Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
File: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json)
Hash identifier: F6f5L2PMTnQci4IKEPLPTq+NEXdBp2QV7u+R/UtM6fw=
Subject key identifier: 49:D5:42:F3:36:6A:DD:D0:62:F9:FB:BE:E0:C7:AF:4C:28:A5:34:32
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 019A51BE3F157EA6A4C5686874536A9999FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
Manifest number: 1412
Signing time: Wed 05 Nov 2025 02:00:13 +0000
Manifest this update: Wed 05 Nov 2025 02:00:13 +0000
Manifest next update: Thu 06 Nov 2025 02:00:13 +0000
Files and hashes: 1: 6nka26L-7vbT-huqQ7zH80Ad2_Q.roa (hash: bi36P0sQvSkI3t0S3Th1jO23VxQKQmTqbcjBaO1g00A=)
2: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: HrY4qzs6x1NXwXcEj8MOZULWLbVHWPmbW9UmImLTLxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:3f:15:7e:a6:a4:c5:68:68:74:53:6a:99:99:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Nov 5 02:00:13 2025 GMT
Not After : Nov 6 02:00:13 2025 GMT
Subject: CN=49d542f3366addd062f9fbbee0c7af4c28a53432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:a0:3a:a5:5b:4a:38:55:83:4f:4d:a1:10:
21:9e:c3:02:f4:ea:ff:cd:1e:80:3c:5d:e1:88:47:
48:d3:9e:b0:d5:60:b2:f4:74:87:a6:8b:4a:db:41:
fb:93:b3:c8:b7:1b:f7:a7:70:ed:db:ad:3b:7f:bf:
2b:d1:c8:9b:34:40:c6:89:7f:c5:d7:49:76:92:b7:
c8:00:1e:31:fa:42:f2:43:c5:0f:58:48:44:c7:ff:
ea:4a:b2:fd:32:2a:b3:58:bf:a8:bf:99:a2:d2:3e:
60:0d:88:44:e4:02:93:55:4c:d6:85:35:58:f8:3a:
fe:15:ef:ea:5a:8e:3f:ce:97:b7:42:03:e8:23:91:
2b:5a:59:d3:87:c7:f3:13:6a:cf:60:e3:4a:c3:a1:
c1:e2:f7:b3:aa:ef:60:f0:bb:cb:af:38:bc:e9:d0:
3b:65:46:80:22:5f:e1:90:85:1b:73:47:1f:76:e4:
ad:50:26:8b:bb:66:14:c6:9b:b5:01:d4:a8:f0:e8:
e2:3d:a2:cd:98:60:1e:c9:52:4d:94:f0:72:b5:5c:
61:00:df:11:2c:49:9b:98:d3:3a:c1:33:27:e7:65:
41:27:f2:87:a3:c0:8a:19:17:ee:f7:f7:bc:0c:7c:
f8:21:3b:e9:71:c8:d9:74:30:53:73:f5:b9:8b:f9:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D5:42:F3:36:6A:DD:D0:62:F9:FB:BE:E0:C7:AF:4C:28:A5:34:32
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ba:77:11:4d:f1:ba:45:55:f8:a6:49:a6:d0:cc:90:27:77:
9f:ad:2d:f2:d0:63:cd:1e:f6:8a:fa:76:34:9c:91:69:c3:07:
8a:60:ef:06:b6:3f:fd:a4:8e:34:53:18:b2:a6:26:a6:22:6d:
46:ec:28:98:6b:89:af:25:1e:ba:93:df:03:23:83:64:8f:90:
76:d8:58:56:c6:8a:1c:4a:32:11:63:77:ff:c6:1c:eb:77:a4:
50:41:2e:f5:8b:eb:5d:8b:ea:dd:87:a1:85:2f:12:40:9e:f3:
39:e4:d0:f8:9c:b2:c8:f8:5b:cf:1b:11:7f:fd:b3:08:94:5b:
ac:0f:01:f3:2f:a7:13:10:c5:1b:c3:40:a0:28:7f:cf:f1:5e:
91:ef:80:86:f9:9c:43:f9:76:d6:a2:36:15:50:67:d0:ae:80:
87:50:e3:bb:d1:61:8d:a9:d5:23:93:7e:ea:30:17:19:fb:48:
48:0a:73:32:79:c4:b4:36:c2:6b:59:fe:c9:7c:f0:e7:d4:18:
21:85:12:c0:d2:81:fd:ec:a0:62:cc:0d:4a:6a:fd:c1:b5:bc:
3e:53:83:09:c5:1c:52:fc:78:2e:83:91:c9:44:a8:af:08:b4:
9c:f0:f1:a3:4f:61:ff:5f:98:2b:78:52:3f:d4:a0:13:94:d6:
35:e9:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:46 2025 by rpki-client