Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
File: V5G7EVC-rF6gxyTznSzn_M_BVGo.mft (raw, json)
Hash identifier: orKKfb1bDIQ4725taRKUX6pUaBwMxWobjVF5gNxTUd4=
Subject key identifier: A8:53:8A:BB:D8:B2:25:55:0D:53:FA:50:71:B4:42:60:F6:92:34:0B
Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
Certificate issuer: /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Certificate serial: 0199FBEBFF11A39D906A06F8DA9472B6BA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
Manifest number: 15FC
Signing time: Sun 19 Oct 2025 10:02:51 +0000
Manifest this update: Sun 19 Oct 2025 10:02:51 +0000
Manifest next update: Mon 20 Oct 2025 10:02:51 +0000
Files and hashes: 1: 20JIcxX-YRfmUdZsM-A9KFCVQ9A.roa (hash: Jy9A0VoisBWre1TOkMryXEsS8YexNx87KiBRG3mU7GI=)
2: 64bniClUPfUDALDLv0vwIlVjfMA.roa (hash: lL8XeUncI5mQZtyJg5Qencz5SVSK52g5YBySwrx2+kI=)
3: V5G7EVC-rF6gxyTznSzn_M_BVGo.crl (hash: QIlq1zOEfWT4wXaMsfe1Ku/85rTS8wt1gR9lLAYNwjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ff:11:a3:9d:90:6a:06:f8:da:94:72:b6:ba:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Validity
Not Before: Oct 19 10:02:51 2025 GMT
Not After : Oct 20 10:02:51 2025 GMT
Subject: CN=a8538abbd8b225550d53fa5071b44260f692340b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:d8:97:03:ba:5d:87:b2:e9:c2:61:b7:37:
07:fb:ee:41:6e:63:12:23:d2:08:54:44:72:e0:ff:
64:93:07:01:2f:be:3f:26:e6:d0:c4:13:c2:07:c1:
ed:09:5e:c4:3c:3e:46:6e:85:35:a9:ba:5a:5f:54:
6b:18:6c:c6:8c:36:58:eb:d5:11:d6:82:d6:d1:f9:
41:b7:63:a3:8b:aa:a0:f4:d0:a2:f1:74:d8:36:22:
83:72:29:93:bc:89:8e:d1:e4:89:6d:f6:84:6b:16:
94:05:83:0e:e2:59:09:32:e7:86:05:81:c7:8c:21:
a0:3f:bd:bd:6a:34:22:4e:84:7f:15:e9:f0:06:a8:
ec:5a:cd:e4:7b:a9:dc:ca:5b:52:65:19:a8:36:41:
13:e1:bc:de:1e:89:ed:7b:b9:e0:9c:37:d4:d9:7b:
d9:72:35:b4:5e:db:74:f5:27:11:d7:a2:bf:ef:13:
08:40:f5:7a:72:b8:7b:a6:60:5f:09:59:09:99:87:
0f:ea:cc:d9:5b:c7:9f:c2:31:4a:e8:52:a3:90:72:
99:4f:65:13:10:44:7a:79:90:59:5a:b9:17:2d:02:
04:ee:53:9e:ab:61:9b:43:33:bc:7c:06:63:4c:d4:
b0:94:23:e6:1b:cc:d1:0f:24:08:04:5a:7d:38:76:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:8A:BB:D8:B2:25:55:0D:53:FA:50:71:B4:42:60:F6:92:34:0B
X509v3 Authority Key Identifier:
keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a6:77:25:28:5f:a8:b2:eb:91:1f:c0:8c:79:ee:1c:80:82:
e3:bd:38:d6:8d:b9:b3:86:c1:01:6e:96:29:2c:f5:c7:d1:f5:
5b:3d:a1:ae:86:1f:3e:58:12:74:cc:e3:2c:a4:e1:8f:81:cf:
d2:b8:c2:fd:01:f6:66:c7:82:56:6d:1b:b5:16:40:36:92:66:
89:9b:0b:2c:ae:a1:2d:52:a0:b2:2b:de:33:28:a5:fd:c2:8e:
c4:be:a4:df:49:18:6f:b5:d4:78:cb:a5:f6:cf:aa:ea:2e:7d:
6f:ef:23:3c:ea:30:69:81:dd:cb:30:56:cf:7a:4b:7c:41:9e:
f2:fa:cd:64:b9:54:bd:38:52:84:29:99:33:46:35:f3:3a:56:
10:42:2d:65:64:31:3e:0a:94:38:ad:fd:84:d4:ce:ee:bd:f9:
a7:ec:ed:2b:59:e3:c9:e6:72:39:af:fd:89:84:94:ac:81:5d:
84:e4:4b:3b:14:c2:ef:c3:87:e3:78:34:c1:00:7b:34:29:47:
e8:25:37:e0:85:6a:e8:9e:c2:e6:e2:dd:fa:56:07:b9:a8:56:
df:e2:40:a9:df:1e:e1:70:57:c7:e4:d3:25:b2:00:b0:d3:19:
b7:e1:c0:8f:b4:7d:23:9c:25:a4:e6:35:2b:ce:53:89:05:70:
ab:45:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:48 2025 by rpki-client