Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: 0ZCVxMBNThy0y574IeD++pJk+K/+6lr5kzVah/yRxps=
Subject key identifier: E4:D4:17:0C:30:1D:B9:2F:9D:95:CE:7B:33:DB:43:A1:21:63:7D:87
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 01989411B8F90B83043B7B7C2EC248D8980C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 105E
Signing time: Sun 10 Aug 2025 13:00:46 +0000
Manifest this update: Sun 10 Aug 2025 13:00:46 +0000
Manifest next update: Mon 11 Aug 2025 13:00:46 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: E5W0YEF9OSDFyQthKzwwsL0DNhwq9WaVPj1W+I8BATE=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:b8:f9:0b:83:04:3b:7b:7c:2e:c2:48:d8:98:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Aug 10 13:00:46 2025 GMT
Not After : Aug 11 13:00:46 2025 GMT
Subject: CN=e4d4170c301db92f9d95ce7b33db43a121637d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:33:04:2e:f6:ba:e4:b9:47:79:4e:0b:fc:
ba:04:0b:e5:3c:6e:b1:43:51:16:1b:a6:05:4f:a4:
9d:2d:2c:13:8b:95:e7:88:e4:77:6b:6e:f3:d8:a2:
0c:61:95:f1:82:61:a8:0d:31:98:76:e2:dd:ed:92:
a6:f8:9b:3c:f6:ee:ea:68:24:04:d2:3a:0c:b7:6c:
4e:32:e6:08:87:e4:dd:ec:3e:4f:8c:78:51:b4:23:
13:80:a7:e4:e3:3e:b0:02:b5:a7:f9:af:6b:f1:1d:
cd:d7:87:30:ad:b0:d3:4a:9d:86:c4:e5:7b:03:1d:
80:4a:83:2a:5c:1b:fa:f5:87:ce:5c:36:8b:13:86:
9f:7f:2c:85:02:7e:15:ed:e1:f0:a7:4b:0e:57:6a:
cb:60:63:ba:2a:fe:fa:40:d0:2b:a7:4b:c7:ed:21:
0c:5d:79:70:9b:15:f8:b6:11:bb:33:c4:f7:5e:e3:
9e:52:17:7d:7f:ac:4e:b1:8b:c5:1f:e3:37:3b:7a:
fb:ef:1c:83:7e:d6:bd:49:08:79:e0:79:b8:05:4c:
29:83:7d:2d:72:e3:70:f2:e7:23:5c:2a:72:10:45:
4f:1e:0d:09:2d:84:e8:b4:5e:1b:69:fe:08:18:de:
ef:21:2c:b3:3c:88:0a:3c:98:c8:5c:7c:a0:b5:7c:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D4:17:0C:30:1D:B9:2F:9D:95:CE:7B:33:DB:43:A1:21:63:7D:87
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:17:11:2d:58:f8:fd:df:b5:8b:84:a7:2c:2c:e8:26:94:d6:
b2:8b:34:04:4f:0c:c3:c3:78:8f:26:81:06:69:6f:5e:ec:f6:
a4:fd:22:ba:a7:52:40:8d:4e:63:4d:5f:4c:1a:b7:64:da:99:
4c:29:87:ad:2e:01:87:09:9a:f9:a2:88:cf:07:53:89:df:e3:
c5:d9:dd:73:d6:60:2a:e4:3e:39:2a:01:38:62:39:00:34:88:
09:8f:4a:63:2f:6f:65:8e:51:01:ca:4b:fa:60:f3:d5:af:75:
ce:2f:10:6c:81:c9:b8:8d:b2:58:e5:6f:ce:fc:48:cf:eb:2d:
fc:f1:84:15:5c:9d:22:1d:15:c3:f1:23:d6:70:e8:ff:32:eb:
65:fc:88:5c:6c:5b:3a:b0:67:57:58:4f:b8:23:3a:03:85:06:
13:d9:b0:26:13:2d:f4:f6:5d:75:dd:a0:38:4d:72:3f:75:5b:
79:cb:6f:13:42:db:c7:f1:0f:c0:6e:9c:f9:8c:fe:9b:b1:e4:
c2:7a:b9:f3:64:52:ce:c8:f3:9d:13:e7:8f:b2:08:fa:68:3e:
67:df:c9:f9:8c:b9:c5:ff:b3:4d:07:88:57:c3:d5:cf:7b:8c:
24:a5:4c:f6:ad:a0:3d:d7:37:9a:e3:17:6a:70:3e:14:80:3d:
f5:2b:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:24 2025 by rpki-client