Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: W+5A4OeKGDn0KEOjtX1T1CA4jHL7cBYR5d1g3DqXzx4=
Subject key identifier: 61:38:92:49:76:0A:6B:F8:7E:26:33:BC:8D:A7:12:F8:80:DC:FF:75
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 019A4D7413F167F0FB7127B0BAD1815D1969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 07A3
Signing time: Tue 04 Nov 2025 06:00:44 +0000
Manifest this update: Tue 04 Nov 2025 06:00:44 +0000
Manifest next update: Wed 05 Nov 2025 06:00:44 +0000
Files and hashes: 1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: l5GCrXmxv+SEum4+UlCDcD5+OKKhgb/kD/EbWIjmR98=)
2: ybOueXNsSJri02mQKQibbKcroL4.roa (hash: rsUCG/CXGaoh8At3iU9kgYgz39f7x4KapImvavgysk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:13:f1:67:f0:fb:71:27:b0:ba:d1:81:5d:19:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Nov 4 06:00:44 2025 GMT
Not After : Nov 5 06:00:44 2025 GMT
Subject: CN=61389249760a6bf87e2633bc8da712f880dcff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:4b:93:ae:d0:74:11:f5:0f:ab:63:34:24:
81:5d:07:c8:4e:e5:75:2d:f7:bd:e1:ac:c1:f9:43:
b9:5d:63:9f:ee:53:65:71:20:15:b8:c1:e3:b2:47:
08:20:fd:46:ae:b4:43:ac:5d:cf:7f:93:de:e8:da:
07:2b:5f:e3:d6:c2:88:20:e7:c1:bc:84:c0:8c:08:
3e:c8:c4:cf:00:1f:74:61:f5:95:27:54:ac:51:e0:
ed:d4:dd:ed:f6:4f:3c:7f:ac:35:0a:f5:71:07:0f:
14:bc:3f:ea:f0:e6:c9:bf:71:f4:72:f1:1a:97:d0:
ee:f0:ee:f1:ac:91:4a:ab:aa:72:9a:32:b5:78:69:
eb:b6:42:bc:58:e5:4b:ca:58:69:f1:47:73:9e:bf:
93:6f:d8:7f:83:c0:0a:0d:cc:66:14:01:e2:67:91:
e2:31:d9:8f:ac:ed:da:c3:7a:54:d2:6c:05:24:82:
61:7e:9e:be:85:29:06:0c:42:f8:fc:6d:d1:31:6f:
09:09:d4:80:80:48:97:49:93:d2:39:38:7c:35:5a:
01:ec:7b:94:59:dd:a2:f7:3f:ad:f4:52:78:e4:d6:
9a:63:5b:a3:23:d4:45:51:c1:c0:fd:35:22:cf:48:
42:11:a1:fa:8c:c0:33:65:05:ed:63:46:89:ba:a0:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:92:49:76:0A:6B:F8:7E:26:33:BC:8D:A7:12:F8:80:DC:FF:75
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1c:f8:b5:2d:1d:d6:7c:f5:c1:c4:43:57:35:af:68:9b:ac:
aa:65:de:04:a1:a3:d7:2a:2b:d9:4b:32:89:71:d3:32:4a:45:
5e:96:8e:30:99:20:88:c2:0e:00:28:bc:fa:ea:15:3f:c1:e2:
35:b7:cd:52:9a:ad:aa:29:a7:d6:e5:4e:52:48:2f:20:01:17:
df:b0:2a:b6:1a:b1:eb:c7:98:9f:45:31:0a:73:60:17:a3:7c:
cd:b6:db:c1:db:52:fb:6d:2b:57:6b:63:d9:10:f4:38:4c:5b:
64:00:81:fd:30:e7:61:43:2a:8f:18:64:49:c9:30:99:c6:16:
73:8f:2a:23:17:5c:11:14:ff:92:87:f7:c1:a6:b3:e2:aa:ff:
3a:d5:ca:e6:68:06:c6:ad:aa:eb:e7:13:85:cd:07:65:5b:a4:
ab:71:9d:09:86:df:cf:d2:39:2e:e9:7e:f8:b1:79:0b:e0:cf:
6f:83:ea:dc:89:31:f1:7d:07:12:c1:df:bf:b5:61:46:11:60:
43:71:09:c2:da:2b:89:1c:c6:66:d2:93:6f:90:0a:1d:01:7e:
bd:26:c1:3f:b2:fb:41:4a:e3:7a:dd:e6:4a:4f:9f:e3:60:80:
48:79:07:09:c6:1a:76:ad:44:bb:4f:28:f3:c6:33:bf:ec:a0:
4a:13:97:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:20 2025 by rpki-client