Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier: qjeMlvcH+3SGBjKVdVEfvvPW8PDOQmTUfGLBKzKyQTI=
Subject key identifier: 52:71:65:BE:9B:35:00:9B:8D:56:DD:47:82:DF:91:75:EA:EB:C3:9E
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 019A4E4FE1174CCAD0849D18BE25900C079E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number: 07FC
Signing time: Tue 04 Nov 2025 10:00:49 +0000
Manifest this update: Tue 04 Nov 2025 10:00:49 +0000
Manifest next update: Wed 05 Nov 2025 10:00:49 +0000
Files and hashes: 1: ChDs0vPKHYXjmSRKvkz2qLqd3Rw.roa (hash: ThMIkvoH8p8/FHDDQvYXCmb7VtUAbCIv++31C7wNSNA=)
2: YH9rgvwa_c5tkfoIds2w3LcyxQU.roa (hash: O5b96K5UqDPwtmiTY4ipuOfWppIds6W4j/eFK50+Z/0=)
3: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: 7ivTiCKZjzOJDAIa0ijcmKbhObUYol9B+AaGMktPeCY=)
4: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e1:17:4c:ca:d0:84:9d:18:be:25:90:0c:07:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Nov 4 10:00:49 2025 GMT
Not After : Nov 5 10:00:49 2025 GMT
Subject: CN=527165be9b35009b8d56dd4782df9175eaebc39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:96:ec:ae:56:ca:ef:ad:d1:2a:22:b8:94:
ce:b6:0f:6b:98:03:dd:0f:e4:6e:e2:8c:ff:73:6e:
5f:31:d6:16:45:41:df:34:71:20:4b:f6:3c:83:50:
06:57:3e:5d:35:47:2e:2d:29:ce:3c:de:dc:b4:06:
0a:1e:a1:2d:36:d1:78:b4:50:6f:2b:37:a9:0a:f3:
c5:5d:99:e0:51:cf:a0:60:cc:9c:17:d7:c9:e6:78:
63:ab:85:68:3c:99:8f:cd:30:04:99:4f:92:48:8a:
1a:bb:5e:fb:6f:1d:be:5d:14:05:f6:95:3c:82:6c:
c8:1b:46:15:76:06:9f:bb:97:3f:7b:7a:15:82:0e:
9c:e6:de:ba:5b:e9:cc:f4:1e:d0:ff:0e:aa:70:29:
0b:a6:94:e5:95:bc:e0:12:1b:e4:08:97:a0:33:80:
f1:88:19:28:3c:3f:8b:02:61:b0:11:89:ec:22:5e:
4a:47:b4:1b:bc:ba:5c:f1:88:aa:28:1a:e6:48:90:
b4:ee:2d:a2:e9:c1:e1:67:a6:bc:3d:08:20:13:2d:
59:5e:05:a0:30:6f:fe:99:96:93:c1:1b:c3:12:28:
4e:d7:aa:69:09:77:e8:24:db:a0:43:06:4d:da:90:
2f:be:70:b1:c8:e0:a6:43:45:f0:00:e9:b1:38:cb:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:71:65:BE:9B:35:00:9B:8D:56:DD:47:82:DF:91:75:EA:EB:C3:9E
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:db:57:98:b9:2a:4c:aa:92:c6:dd:0a:d3:f4:d3:e5:f0:06:
f7:c8:48:63:cc:e7:ca:b3:45:1d:fb:a5:77:01:6e:57:41:d1:
d3:88:5d:f9:3b:c5:fc:60:d3:91:84:82:08:52:ed:09:99:02:
ed:a8:94:0a:af:9d:a8:ca:6d:37:3e:52:07:d6:f5:3e:aa:81:
f9:e1:d4:9b:f1:6e:76:fb:23:43:88:e5:cc:7c:91:66:fd:ca:
80:e3:8f:ab:24:b8:bc:3c:2a:ff:4f:f7:98:ba:bc:45:8e:51:
59:c9:c0:55:d5:59:8d:f3:4c:93:7d:d2:f4:97:cc:15:80:60:
a2:e8:35:6e:9d:88:8c:3a:3e:06:60:45:3d:2a:fe:15:b6:02:
d0:c5:b6:74:58:81:79:ff:23:eb:c4:8f:18:94:c3:51:2a:82:
1b:01:47:ac:e3:b3:c4:18:39:1c:ba:97:98:66:a6:cd:ed:49:
68:21:eb:86:38:a2:31:52:09:4c:57:58:74:37:c6:8c:34:1b:
52:ab:65:af:fe:b2:57:ff:2e:01:62:d1:23:86:15:a5:c1:3e:
4e:00:3d:2e:9a:7f:fd:8c:99:79:83:a7:bf:5b:59:a8:40:81:
5d:60:ed:bf:ff:0c:a5:24:92:e3:bc:f7:3a:b9:52:d4:55:43:
84:c5:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:19 2025 by rpki-client