Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
File: V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json)
Hash identifier: ct+HX1Rrf/e51sqdC90nUdIZq+6y8m8/G9ySqGHEPhM=
Subject key identifier: 8D:44:25:98:31:02:EF:94:D2:21:D2:F6:5A:0D:C4:6F:89:B1:D3:A5
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 019A4E18BD73D4DDAC5FE823A2B8FCBBA0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
Manifest number: 1555
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: TvA9yelIeCEsBOpJLkUsBtajKVo.roa (hash: LU0UMBgUcT/XT2r0CrVUUIqkTToEzuecRy7vAdwTq9c=)
2: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: e4dkluBBVdtg7vNn96l6LZPZyKyk1l1p0UUPN+rqNTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bd:73:d4:dd:ac:5f:e8:23:a2:b8:fc:bb:a0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=8d4425983102ef94d221d2f65a0dc46f89b1d3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:d9:a1:6b:a1:7a:9a:3c:48:e2:5f:32:40:
24:42:78:aa:a2:3e:05:d4:eb:4f:98:cd:bb:62:ed:
14:6a:6e:82:55:47:db:a6:27:a7:75:d3:fd:1a:44:
59:13:c3:4f:71:c4:d7:fd:c8:e2:75:a6:1c:35:02:
0c:64:f2:25:1b:db:15:bc:3a:0c:9d:15:5a:76:d7:
14:0b:28:d8:83:7c:d6:f7:54:d2:65:5e:a7:bd:c9:
c8:f7:bb:6f:6c:18:e8:56:d1:8c:fd:45:2f:6a:8a:
10:66:b8:61:42:20:dd:89:d2:cc:21:30:2b:18:65:
42:82:bc:89:27:d9:fc:8a:dc:08:c3:b2:a6:ce:ea:
45:b5:0f:b8:09:9a:c0:79:8d:fa:3d:9d:8b:ee:4a:
7b:d6:f3:09:d5:90:0b:fe:09:5f:1a:af:1a:3d:30:
9c:6b:32:5e:06:22:b2:2a:c4:77:1b:fd:b5:82:06:
de:33:56:c3:cf:77:bb:d0:83:3d:5f:14:24:81:0d:
80:e9:b7:2e:60:54:c8:fd:89:b0:44:97:0c:c1:73:
3e:96:ca:1c:d0:65:d6:dc:1a:e8:72:dd:11:c3:f4:
bf:de:8f:8a:a2:7e:72:bd:2a:10:3c:43:b9:8a:b9:
82:e8:a2:03:66:b4:de:38:58:f9:30:83:91:25:2b:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:44:25:98:31:02:EF:94:D2:21:D2:F6:5A:0D:C4:6F:89:B1:D3:A5
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:70:18:65:e4:0a:21:94:b9:b6:2c:05:c2:d1:ea:5e:57:99:
8a:d9:19:8b:a5:ee:2c:b9:22:4a:6b:f2:16:34:26:7b:af:98:
59:83:25:a2:2b:15:d9:62:4a:ed:2c:98:2e:82:89:44:82:6d:
03:8b:8c:f3:e0:d9:14:b2:bc:02:c4:a8:ef:9a:56:10:ed:90:
5a:a9:84:ed:14:c4:54:b0:c5:ae:ce:d0:99:af:b5:f5:b0:fd:
84:4c:90:90:57:5b:f7:75:ab:95:81:84:2a:11:59:28:6b:0f:
18:9a:54:dd:3d:ed:e6:b7:62:07:be:e2:2a:99:35:04:65:65:
14:4b:23:0b:a6:02:1f:a6:de:0c:c5:1d:32:8d:a4:00:53:6a:
50:0d:86:1c:d1:cb:b4:6f:c4:ac:e1:74:53:6c:a7:f1:0e:73:
7d:8a:e5:19:ea:73:2e:ae:f5:83:15:dc:62:5e:b5:0e:9e:b5:
c3:6c:ec:e0:d6:78:e2:2f:57:31:6d:ad:c5:5f:78:f5:de:7c:
a2:c4:be:1e:a6:17:54:1d:ae:fd:82:e7:d3:6c:61:4e:e4:f4:
b7:4c:6a:6d:12:e8:38:c3:09:93:b0:f0:be:1d:20:d1:72:94:
bb:a2:e4:3d:98:9c:18:8b:69:88:88:07:95:03:06:5d:2b:72:
cf:d8:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:48 2025 by rpki-client