Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: terl6GdGeEveP6p5NU7v3j3sviaS/xoTjA2VZCFha4I=
Subject key identifier: A2:D7:B6:45:F9:36:73:18:52:97:D1:D1:9D:6A:39:78:37:B9:90:56
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 0199FC589DDA7CB7FFCAD20D47EC50761521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 0779
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: mYLlzKdG6Z68CaeTb6SJCXKCia1LjHlhPKalV6xvcT0=)
2: ybOueXNsSJri02mQKQibbKcroL4.roa (hash: rsUCG/CXGaoh8At3iU9kgYgz39f7x4KapImvavgysk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9d:da:7c:b7:ff:ca:d2:0d:47:ec:50:76:15:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=a2d7b645f93673185297d1d19d6a397837b99056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:42:fb:80:c7:b4:56:e6:9d:ce:9c:28:7e:
54:fe:9a:af:57:1f:d4:2e:cf:5e:a0:0a:e5:fe:04:
7f:eb:5d:dd:21:ce:c2:1c:8e:36:6a:04:e2:c8:de:
25:0c:e0:a0:0a:4e:1b:95:0c:43:8f:fb:70:09:b2:
49:85:c6:90:a4:98:87:73:f1:34:66:3a:e2:85:92:
89:d6:bb:d6:87:50:df:25:02:3e:ce:7f:00:3d:4c:
d2:b1:31:ff:2d:1f:23:8c:89:e0:7c:79:87:58:b5:
e7:ea:8a:41:c0:a7:c4:11:9a:97:ff:28:4d:71:25:
e5:19:6d:1c:61:70:78:15:f6:38:0c:8a:09:79:1d:
16:b7:be:74:73:ad:16:44:db:4a:b8:78:b1:80:79:
ce:85:19:26:f7:5e:e9:38:6d:b3:9e:d6:41:dd:39:
2a:64:3c:c5:0c:64:51:4e:2c:e1:9e:98:1f:8b:31:
d3:38:71:e2:45:57:04:5d:67:0c:ad:11:1d:70:7c:
c5:bd:b4:57:2b:c1:3d:80:bf:8b:25:9b:65:01:7c:
af:fe:9f:5c:b3:a5:0c:b5:f9:11:47:c5:3a:b2:bc:
5c:6e:4d:9b:a3:40:5e:f2:03:97:f2:b4:3e:48:40:
a0:3c:ee:7c:bf:55:db:cc:4e:40:e9:22:89:31:e3:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:B6:45:F9:36:73:18:52:97:D1:D1:9D:6A:39:78:37:B9:90:56
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:be:0f:c5:76:e6:f2:64:05:a0:f6:4c:70:d5:b7:39:06:68:
a2:2d:e1:95:a0:e4:b4:02:82:1f:5a:33:b6:9a:6b:13:1a:1c:
a3:59:e9:6a:a3:61:2c:b0:aa:79:b7:18:d4:54:85:10:d2:27:
91:be:17:aa:b2:ce:8f:21:c7:25:68:03:d7:d5:43:d5:d8:11:
c6:c1:4f:c9:29:76:49:1f:4b:9a:3f:4c:68:db:e2:b8:0a:df:
7d:e4:ac:ec:cb:7e:65:97:c6:c1:36:ab:3b:d2:2d:2b:8f:95:
fe:09:36:ae:12:f9:a3:92:e1:34:9e:2c:32:fc:4b:14:46:34:
68:3c:9c:3d:98:1f:0e:52:45:d3:0b:4d:e8:99:56:6f:a9:b0:
42:93:92:c3:45:af:ee:4b:53:94:da:63:f0:4b:4b:9c:f1:6f:
88:a8:16:16:08:bc:b2:c0:50:ba:e6:d3:47:c3:e1:ac:92:de:
e6:23:49:08:8b:cb:23:62:0f:cd:c4:ed:c1:5b:fc:d4:18:1e:
77:b8:9f:d5:7b:8c:55:5a:77:a5:2a:6d:b7:54:da:5b:07:ab:
8b:8f:20:e7:47:9a:3a:88:b4:8c:2f:be:65:f8:15:d9:43:9d:
38:ad:f3:3a:45:c2:d3:5c:78:d9:9d:55:06:da:6b:c6:0b:64:
91:e3:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:00 2025 by rpki-client