Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier: gj8++9eZUcoyT7workbtOQfnOHgxfmg1nS4lOFGu96U=
Subject key identifier: 62:8F:52:B5:13:4F:6A:8D:8E:9D:8A:D9:82:8D:A4:C6:44:C5:7B:2D
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 0199FBEC312923D664AB16ED7296C665EFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number: 1167
Signing time: Sun 19 Oct 2025 10:03:04 +0000
Manifest this update: Sun 19 Oct 2025 10:03:04 +0000
Manifest next update: Mon 20 Oct 2025 10:03:04 +0000
Files and hashes: 1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=)
2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=)
3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: gSuToRPAo1mJNapw9C9B/OqI/Fki4b6YJQJK59IDxvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:31:29:23:d6:64:ab:16:ed:72:96:c6:65:ef:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Oct 19 10:03:04 2025 GMT
Not After : Oct 20 10:03:04 2025 GMT
Subject: CN=628f52b5134f6a8d8e9d8ad9828da4c644c57b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:36:12:fb:31:3d:ae:dc:be:1c:bf:7a:fa:
d6:28:36:e8:36:a9:3d:6d:b2:f0:82:9f:f9:2a:b1:
f5:72:5d:54:6f:a6:7f:10:08:7e:bc:04:7d:14:05:
6c:54:d1:9f:24:8e:ec:27:cc:32:a8:df:60:54:40:
39:ae:63:ad:2b:4f:47:9c:fc:91:c3:83:7b:97:0c:
8d:63:d9:53:fc:0a:6d:2d:26:58:05:0b:18:59:38:
7b:79:fa:ac:50:65:c8:b0:f9:a3:6c:4d:7f:78:c9:
d3:ba:79:f5:83:5e:2f:4e:ea:68:b9:dc:e2:20:34:
6c:b2:48:1e:d0:8c:0d:07:43:9e:b6:4d:73:16:97:
3a:db:f0:e3:73:14:d2:92:d4:39:1e:e1:14:52:1d:
a6:37:cb:03:44:a2:01:c6:47:3c:e9:c8:8b:f8:ab:
31:9a:85:42:9c:f3:48:a4:7c:c8:71:ac:48:fc:36:
36:9d:97:94:4c:92:7c:b4:d7:b5:db:57:8b:65:88:
69:4f:9d:cd:68:04:01:06:ea:99:d9:92:d8:08:81:
89:df:ab:5d:d2:77:45:1a:05:9f:05:08:5f:8d:78:
5e:d9:cd:ea:0f:c0:9c:52:89:d2:f5:2a:14:f7:fc:
73:5d:2d:e0:80:26:a9:74:2f:80:47:d6:8a:9b:73:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8F:52:B5:13:4F:6A:8D:8E:9D:8A:D9:82:8D:A4:C6:44:C5:7B:2D
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4f:37:28:c9:37:f3:b0:55:e4:48:cf:ab:a5:d6:e4:d9:53:
62:12:7f:c6:d3:19:0c:93:a0:bf:cd:f6:ea:67:e3:a1:e8:64:
32:63:e9:7a:97:7b:00:b1:27:87:fd:1c:49:96:29:69:4f:01:
97:ce:bf:96:50:df:d2:6e:94:3d:2e:2a:84:f4:a3:e5:51:84:
ba:9c:4a:ef:09:2b:e4:96:11:1b:7d:68:06:b8:5b:2d:8a:59:
39:50:d3:27:a1:36:3e:20:48:41:36:42:72:b5:3e:c5:91:0c:
a1:95:25:5b:84:4c:80:d9:cd:0a:8f:fe:d5:ed:4e:56:f8:54:
cd:42:74:f8:58:dc:ef:2e:4a:56:2f:31:21:c0:42:74:ee:4e:
22:7c:98:19:44:67:6f:b5:64:0b:d7:9c:7e:e4:b9:ff:72:9f:
87:72:c3:e3:df:e6:b7:fd:cc:70:1d:fa:39:3b:39:de:90:93:
b0:95:e2:e1:64:a7:bc:78:40:b5:9d:f4:de:19:ba:a0:01:90:
d3:ee:56:09:02:d3:eb:4e:58:5d:5b:96:57:a3:e0:fd:0e:7d:
80:e0:da:26:df:4b:4a:dd:1f:20:c5:5b:1f:ea:44:ea:7c:65:
c7:3f:72:c5:41:3d:b8:8b:bd:07:90:af:d1:97:d7:20:fd:d8:
08:18:68:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:14 2025 by rpki-client