
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
File: v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json)
Hash identifier: jA9+LLTTrLidsMtqPXO4I+MMRl+UfGWbii8TUmzuwyU=
Subject key identifier: 9B:2B:5D:70:7F:A8:2C:71:4E:B6:89:93:27:88:EB:15:E5:DB:40:DF
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial: 0199FD33FA0A83705C523C2E0BC10A460FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 16:01:05 +0000
Manifest this update: Sun 19 Oct 2025 16:01:05 +0000
Manifest next update: Mon 20 Oct 2025 16:01:05 +0000
Files and hashes: 1: i6hB2IahOI67PvpUTSQc2nj4R3g.roa (hash: d+MeIEX0oXT1ILgVQ/KLqsvbNLNFr38pDADmv1QHEqI=)
2: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: FSBBwOJa6r+8reJLa2eHG3gOwLOuYvxX+D858lRRgRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fa:0a:83:70:5c:52:3c:2e:0b:c1:0a:46:0f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Validity
Not Before: Oct 19 16:01:05 2025 GMT
Not After : Oct 20 16:01:05 2025 GMT
Subject: CN=9b2b5d707fa82c714eb689932788eb15e5db40df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:22:61:a9:64:2d:97:01:11:d9:47:cf:57:
3e:68:5f:29:bf:d4:64:79:7c:8d:4c:59:30:4e:d7:
8c:14:8a:21:98:d5:3b:1b:3d:24:7f:9e:5a:b5:7e:
44:4f:93:02:72:ef:35:98:17:67:91:ad:98:ce:67:
8d:aa:eb:d4:0e:f5:81:e6:9c:6a:85:ce:32:a9:37:
1f:f7:65:19:59:7d:a2:c3:11:31:e2:e6:68:38:40:
16:ed:bb:2d:6f:4b:cc:a6:b0:54:76:d2:aa:fe:4c:
3c:a8:36:d0:64:69:f1:9e:58:81:19:2a:25:a8:45:
b2:c3:f7:67:d9:da:96:a3:cd:79:52:cd:df:fb:81:
f6:e9:e6:b8:bc:54:c4:82:1b:47:58:02:c3:f5:df:
c8:0c:e8:70:a8:37:8c:96:c3:c3:5a:a7:16:f0:14:
2f:1c:34:76:e3:b9:17:0a:4d:c5:0b:fa:33:bb:3a:
4c:27:84:e6:ef:e7:23:d4:25:b7:51:8b:5c:f0:63:
3e:4b:9f:cc:e8:c5:c9:40:46:47:7b:ff:6f:27:05:
90:8f:56:97:b8:bf:bd:76:1f:87:3a:8b:0c:1d:ec:
5f:fc:e6:65:8d:9e:36:14:aa:65:30:1c:b2:71:af:
3d:29:d7:4d:74:64:b9:d0:1c:03:bf:e0:40:34:ec:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:5D:70:7F:A8:2C:71:4E:B6:89:93:27:88:EB:15:E5:DB:40:DF
X509v3 Authority Key Identifier:
keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:70:e7:45:83:23:44:3c:cb:03:2b:9c:66:c7:09:cc:17:40:
db:55:2d:8a:16:25:3e:3c:a5:c3:b0:5f:69:2a:f3:10:0b:49:
05:36:99:a5:3c:bc:d7:f3:d6:5f:9f:ba:e8:85:08:1e:05:dc:
f5:c3:cd:fc:f1:7e:32:e6:b7:77:2e:cc:c1:6e:3c:98:45:83:
7c:74:d0:9f:e5:48:af:ca:bc:dc:a0:ea:11:8c:c7:05:60:14:
3a:04:82:6a:f5:f1:ef:be:cc:e2:cf:14:7b:b1:92:5f:24:6c:
74:f9:62:1f:f3:48:6b:d0:50:da:4b:08:c6:78:a7:58:87:17:
46:56:40:fc:34:8c:fc:c5:6f:c9:e5:a8:c4:13:c4:cd:ae:6f:
2c:04:04:ee:e6:57:bb:f3:7a:c1:7e:59:2f:2c:37:2a:45:39:
08:06:65:4b:6d:3f:17:5a:cf:80:ae:2d:4b:1c:96:56:6e:a3:
dd:7e:8e:ca:a0:cd:90:f1:45:7d:46:b8:14:5a:30:a5:6b:39:
79:22:e6:9f:1d:55:d1:fc:72:49:f5:59:39:6f:65:42:00:c5:
df:51:e6:69:b7:c3:39:ec:88:51:d3:64:36:5f:09:d7:5e:5c:
84:78:cd:56:16:b8:c4:95:77:7f:6c:05:15:80:da:04:d8:55:
d6:9c:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:19 2025 by rpki-client