Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
File: V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft (raw, json)
Hash identifier: /YIKg1F1dFxVQ8ErAIJxQbVUxeVLrSeXqHO2q/FgYBw=
Subject key identifier: 56:47:19:04:8E:8D:E9:5D:68:97:9A:C0:A1:62:31:47:65:8E:91:31
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial: 019A51BEA647554EB2C4FDEB67582C1B8409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
Manifest number: 10A0
Signing time: Wed 05 Nov 2025 02:00:40 +0000
Manifest this update: Wed 05 Nov 2025 02:00:40 +0000
Manifest next update: Thu 06 Nov 2025 02:00:40 +0000
Files and hashes: 1: 7mW3WjVVw9eGN8jbjHf3-to5ckg.roa (hash: mgTvCDtWlsTF65gNfXMneOYsagkRwGQqVAdRKNVR7wE=)
2: V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl (hash: V+4mKNQkeylJA4vb1hMXO7sEeOMBcmvn2HnhLTwdb5o=)
3: opZuDmDWQL5ca_7w2GLyUTRdL5E.roa (hash: icGuPqMDdyClVp/nHf/m0TN12+gflYp9hAwPQL0ezMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a6:47:55:4e:b2:c4:fd:eb:67:58:2c:1b:84:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Validity
Not Before: Nov 5 02:00:40 2025 GMT
Not After : Nov 6 02:00:40 2025 GMT
Subject: CN=564719048e8de95d68979ac0a1623147658e9131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:9d:2c:55:fd:46:2f:b5:21:8f:31:2d:75:
af:b2:d6:3d:29:e8:19:6f:8c:23:66:0d:11:96:53:
ad:69:22:89:36:e9:f6:a0:84:e2:8d:fc:68:dd:ba:
c2:8d:6e:31:9d:a2:35:94:82:45:fe:61:62:90:15:
d4:66:e0:be:34:41:e4:b4:ab:d0:c9:bc:ce:2d:92:
e3:ba:51:02:e8:1f:0d:cf:8a:3f:2b:13:73:01:06:
fe:5f:39:44:55:1e:9b:87:08:f3:a9:ba:91:a5:b5:
e1:2c:10:86:96:38:9b:12:c4:3f:69:c2:f2:f1:9f:
03:cf:f9:2f:49:8a:b9:32:1e:22:e8:38:c6:08:1a:
8d:39:f2:bb:bc:62:3b:d7:d8:14:4c:6a:b7:5d:e5:
78:bb:c4:50:4f:55:19:68:51:d6:f3:ed:a6:2c:ee:
c3:1e:22:f2:6a:f5:98:6e:51:68:1f:d4:14:6c:4c:
bf:22:2a:9a:51:f3:25:10:d5:f1:7d:45:95:b1:7e:
66:59:ee:69:1d:81:3b:0f:a7:0e:31:6b:7a:34:51:
f6:b8:78:7e:d9:ff:a4:97:f8:01:3a:a3:33:de:5d:
80:b9:b9:e5:90:16:2f:0c:b4:9c:12:88:53:0c:44:
b1:4e:be:51:12:ac:d4:de:b1:12:cb:18:6c:3f:09:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:19:04:8E:8D:E9:5D:68:97:9A:C0:A1:62:31:47:65:8E:91:31
X509v3 Authority Key Identifier:
keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e6:ae:a8:22:a7:9d:6c:f5:8b:9e:17:b5:21:8c:1b:3d:64:
3f:1d:f6:9f:a0:81:b5:37:6a:07:31:90:a1:db:d9:d8:94:fd:
6b:3d:b4:b5:04:e4:22:c7:6d:67:ba:20:20:a8:51:09:8e:52:
d8:e4:4b:82:b2:c5:c5:34:86:fc:4e:2d:2b:78:68:6b:72:30:
df:50:0e:25:a1:4a:a3:db:dc:56:fb:ec:02:8f:da:53:af:68:
82:20:2d:3f:59:00:b7:a8:42:57:4f:09:f8:a2:b0:a8:de:c0:
43:44:44:a7:1f:91:3b:58:a6:18:80:49:fb:a9:f2:c5:13:63:
0e:f1:39:a7:39:58:93:de:90:22:86:3c:75:34:30:5a:e0:0b:
ff:2a:bc:5b:bf:a8:ad:13:cb:00:0b:ae:4f:6f:3a:f7:6a:87:
54:81:7b:85:92:17:c4:25:9d:23:87:9c:75:3e:00:78:3c:1e:
2a:30:1f:44:26:4d:61:68:d1:92:b4:cb:f2:34:48:82:f5:e3:
7c:3b:05:71:73:2d:23:00:83:d4:55:87:d2:12:f2:ea:8f:77:
57:ec:a8:d7:67:60:d2:1f:ff:c3:47:c0:e0:6b:24:ab:3f:47:
54:6e:96:81:45:1f:a0:61:7e:e3:4f:76:bf:8b:97:7c:46:85:
ce:3e:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:11 2025 by rpki-client