
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: +ZLzJth1a7RcbNOJSOAzZENmkfzSrIRNTmCZbdcHLuE=
Subject key identifier: FB:44:7A:A3:9A:0B:43:09:B7:FD:21:11:C0:1C:A7:AC:5C:E4:4F:6A
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 0199FC590AE28A7F84E8C1D2637B615515F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: 7fq3PXJYhvB+I3A1n4nlx5YDbyTlBnTP7F8D4zzPx0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0a:e2:8a:7f:84:e8:c1:d2:63:7b:61:55:15:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=fb447aa39a0b4309b7fd2111c01ca7ac5ce44f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:79:b5:a8:27:22:7a:ea:75:6f:96:f5:da:
f7:79:2f:92:3d:62:a9:f1:f3:81:e3:69:00:a2:c7:
b8:4c:e2:d2:e2:56:2d:06:e8:91:38:d1:60:0e:b0:
08:d5:1d:f3:7d:e4:1c:d5:76:4e:6e:d9:bf:cb:1a:
77:6f:4c:d3:ae:ab:78:d8:5c:dc:9a:fb:0e:c5:ba:
37:0f:5b:0f:11:18:0f:b8:01:05:4e:b6:f0:d5:76:
9d:ac:69:77:d6:06:39:70:b0:60:ff:a3:d4:a1:90:
87:d5:1f:21:00:dd:2c:4b:c7:f6:90:6a:51:26:c5:
5a:f8:f5:d7:3d:ff:28:e6:ad:d4:c9:4a:bd:4d:39:
d8:aa:31:98:31:f0:08:52:24:88:38:c8:44:85:9c:
07:08:c2:1a:6b:a9:bd:6a:b3:0c:e6:1c:59:b0:ad:
1b:8a:07:e1:bf:aa:c3:a7:45:96:17:07:ea:6d:87:
98:8f:79:8a:f9:d4:90:0d:5b:6c:90:ba:c9:34:cb:
84:67:18:fb:0b:37:fe:04:dd:d1:43:3f:94:f5:b6:
79:05:55:35:5f:4e:e1:c3:52:c2:62:40:36:fd:00:
d0:86:ca:7d:e5:52:cd:12:96:29:43:d8:3d:9d:4b:
68:6e:a4:b3:e9:9b:9d:29:7b:db:da:e9:24:eb:ea:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:44:7A:A3:9A:0B:43:09:B7:FD:21:11:C0:1C:A7:AC:5C:E4:4F:6A
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:50:b1:fa:b2:1e:3b:5f:25:22:4d:f7:90:91:fc:5b:4c:b9:
27:70:78:06:3e:ce:50:72:4e:ab:6c:79:2c:7f:1f:61:c2:67:
e1:9e:b9:52:78:5f:2e:f6:cc:9e:65:b9:f8:35:84:74:3b:30:
2e:aa:62:76:73:cb:76:69:18:80:3d:36:90:80:7d:2c:5f:86:
9a:00:b2:be:28:e5:96:2e:bc:a7:cf:d3:2e:8b:99:c9:5a:e0:
e4:2a:81:ed:8b:3b:ab:e3:43:2c:97:5b:ef:f4:ac:c8:a4:25:
d9:59:86:9f:55:b6:1b:2b:e2:16:1a:f1:48:03:1b:53:d7:10:
68:56:08:4b:8a:b0:c6:34:0c:74:2b:d0:b8:e0:61:52:2b:b3:
f1:cc:8d:81:cb:52:19:fe:1c:7b:d7:d4:6e:eb:91:af:2f:86:
d1:d4:1b:af:5b:e4:22:62:bc:81:16:bc:91:3e:6a:4b:c9:f9:
1c:0a:eb:29:73:d5:c6:83:8b:7d:22:08:1f:f4:7d:6e:e7:5c:
0f:1f:d6:6e:a0:bf:0a:5d:f7:9f:64:57:d8:f2:92:1d:ad:ca:
2a:83:46:83:5b:f2:04:1b:01:96:3e:61:79:c3:49:29:26:b4:
21:56:ca:0c:85:24:6f:ec:10:39:f9:d2:59:b4:bb:91:83:7f:
82:40:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:15 2025 by rpki-client