Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
File: V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json)
Hash identifier: PkZF8sZLBWmhCjhuxBBJvYaC7qEvUYx4ZF+6KbthpYE=
Subject key identifier: D7:6A:A2:A0:F7:63:9D:38:03:D2:0B:73:05:EC:F6:A7:30:51:14:2A
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 0199FEEBF91827F0E8EAED0D09B12E6D07CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
Manifest number: 152C
Signing time: Mon 20 Oct 2025 00:01:41 +0000
Manifest this update: Mon 20 Oct 2025 00:01:41 +0000
Manifest next update: Tue 21 Oct 2025 00:01:41 +0000
Files and hashes: 1: TvA9yelIeCEsBOpJLkUsBtajKVo.roa (hash: LU0UMBgUcT/XT2r0CrVUUIqkTToEzuecRy7vAdwTq9c=)
2: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: tQDlG+7FQjN12eTI1NG56Zhne5nyPmzeEBGjpt52T4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f9:18:27:f0:e8:ea:ed:0d:09:b1:2e:6d:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Oct 20 00:01:41 2025 GMT
Not After : Oct 21 00:01:41 2025 GMT
Subject: CN=d76aa2a0f7639d3803d20b7305ecf6a73051142a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:c7:f4:2f:35:b3:10:91:ff:95:c1:49:67:
7d:59:f6:d6:90:84:a4:22:d9:95:3d:76:05:42:d7:
1c:8c:8a:14:f8:2e:c3:ae:26:bd:ec:4a:55:36:26:
db:83:91:86:a2:7c:26:17:a5:1f:42:e8:00:1d:c4:
81:cd:c6:a5:88:bb:4d:ae:e1:63:0e:62:1e:65:b4:
1e:ac:0d:c7:5c:96:0d:0d:ff:e6:e7:6b:b3:77:b3:
90:18:d1:09:64:e4:98:f3:8a:c1:08:40:e4:c4:8b:
7d:4a:97:86:1c:8a:f4:9a:a3:b3:bc:43:45:ca:55:
53:2f:94:db:32:4d:94:83:15:be:71:67:26:ae:2f:
6a:6b:0b:e3:0f:1b:55:15:da:7d:d0:68:21:01:86:
7f:0d:a9:8d:1e:c6:6a:3f:d7:35:f4:e4:2d:4c:bf:
7f:7c:56:f5:40:87:b7:80:67:47:d0:09:b5:c3:51:
57:b3:33:dc:bb:e0:79:ab:ab:a5:e9:d7:6d:71:ca:
74:f2:c1:8d:84:5c:e4:c1:8c:0f:d9:45:58:5a:f9:
57:d4:2d:81:6d:d2:dc:2f:1f:be:41:d7:8b:8f:54:
23:8e:cd:b2:75:11:29:eb:25:24:fd:84:96:61:6f:
13:55:68:86:dc:c0:0c:a1:11:fb:6e:63:c3:28:96:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6A:A2:A0:F7:63:9D:38:03:D2:0B:73:05:EC:F6:A7:30:51:14:2A
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fd:b0:33:8a:94:42:8d:3a:e7:60:c0:39:ab:68:9a:b5:ff:
fc:89:70:a4:43:10:d2:18:9d:46:0c:f6:ea:14:e8:b8:98:46:
eb:c8:a3:57:31:20:e3:09:6b:85:7c:a9:59:a0:f5:a2:7c:09:
20:a3:a8:c3:43:13:2f:6f:47:d6:de:c3:05:ac:b4:e9:db:fc:
de:86:d9:8c:fe:54:53:5b:aa:f0:96:80:78:bf:90:e2:ee:5a:
af:37:54:42:66:8c:35:60:c8:4c:5e:10:23:a0:31:de:96:97:
60:f8:ef:92:38:36:ee:d9:30:f6:fa:b0:82:ae:b7:47:d2:a3:
8e:e6:65:3d:b1:7f:f2:67:be:86:5c:b8:ce:c2:f9:33:e6:0e:
cf:d5:3a:10:87:62:97:cd:47:28:e0:6d:41:79:25:9f:82:0c:
7c:10:3d:ed:a7:a2:41:12:cc:6a:22:a6:9d:97:d1:35:15:d8:
ff:1a:7c:e0:5e:8f:76:74:ca:0e:be:6d:1e:20:62:fb:e9:3d:
c9:39:3c:f8:7c:37:a8:cb:6e:c2:20:ca:ff:4c:69:86:aa:3a:
41:46:0c:42:1b:1e:6e:d4:98:c2:cd:4c:7b:b9:4c:8d:8e:92:
60:9d:61:b5:49:8a:19:e4:fe:55:20:ac:29:aa:50:92:d6:88:
e1:1e:19:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:31 2025 by rpki-client