27:76:cf:24:bb:1e:11:7d:11:
83:ef:0b:d5:e4:ac:b0:bc:80:ac:87:f6:73:d6:9c:48:96:66:
22:fe:43:99:11:95:93:c2:5c:67:de:ac:34:15:e4:dd:4e:b1:
54:63:e8:75:95:a7:30:36:96:e6:bf:df:c4:ec:37:4e:27:69:
53:87:be:bb:3d:6c:d0:0f:4a:98:ef:2e:52:01:dd:e6:e4:39:
59:eb:51:f9:df:db:a5:45:ba:61:6c:fc:a8:c0:92:49:82:15:
0a:27:3b:d7:e3:33:b3:1f:79:9f:41:c5:fc:9f:b8:88:27:92:
1e:cd:7a:8a:26:3f:cf:18:a8:f3:bf:49:d2:65:2e:18:4c:09:
96:e4:4d:87:e8:83:95:74:d1:5e:aa:27:ee:97:18:82:06:ce:
17:59:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:12 2025 by rpki-client