Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: lrGzopc564D+P0jZsW0Ke3nOpPyL3Nxh+kfL1AE2drs=
Subject key identifier: 6E:7B:F7:5C:34:72:82:46:A0:BB:AC:7C:B3:50:34:7C:45:5E:9A:C9
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 019A4D3CE731D1E7E1C489063C02DBCFC108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 10DE
Signing time: Tue 04 Nov 2025 05:00:28 +0000
Manifest this update: Tue 04 Nov 2025 05:00:28 +0000
Manifest next update: Wed 05 Nov 2025 05:00:28 +0000
Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: KqKYcl4ckN7ozZXZxDTzKTt5TgW6/U5jqX1wP+T5ajU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e7:31:d1:e7:e1:c4:89:06:3c:02:db:cf:c1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Nov 4 05:00:28 2025 GMT
Not After : Nov 5 05:00:28 2025 GMT
Subject: CN=6e7bf75c34728246a0bbac7cb350347c455e9ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:6e:22:cd:6e:e3:0b:fc:38:7f:11:32:7f:
5f:38:ae:48:f4:50:3d:b8:36:99:b9:8a:1a:81:c8:
dc:63:73:ec:6c:ac:05:b4:63:35:29:b1:27:3b:45:
96:9f:31:15:fd:73:ea:0b:7b:11:7e:1e:42:2f:ac:
fb:c4:0a:9e:88:b6:2e:d8:a6:a9:4f:97:f9:3a:6d:
c0:08:e5:9f:04:46:6d:26:cf:72:44:5b:6a:33:23:
77:d8:b5:61:ae:61:2c:96:b3:b4:1f:59:94:a1:41:
f2:4d:c6:f7:70:c6:2b:d3:52:28:c5:d2:75:6a:85:
eb:2b:1e:dd:5c:02:d4:04:7a:82:e7:d6:49:52:35:
59:54:5a:3d:a2:bb:2a:4c:bf:36:29:a0:9c:7c:b4:
d2:e5:7d:01:98:2b:2a:d5:6b:9c:6c:f6:87:6d:2a:
0a:89:68:2b:08:24:d2:61:46:b3:53:1d:b2:03:04:
93:67:9d:c1:fa:ee:65:d4:98:ce:4f:4c:64:c9:df:
7f:c4:b5:bc:65:98:8e:72:1e:c7:55:23:5c:8d:21:
9e:2f:d4:da:16:a8:b0:81:5d:d0:2e:51:cc:ec:13:
85:9d:7e:df:07:81:36:92:80:7c:bb:41:a6:ff:20:
7f:47:89:8a:79:f0:30:c1:02:34:94:e1:d9:19:35:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7B:F7:5C:34:72:82:46:A0:BB:AC:7C:B3:50:34:7C:45:5E:9A:C9
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:86:0f:c9:75:be:68:ba:e5:a5:35:26:ac:64:75:6d:4b:f1:
f6:8f:f2:50:cb:43:e5:6e:7b:90:2f:88:43:fb:9c:86:19:70:
41:90:40:38:e1:40:c8:5b:a7:1e:36:53:60:5e:3a:32:57:fd:
5a:4e:8d:d4:bd:18:5e:3e:0a:90:e6:be:c4:52:ba:af:43:91:
f2:1b:4d:40:20:d0:a9:d7:7a:2a:38:0b:ce:c0:45:c1:19:7f:
bf:85:b0:0e:b1:71:a5:62:77:b7:0c:7e:da:fb:46:c6:84:47:
fb:a7:af:3d:14:95:29:c2:ba:8f:81:2d:88:9c:94:9c:ce:a7:
57:23:e5:18:8f:b6:c6:f8:d7:ad:d5:4b:f2:e4:ff:49:d7:b6:
7b:86:94:c1:0d:30:18:eb:e2:77:52:37:9a:b3:5c:33:20:1d:
e7:32:e0:4d:45:3f:eb:d5:18:e0:52:ad:a0:ec:f6:d3:21:81:
d9:4e:2f:bb:21:8b:7e:8e:ff:00:eb:72:17:7e:bd:c2:66:7e:
5d:fa:c0:2b:88:73:6e:2f:a5:89:fe:9a:e5:f0:b8:19:f0:fe:
81:3f:14:2d:84:a1:98:b6:64:cc:c1:ee:a2:4e:3e:64:b4:e6:
ce:48:67:47:6b:c4:23:0d:ca:aa:69:b5:27:a5:b2:a2:74:da:
96:9a:cf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:59 2025 by rpki-client