
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: Gj57pVdcgi08pRZt4o27fUGj2AcyjkbO1qQFINckQqo=
Subject key identifier: 13:B7:8F:5C:75:65:E4:D5:C2:70:F2:85:B3:64:72:7D:B8:76:22:01
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 0199FC5867AC15DCAC613E19336721820794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0E44
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: zVdQv1FGE4HFXnT3nfMO48YVy+03wq8SnVLeDeU9cFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:67:ac:15:dc:ac:61:3e:19:33:67:21:82:07:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=13b78f5c7565e4d5c270f285b364727db8762201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:7b:f5:3c:5a:86:3f:f3:51:ae:1d:8e:89:
fc:ac:9f:3d:7b:f1:64:b2:9f:c3:dc:ed:f9:64:32:
e7:b4:30:77:bd:9a:6d:42:0f:cf:6a:f0:2c:6f:32:
1e:d3:e6:2d:32:33:74:7d:1c:7e:4f:8a:66:1d:91:
61:9f:a4:8f:61:56:cb:08:7b:38:30:be:0d:c5:45:
22:58:75:65:21:bc:d3:8e:5b:b7:9a:a9:e5:15:80:
4a:ac:93:7f:bf:61:75:01:2f:d2:76:7c:35:18:0b:
bf:4c:85:14:af:3c:5f:be:5e:25:ef:80:ea:14:a9:
be:3a:a1:e0:3b:91:fa:5b:99:c1:46:f6:e3:87:d9:
5c:70:8c:f2:63:e1:aa:67:f0:7f:80:f5:9f:f8:bc:
05:b4:e7:73:ad:15:e4:1b:f6:82:90:c2:2f:a6:0a:
74:84:b0:f0:f2:12:67:24:4f:39:d1:21:9a:ff:e4:
cd:38:c0:74:1b:64:ea:b6:51:0d:a9:81:1e:77:dc:
f6:2e:ea:6e:b3:42:ca:34:5b:41:1e:61:17:a3:dd:
e0:22:61:78:c4:ff:a9:e3:c1:e6:f6:29:f0:41:b6:
03:09:9a:d6:25:8e:62:65:44:68:1d:fc:dd:b6:5a:
b6:b9:ac:5f:31:01:d6:f6:29:05:c7:fb:33:a0:13:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:8F:5C:75:65:E4:D5:C2:70:F2:85:B3:64:72:7D:B8:76:22:01
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:24:86:a0:7f:7c:ec:68:35:d7:bd:44:bc:9a:f0:49:15:bc:
17:9f:10:bb:50:14:e4:b4:3f:42:90:28:1e:a8:0a:a7:ad:8f:
cc:ef:48:1e:f8:9f:49:f5:33:10:27:ec:47:0b:e2:42:d5:e9:
ba:ab:e6:0b:e6:56:64:7d:ad:2c:3c:18:2f:1f:90:a1:d0:2b:
d2:c9:b0:07:b1:98:42:df:f9:7a:74:cf:81:6b:a1:d2:4f:a7:
91:1c:9d:d4:5a:18:a5:23:45:25:81:35:79:70:eb:4d:33:c7:
7a:fd:2a:e0:ea:bb:1b:15:e0:73:dc:7d:c7:c0:4d:65:4e:0f:
56:fe:d2:27:8c:21:af:2a:e4:d2:75:95:a7:b4:6f:b6:f0:55:
30:79:b1:0d:57:b0:71:78:41:08:c7:b1:9b:b7:d1:2d:71:77:
05:97:df:36:e3:9e:c6:43:76:1a:6b:5a:79:ee:9c:7b:1d:4a:
c4:45:8d:1d:3c:ff:ec:1c:2d:c1:66:40:67:08:35:c5:a4:23:
09:34:1d:b4:22:dc:b7:7b:c5:9a:cd:a7:21:87:8b:82:09:d5:
cf:4b:8a:c9:29:b1:94:f2:90:91:54:f6:69:4e:91:a5:d5:c1:
28:e5:92:ee:8d:cd:29:e4:2b:15:41:2a:90:5b:0e:87:c9:73:
e8:16:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:57 2025 by rpki-client