Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json)
Hash identifier: INp/VgYGjGX8kYg1sh9P3RdURGoABHBgdqZm1whlpu0=
Subject key identifier: B3:C6:E4:93:34:22:5F:8A:E7:08:46:68:65:FE:81:57:74:BF:93:79
Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Certificate serial: 019A5451C829458969AF6673EEB9D4244323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
Manifest number: F5
Signing time: Wed 05 Nov 2025 14:00:37 +0000
Manifest this update: Wed 05 Nov 2025 14:00:37 +0000
Manifest next update: Thu 06 Nov 2025 14:00:37 +0000
Files and hashes: 1: aMimPGKaT2G8XuuZ7-2O1Nh1hh8.roa (hash: k/8LZ3MzLnclzjgMcW5jgVcEL+c+Ow+osyP79ShIXpk=)
2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: L2/j+YqrKPuZrGzaM/iSx/UX0UPURLMFQXWHqnSvN5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:c8:29:45:89:69:af:66:73:ee:b9:d4:24:43:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1
Validity
Not Before: Nov 5 14:00:37 2025 GMT
Not After : Nov 6 14:00:37 2025 GMT
Subject: CN=b3c6e49334225f8ae708466865fe815774bf9379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:b4:ea:cf:ce:4c:d2:8c:b4:40:de:22:00:
27:73:7d:d9:e0:1a:c5:70:10:cd:70:32:b8:42:63:
86:f3:7f:a0:b4:21:ae:96:d3:38:76:66:a1:2e:23:
e0:31:e1:3e:c1:3d:e3:f3:61:4d:f2:d8:58:85:50:
7c:f8:48:57:33:24:69:6f:05:4b:d6:0f:a7:b3:57:
61:10:50:78:31:db:99:40:ae:c6:6e:dd:e9:36:80:
ce:a3:6d:56:45:95:69:9a:a8:79:02:20:c1:69:85:
d4:ab:59:6f:3c:42:b2:10:8b:db:41:d8:0f:63:2b:
cb:8d:05:82:ea:4d:60:f1:ca:b0:96:f6:15:f5:e6:
8b:3e:f5:4e:be:09:73:63:4d:49:f4:b6:73:8d:f4:
cd:2e:1d:bf:a7:34:93:95:7e:d6:2d:43:48:df:aa:
87:1e:f8:66:3e:19:8d:fe:4c:05:84:69:d5:1f:b0:
10:6e:16:b5:fb:f4:ab:e9:72:ed:d7:f8:84:52:2c:
94:5d:dd:ae:9b:40:cb:aa:c8:88:15:ef:8b:f1:6d:
a0:eb:48:ee:04:29:aa:67:f8:ea:a8:4d:da:b1:50:
56:2c:6a:48:85:03:36:af:8b:47:71:0c:6d:b5:be:
1c:b4:9b:01:9b:0a:d8:a1:e6:86:e8:4e:e3:93:3e:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C6:E4:93:34:22:5F:8A:E7:08:46:68:65:FE:81:57:74:BF:93:79
X509v3 Authority Key Identifier:
keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:53:bc:15:64:de:ae:a5:1e:cc:78:9b:7d:e3:ab:f4:d5:46:
25:09:e0:63:1c:a5:23:64:ee:d5:cd:47:fb:50:02:dc:10:1c:
03:fc:4e:e2:63:8e:da:79:61:64:cf:0c:a4:66:f6:6d:c1:c4:
f6:37:85:36:ab:a6:da:65:ea:ed:47:cb:87:d7:0d:ba:db:f1:
de:2b:11:4c:49:3b:e0:39:88:40:0c:59:80:24:7f:d6:d6:2a:
d0:ff:18:62:d9:47:d5:06:2c:f0:02:7c:8a:9a:dc:12:08:95:
07:4b:30:40:3b:f9:9d:21:18:9c:17:c5:05:60:92:1c:60:2a:
b3:19:0c:9e:2e:a9:92:b0:4a:06:19:c9:ee:64:3b:47:88:0f:
71:d8:59:43:4f:2e:b1:83:e7:dd:e1:41:91:59:7a:83:4b:f1:
5f:fd:cf:3e:2b:58:0b:78:3b:c0:f5:88:d8:9e:c2:ce:6d:d1:
2f:ba:66:00:f8:67:70:bf:33:29:56:32:82:12:5e:b1:da:40:
e5:f8:a8:af:96:34:0c:6f:ab:21:89:9f:6f:ed:c2:ec:fa:90:
9f:09:a2:15:8c:8a:97:08:e6:7f:b7:ba:7d:85:ba:df:25:03:
2b:23:09:71:da:19:d0:e0:40:86:7e:e1:90:46:fe:aa:95:80:
e7:a5:ae:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:19:51 2025 by rpki-client