Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: J8gejh7lj2xsON+m+RWJB+vHxELImmcoYEa/ttAl1qE=
Subject key identifier: AA:C3:B8:3B:38:C5:28:89:2F:64:B6:30:F2:97:76:A0:27:01:94:A1
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 0199FE0FF418C1A41EEF615D109CAF4DA4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 20:01:22 +0000
Manifest this update: Sun 19 Oct 2025 20:01:22 +0000
Manifest next update: Mon 20 Oct 2025 20:01:22 +0000
Files and hashes: 1: WxyFMVLPaoedm2KunMSjCPtRmII.roa (hash: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=)
2: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (hash: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: srFL/KH2avO0hPkfl+dS3O7eLcqBpxMw+07GIKJoKDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f4:18:c1:a4:1e:ef:61:5d:10:9c:af:4d:a4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Oct 19 20:01:22 2025 GMT
Not After : Oct 20 20:01:22 2025 GMT
Subject: CN=aac3b83b38c528892f64b630f29776a0270194a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:84:59:2b:86:e8:8d:25:9e:b0:60:ff:18:
63:46:3e:7e:f8:34:2b:be:1a:88:43:4a:bc:77:83:
19:7b:78:5c:be:fe:13:aa:6a:9d:1f:8b:36:50:07:
ca:84:af:4a:15:58:25:1a:d8:8d:49:c4:55:92:93:
5d:9c:57:cc:36:5c:de:51:f4:52:2d:7f:67:78:c8:
51:52:a8:e1:18:9c:be:4d:76:97:fc:2c:ba:52:b7:
46:79:aa:59:8f:75:c1:30:9f:28:52:d2:7c:d1:03:
a9:eb:53:28:b5:07:11:59:e7:8c:26:b0:fc:4e:f8:
39:9e:75:be:1f:ae:e3:82:fc:15:cc:fa:4f:8d:f3:
ee:0d:a3:80:14:c5:33:87:22:88:5a:8e:07:f0:d6:
c7:e3:37:d3:0c:cd:d4:86:a2:89:5c:66:4b:3a:f4:
23:82:f8:23:a4:84:c6:f8:0d:53:ae:e0:d5:6a:f1:
f0:3c:81:9d:76:f8:a0:e3:65:22:bc:d2:a5:71:14:
94:89:4c:af:b7:3f:fe:e1:58:4d:08:f2:fa:b8:02:
7c:d6:65:44:86:1b:3b:23:ca:16:df:96:c2:34:00:
1f:89:82:98:46:f4:e4:a7:80:83:f8:5e:14:f3:a8:
91:bd:2f:13:70:8d:78:24:ce:7b:ba:c0:cd:4c:02:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C3:B8:3B:38:C5:28:89:2F:64:B6:30:F2:97:76:A0:27:01:94:A1
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ee:2f:3d:83:d2:d3:94:00:f9:a1:84:4c:c5:05:72:c3:ba:
5f:4a:35:fb:6f:ae:d2:bd:42:22:52:34:dd:8e:19:57:8b:e3:
c4:6a:54:76:2a:42:90:07:bb:55:b8:71:d4:f4:dd:b0:e7:cc:
62:bf:ef:ff:95:a3:54:fd:07:17:3f:f9:84:8d:b5:69:0b:a3:
45:d4:fa:80:24:b6:4f:f3:83:71:64:a0:34:9c:ad:97:a4:44:
7e:b8:db:25:e3:62:f7:04:a8:8b:a1:ac:91:5c:b8:75:94:53:
c4:ab:ba:ec:4c:ff:07:35:a9:bf:d7:f5:5a:03:25:1f:49:f6:
f4:58:dd:ed:a1:a3:c7:52:82:58:10:c4:db:7f:08:7e:f2:73:
58:f7:f0:d7:1b:59:30:ae:85:30:2e:9c:2d:9f:bc:b0:28:96:
71:d4:bd:e7:2d:2b:ca:6e:32:1a:95:cc:a8:64:5c:d3:da:d4:
b2:a3:09:95:74:7d:9a:a1:28:9b:5b:3c:70:a7:84:7e:cf:0c:
1a:ec:ab:e8:8e:2b:81:ac:84:0f:e2:fa:c2:e6:bc:4f:78:39:
37:f9:08:b7:d7:54:a5:8f:64:10:83:17:d1:5e:42:81:4f:c1:
1e:36:75:d4:a3:70:e9:fd:61:8f:9c:b9:20:42:22:1b:d1:c0:
ea:dd:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:05 2025 by rpki-client