
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
File: rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json)
Hash identifier: mpRmggKx0dZvE+lHWONMjdWOS5jrEDItMvcsCGT2P2o=
Subject key identifier: 08:05:94:B7:1B:74:03:07:59:3B:A9:BB:94:FB:61:9F:D3:56:88:25
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Certificate issuer: /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial: 0199FBEAAA5DD51C350B688C447291187EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
Manifest number: 0A8A
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: djea3wowsH9-GL3nIoFch0gf_Ow.roa (hash: t6fqkUvoXSupS3l5uRjJ3VosWSd+9PoyLIE+ML64T24=)
2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: KSdv0YxdGEejfsiH+u2m4NtdmotqMpNEqzwlbtZVMFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:aa:5d:d5:1c:35:0b:68:8c:44:72:91:18:7e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=080594b71b740307593ba9bb94fb619fd3568825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:7f:dd:10:5f:a7:51:91:dd:08:4b:8f:8b:
bc:bf:d6:17:fb:52:b7:a8:97:4e:27:90:72:0c:94:
fc:e0:82:c4:59:96:cd:45:13:8c:70:d2:8d:c5:f7:
25:20:c5:83:1c:67:a0:08:62:45:6a:7c:1a:18:dd:
38:c1:80:db:a4:9d:88:b6:e4:d8:4f:8c:77:17:a2:
1a:a0:24:1a:be:41:a7:08:e9:7c:f0:2d:e7:b7:8f:
5c:31:9e:c2:36:ef:9d:b5:ba:2c:10:c0:21:1b:c9:
d8:39:cc:23:03:f0:d3:7c:e0:74:e0:b4:6f:e7:f8:
8c:52:a7:8a:a4:a5:db:54:b9:12:c4:72:4f:44:75:
42:a0:16:1e:7e:b6:55:f1:ed:d0:98:ae:8a:85:a9:
9b:57:f6:45:98:15:4c:27:4e:b0:4c:6a:a2:97:da:
c4:e5:fe:a9:6c:94:79:5f:d5:de:41:1b:75:b2:5b:
bd:d9:51:fc:5d:67:87:2f:47:7c:88:11:8b:4e:50:
18:84:3a:3c:33:4c:ed:b1:ab:97:60:17:ff:be:3a:
26:b4:f4:9b:ed:81:4c:bb:7c:fb:68:86:62:81:a2:
1a:78:f9:b5:2e:fb:a7:0d:c7:6a:e3:92:c0:04:42:
64:1b:c4:16:1e:a0:1a:a4:5d:cd:5c:39:a1:8c:50:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:05:94:B7:1B:74:03:07:59:3B:A9:BB:94:FB:61:9F:D3:56:88:25
X509v3 Authority Key Identifier:
keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:33:74:3c:75:a3:5d:c5:cd:57:59:9b:8d:fd:b9:a7:d3:d9:
f6:c9:0f:83:2f:06:96:ec:38:1d:50:94:bc:37:8a:5e:51:03:
58:4a:54:90:19:19:8c:e6:d1:c0:1c:5b:4a:a3:be:5e:70:45:
f8:9c:e7:ce:ce:63:69:72:64:3c:96:3b:38:68:26:5e:5f:83:
8b:a3:14:eb:84:0e:01:42:9f:cd:9f:7f:00:c3:41:80:dd:5b:
1b:96:81:be:5e:5b:91:26:7f:9d:a8:f4:20:c1:dd:4e:32:76:
34:4b:18:97:00:01:43:a3:00:ea:d1:15:db:ea:eb:5e:29:e9:
43:7c:b7:6f:84:05:cd:6e:3e:bf:a4:46:b8:46:88:29:71:a5:
4f:ce:4d:80:7a:a4:e1:8a:e7:cf:1b:43:7a:1d:44:d0:62:a2:
80:dd:b4:5a:4a:1f:54:a7:c1:4f:88:01:3e:52:85:2f:1d:d8:
02:65:19:8c:38:b1:13:87:6c:dc:5d:53:6c:75:d4:37:07:66:
e8:d4:fa:11:e8:5a:a6:46:fc:cc:22:18:f0:5a:07:c5:7e:2c:
f9:05:fd:1c:17:ef:6d:8e:08:90:f9:da:9b:b9:46:01:e5:72:
a5:03:d8:e5:a2:e0:4b:e9:7e:7c:01:3e:dd:ad:5b:4f:f8:19:
34:35:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:50 2025 by rpki-client