Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: 7pZNQmA4o92ZWzx2qhPeY4KXwGAMy7hGzO5MEe3YdQw=
Subject key identifier: 50:37:EA:75:93:11:80:12:B6:CD:69:BB:69:5A:59:4F:C1:C3:40:22
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019A503DFFFA9AEAC50144B50AC2294E0856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 080C
Signing time: Tue 04 Nov 2025 19:00:31 +0000
Manifest this update: Tue 04 Nov 2025 19:00:31 +0000
Manifest next update: Wed 05 Nov 2025 19:00:31 +0000
Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: 2gKpXy4kwuBkJiAEziMZGA53UJOIerCkEc8NhC/gwTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ff:fa:9a:ea:c5:01:44:b5:0a:c2:29:4e:08:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Nov 4 19:00:31 2025 GMT
Not After : Nov 5 19:00:31 2025 GMT
Subject: CN=5037ea7593118012b6cd69bb695a594fc1c34022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:31:75:2a:26:88:d8:ab:d8:82:83:72:21:
24:e9:59:b6:9f:57:94:71:88:6b:63:c1:2a:f5:fa:
a7:53:69:dd:f5:eb:dc:18:f0:f6:82:7d:90:57:76:
3b:48:51:00:fe:1f:37:dc:72:44:de:f7:e8:47:c7:
d9:e3:6a:9a:17:35:5f:e8:07:e8:6a:06:31:e2:4a:
13:50:60:ba:ad:c1:76:b5:40:55:e4:0e:29:ec:c9:
b8:96:87:78:89:da:f2:3f:a3:55:7f:d6:45:ee:19:
9a:1f:c8:85:c7:54:e0:3b:75:06:ad:d8:22:7e:94:
76:f3:ab:ee:1b:9d:6a:ab:a6:a3:75:10:c7:77:6b:
ca:79:18:5f:6e:4e:d7:73:c9:f1:69:65:ab:c6:ab:
fc:a1:62:c9:27:4e:16:4f:e3:52:a8:14:ff:eb:83:
92:67:43:83:3e:85:c6:32:8a:07:39:90:58:0b:60:
e5:ad:32:d8:88:f8:f4:bc:20:46:55:cf:c9:a5:3d:
fe:03:aa:0d:b8:70:e1:f6:3d:ad:e2:d8:3c:7e:07:
32:f6:09:12:96:1d:b2:48:8d:6a:e8:1a:3f:7c:a9:
86:a9:2e:ef:74:11:91:6d:40:a1:56:ea:97:c9:c6:
f5:92:40:e4:34:33:a9:f9:40:37:d1:55:00:fc:c3:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:37:EA:75:93:11:80:12:B6:CD:69:BB:69:5A:59:4F:C1:C3:40:22
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f8:29:1e:6e:75:ce:ef:2b:b1:54:37:72:61:16:75:3e:67:
67:cb:57:d5:d4:6d:d2:23:69:62:49:9c:4c:9f:a9:29:4e:25:
7c:52:db:a7:aa:ee:4e:b8:aa:c1:77:d0:fb:b1:5f:5a:74:dd:
ed:d5:ba:26:72:8d:69:b6:1c:85:19:83:6e:4c:2b:6b:ae:be:
b5:6e:53:3b:7c:ae:de:f5:7f:d2:f3:5a:15:8e:af:3a:17:7f:
8f:76:9b:e3:8f:7b:98:8b:01:b7:3b:d1:a4:2a:81:00:14:08:
f4:6f:67:c6:e2:eb:19:56:10:0c:b0:33:05:24:b1:7d:b1:3b:
c5:2b:2e:4a:12:8d:27:53:00:62:a1:22:aa:56:ef:46:57:18:
93:22:17:da:9b:c7:ee:57:4d:be:69:bc:38:84:41:f7:6d:8a:
62:24:ce:4c:62:40:37:59:d7:ed:4f:5f:2e:85:98:15:61:e5:
c9:17:9b:3a:4e:4e:4b:26:b6:3c:1f:a7:68:57:84:b7:11:12:
64:f2:0e:ad:34:39:dd:85:79:fd:0b:0d:0d:cf:01:04:75:e0:
4d:32:b7:ae:cc:a1:47:90:e0:1b:43:5d:ae:57:2a:e7:ea:72:
e6:f1:64:32:23:bf:c6:8f:90:dc:c4:b4:2b:7e:44:25:92:4a:
be:40:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:50:10 2025 by rpki-client