Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json)
Hash identifier: QUcqFRKtQol2H75TNmN3wX4WkHL151QYWUhDnuR9goc=
Subject key identifier: BB:0A:75:87:67:EF:CB:37:6C:0F:BC:FE:EB:85:FA:65:31:2E:E1:CF
Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Certificate serial: 0199FD6AEF1DD207CC4E162CDA055EDB56A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
Manifest number: C8
Signing time: Sun 19 Oct 2025 17:01:07 +0000
Manifest this update: Sun 19 Oct 2025 17:01:07 +0000
Manifest next update: Mon 20 Oct 2025 17:01:07 +0000
Files and hashes: 1: aMimPGKaT2G8XuuZ7-2O1Nh1hh8.roa (hash: k/8LZ3MzLnclzjgMcW5jgVcEL+c+Ow+osyP79ShIXpk=)
2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: nQ+pWBiiOpK/k5knkAvyHmaMbPulP7tfUzLaHdsgB+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ef:1d:d2:07:cc:4e:16:2c:da:05:5e:db:56:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Validity
Not Before: Oct 19 17:01:07 2025 GMT
Not After : Oct 20 17:01:07 2025 GMT
Subject: CN=bb0a758767efcb376c0fbcfeeb85fa65312ee1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:67:8b:7c:7e:38:2e:e5:b2:de:95:49:85:
4d:99:80:82:b6:22:45:86:de:a3:95:79:3b:0c:af:
d7:db:83:47:2a:34:21:d9:e1:af:8d:b2:fe:a6:ff:
35:93:9e:ce:5f:c9:e8:7e:d1:a3:63:54:48:d6:ad:
32:f8:32:e9:72:45:62:65:53:86:dd:d2:76:87:f9:
ce:05:ac:57:28:9a:bc:db:1d:c3:71:85:8e:73:58:
b4:97:c0:28:59:03:af:ba:38:21:dc:38:84:24:8d:
15:4b:3e:08:df:92:d0:07:7a:f3:01:cb:18:32:e3:
5a:26:72:00:cf:01:81:29:08:6a:58:96:22:2e:bc:
4e:2f:03:31:49:39:ea:f6:f6:d0:db:08:5c:e5:d7:
2a:19:c4:34:e2:cd:56:95:9b:cc:9a:e9:98:19:ea:
ad:d6:bf:ad:6c:d6:a7:66:98:bc:f5:d4:21:bf:4e:
3d:ed:11:d3:82:e7:a0:34:13:1a:25:4e:cb:24:20:
e8:ea:32:e3:81:73:45:70:12:e7:3f:2c:0c:1c:96:
fc:c9:ff:7a:4c:32:16:05:59:75:b4:03:e7:b3:09:
c4:72:d0:4a:16:04:59:6c:f9:3d:73:05:2f:a9:23:
20:fd:fd:b7:e5:dd:f0:74:50:24:9c:bc:ef:7f:4f:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0A:75:87:67:EF:CB:37:6C:0F:BC:FE:EB:85:FA:65:31:2E:E1:CF
X509v3 Authority Key Identifier:
keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ff:f7:ed:09:10:4c:5a:21:94:11:0f:df:53:a4:68:6f:9e:
23:11:c2:94:56:d5:00:6b:4b:8a:eb:20:27:68:c7:9e:10:72:
0a:b9:82:49:e6:78:79:04:40:c9:08:26:d0:d9:91:07:a4:8e:
3d:c6:9f:43:bf:95:31:32:50:02:da:29:c9:af:e6:eb:59:8c:
61:f3:18:43:4a:dc:88:21:e5:f6:be:ea:5b:a0:61:f2:ae:8f:
7b:7b:38:d9:3a:81:ac:ff:2f:49:f1:29:10:40:0a:90:4b:74:
31:42:56:d2:03:bb:e0:00:fa:68:5c:1b:95:8f:37:06:9a:c2:
55:2b:af:46:14:9c:72:58:a3:37:59:64:3b:b3:50:3e:36:f7:
3a:ed:0f:f6:89:d7:d6:5c:7b:b9:bd:15:51:a4:88:c7:86:7b:
09:c4:06:7e:64:3d:ba:e5:f7:88:8a:03:88:dd:6d:85:b9:97:
63:74:c5:95:90:41:6d:87:5a:a5:7b:f3:38:2b:45:e6:04:ff:
42:b3:83:48:55:12:6e:6b:ae:01:74:1c:5d:4e:a6:26:82:53:
c1:38:f3:aa:82:ab:f2:9d:8c:ce:7c:04:35:e2:67:1f:cf:73:
ef:0e:86:ed:fe:9b:2a:2f:d8:78:70:d2:47:56:78:2a:7b:98:
e0:0c:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:00 2025 by rpki-client