Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: ZfV6XTmrENnfdIJ3KeOe2fy0mTfYFUpVIO92zlkU2+4=
Subject key identifier: C2:13:15:0F:A6:87:D8:D8:B6:BF:66:CD:51:9F:B9:B8:76:C7:DB:A9
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019A4F98CE6B6E60C7B01F6B4506ABE5C841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 05E2
Signing time: Tue 04 Nov 2025 16:00:05 +0000
Manifest this update: Tue 04 Nov 2025 16:00:05 +0000
Manifest next update: Wed 05 Nov 2025 16:00:05 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: 4XqDbUK86cNfxERC8G8m1yycmAXSA/AwZkrirhWuzEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ce:6b:6e:60:c7:b0:1f:6b:45:06:ab:e5:c8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Nov 4 16:00:05 2025 GMT
Not After : Nov 5 16:00:05 2025 GMT
Subject: CN=c213150fa687d8d8b6bf66cd519fb9b876c7dba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:cc:e5:25:63:7c:d5:a2:e5:41:00:3b:41:
2c:4e:8d:9b:10:32:a3:6d:ae:a9:c8:95:35:68:d2:
bc:54:77:7a:6b:82:d7:18:09:7f:d9:2c:b5:ae:e3:
47:60:b9:11:d7:d8:9c:98:62:2f:9d:96:56:ea:fa:
40:10:f5:a5:22:19:00:b7:9d:16:44:6b:74:3c:e2:
3f:ff:39:21:dd:e5:a0:cd:24:4f:ae:b1:98:84:a8:
d2:53:5e:17:83:4c:fa:05:9f:c7:93:a4:f4:e2:94:
29:2e:dd:76:85:ed:5c:b5:1b:5c:e8:42:5b:b4:53:
e6:60:43:4d:bb:84:f1:01:6b:3e:63:9a:43:ba:7a:
04:c1:86:af:0b:0a:de:db:fd:18:29:54:3a:4f:81:
4d:0c:f4:79:7f:4d:a7:db:a9:98:54:1d:a4:3b:0d:
02:68:77:16:f1:60:9f:e1:0f:dd:71:73:13:21:c9:
87:51:57:13:a6:ee:ff:ce:68:68:6a:97:58:38:e9:
62:f9:25:7e:89:39:9a:f3:6a:29:2a:0d:e0:d8:5d:
ee:8b:77:75:2e:fc:ab:61:ad:c0:c8:31:f7:14:b8:
8f:30:49:d1:c7:37:89:aa:dd:f9:c3:3f:fc:40:79:
8f:73:4d:d4:8e:40:f4:89:72:a6:f5:99:a5:76:53:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:15:0F:A6:87:D8:D8:B6:BF:66:CD:51:9F:B9:B8:76:C7:DB:A9
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fc:76:ed:69:0f:a2:4f:e5:5c:04:59:20:e5:4e:04:22:64:
85:03:36:4d:a8:8a:53:d6:ff:f9:66:3d:ec:14:ea:ef:8d:5f:
42:2c:54:f6:46:ba:a3:dc:fb:0c:79:ac:ba:55:ae:8f:96:e4:
1d:99:2d:6d:f5:ae:86:f3:7d:b8:6a:a0:63:be:df:ed:bd:86:
a7:48:45:c1:9d:53:29:b8:70:34:5d:ce:da:35:d1:04:17:1f:
b7:a2:80:a0:3b:c3:23:84:85:1f:6e:4c:8d:37:bc:56:ab:10:
9e:fa:42:ee:d8:b4:11:5d:62:4d:3c:c7:ea:58:41:fa:ab:5b:
2c:cb:79:91:7d:6b:cb:0a:f7:9f:8f:d6:58:81:71:d9:70:ad:
49:8d:bb:9d:15:d7:1a:e0:86:6a:87:42:de:49:a9:3c:83:8f:
cc:17:e0:18:47:8d:60:54:b6:d0:9f:04:aa:16:b9:28:b0:e4:
31:0d:d7:66:50:ba:74:c1:23:ab:88:76:5c:84:94:74:ba:04:
e0:21:54:27:17:3e:d6:09:df:c9:97:48:15:a2:0e:4c:f3:4f:
a7:1d:32:a0:7e:44:78:d0:30:db:53:b8:ba:23:44:ce:46:11:
8b:90:1f:bc:80:ba:de:1c:f6:4b:4f:67:da:c3:06:05:02:81:
f1:e0:39:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:48 2025 by rpki-client