Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json)
Hash identifier: B9n+Mz4UCNns0ldjII41tVOoDCK1RV9rJr9aSudNfWI=
Subject key identifier: 5F:10:F3:C9:2C:4B:23:12:5E:E8:C0:FD:EC:96:70:3B:91:02:6E:A3
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 01988EED56D7FD40F68DB0CC086D71650ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
Manifest number: 0C2F
Signing time: Sat 09 Aug 2025 13:02:55 +0000
Manifest this update: Sat 09 Aug 2025 13:02:55 +0000
Manifest next update: Sun 10 Aug 2025 13:02:55 +0000
Files and hashes: 1: X2bocyRVhCfvso68Pv43uBx6gHw.roa (hash: ch7Rg28zRrgi0YGzVdKPWQbcu7IjFqyNq5JbEbQ26hc=)
2: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: OQBGQDxVV4tcSRYZed1n+MuyR1YMeodrVTHWcLmWjsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:56:d7:fd:40:f6:8d:b0:cc:08:6d:71:65:0e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: Aug 9 13:02:55 2025 GMT
Not After : Aug 10 13:02:55 2025 GMT
Subject: CN=5f10f3c92c4b23125ee8c0fdec96703b91026ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:d8:6a:20:11:7e:b4:d8:5d:4f:c3:e6:7a:
f6:1c:96:40:27:1d:26:83:bc:ff:39:a5:65:2b:17:
c1:59:f1:a8:82:78:c8:68:5b:e9:fa:82:78:b6:41:
d8:b7:6b:b1:4a:59:9e:90:04:4c:87:df:91:b9:30:
d9:79:ab:9f:31:91:26:c8:ac:07:25:c9:1b:98:9c:
7b:ca:c3:ff:ba:66:67:b8:ed:cd:d1:33:30:92:39:
d4:52:7a:23:19:99:0b:9e:d8:53:dc:57:da:aa:e2:
36:cc:16:ec:28:8d:f2:ea:dc:7e:6f:f9:17:16:03:
ab:30:b1:54:95:f7:7a:94:58:bc:c5:47:4f:ce:24:
34:16:f3:96:0e:2c:f4:1e:62:00:df:c4:89:e6:13:
6d:d4:c4:01:68:0f:6f:fc:6d:ed:95:63:8d:da:c9:
5e:a4:0b:d2:84:0c:a5:95:36:6b:30:5e:2f:6f:72:
c2:86:ae:74:00:24:bc:4d:47:93:96:16:90:dc:81:
91:e6:c3:9e:fc:6e:da:f0:5c:7b:35:ea:2a:7f:d2:
3e:ac:cc:1d:72:87:57:b4:35:7f:32:51:68:9c:bc:
ee:1a:4e:a7:2f:ee:0b:4c:86:2d:28:60:ec:4a:16:
a2:f9:90:e4:de:c8:d0:b3:a4:4d:28:6b:ea:c4:06:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:10:F3:C9:2C:4B:23:12:5E:E8:C0:FD:EC:96:70:3B:91:02:6E:A3
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:33:f2:fa:bf:0b:e2:6e:a3:92:bc:7d:c1:45:09:2f:0c:de:
01:56:86:50:ef:2c:02:6a:c2:25:87:05:79:20:ed:9d:2c:b9:
d4:f1:3c:4e:0f:ad:35:eb:90:3a:31:17:bf:80:67:64:43:67:
bc:51:8a:ce:65:be:2d:87:dd:f5:c6:ba:88:c8:cb:47:5b:72:
aa:b7:82:c1:9f:f4:d0:d0:f6:bc:7c:66:6a:04:8f:8f:b3:d3:
1f:79:44:8d:e0:42:f9:3a:d5:ec:b3:d5:32:5a:1f:53:16:11:
1f:68:98:f4:66:ba:19:35:e6:8e:3d:3f:6f:09:29:e5:f2:8e:
8c:63:e7:b5:96:f7:97:b5:3e:a1:26:2c:22:02:59:e3:a8:9c:
bd:72:98:b7:c1:0c:fb:88:84:16:02:69:ce:db:15:2b:e0:73:
b2:49:fa:1a:a7:07:da:e4:10:a6:e4:4f:f7:0a:35:a0:6a:dd:
ba:a4:41:f3:19:77:f9:23:4d:da:3b:2f:0d:d0:4b:ef:3a:c6:
84:99:06:f8:bd:a3:c3:f4:0c:26:0f:6b:6a:77:e6:4a:f4:22:
c9:27:5a:13:ab:8a:24:88:0c:2d:38:61:7d:11:8b:0c:b0:2d:
3a:bb:d6:52:80:87:79:2e:d3:b2:1c:79:e8:07:2d:8d:cd:0c:
0a:74:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:22:58 2025 by rpki-client