Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: 9fTh9Q5SUKOIRJbvlLrRezSEOamBZwmgh0AB9GOFSJ0=
Subject key identifier: 6C:5B:23:0E:37:1E:E4:A0:4A:F1:50:9C:B9:15:72:E0:AA:53:77:08
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 019A533F4BE5AC087C67C9CF107C548E56BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 15DE
Signing time: Wed 05 Nov 2025 09:00:48 +0000
Manifest this update: Wed 05 Nov 2025 09:00:48 +0000
Manifest next update: Thu 06 Nov 2025 09:00:48 +0000
Files and hashes: 1: BZzPZeF6nVBFp0ePkibSpSImMO4.roa (hash: CC6O/xKtKrtHkfClJGWdlIogukbhcIa4MJLuoLVEnNw=)
2: DUIJZvRDQ202HKrZ6QZsgh8Lpxg.roa (hash: WYZK5bFTDM+c1kX5q/i2Za+Wt5aspj2Z2UKRWytwMBA=)
3: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: d+Hvjva2K7YqzGl/ivS6PAFcgr8Ut4+F4HjZeYJtrGE=)
4: qRD7ujzJORaie3rLE2YnokYZ17U.roa (hash: S1UJWxv+rwUU/ObCl8nZivjHpfQGYiacpAIE0ZGhjrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:4b:e5:ac:08:7c:67:c9:cf:10:7c:54:8e:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Nov 5 09:00:48 2025 GMT
Not After : Nov 6 09:00:48 2025 GMT
Subject: CN=6c5b230e371ee4a04af1509cb91572e0aa537708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:0a:35:10:89:22:f2:55:01:22:8b:d4:5a:
1d:1a:ed:e9:19:d7:07:49:90:78:c8:da:ac:c9:b4:
db:d6:0a:c3:dc:37:2d:57:ac:db:35:de:ca:e8:a4:
51:31:fb:46:fa:50:45:f3:48:5e:cb:56:28:51:04:
5e:fa:73:4b:b4:0e:6e:94:fe:c5:f3:1c:bb:44:f8:
81:1b:d4:f3:2b:84:49:61:e2:42:c3:2a:8c:d9:2d:
46:31:0e:1c:16:39:74:e0:2f:bd:bc:83:f0:41:68:
4a:48:f7:83:4a:8a:37:16:65:51:9d:c7:37:cb:5f:
e2:a9:29:90:a3:2d:24:3c:1b:69:ee:d4:64:ad:f9:
64:44:a1:42:af:b2:1f:01:f8:c8:cb:91:96:cd:4c:
64:39:ab:d9:b6:29:b5:16:8a:62:b9:ed:1a:23:a1:
36:63:fd:2a:45:44:08:5d:a1:8b:19:6a:09:b6:e5:
3d:35:17:16:9a:ed:76:f8:45:1b:41:f9:46:42:50:
fb:3a:2b:5d:a1:0c:c6:51:ce:00:9a:3e:1f:71:86:
4c:b1:40:0e:f0:f7:42:2d:ec:21:fb:1a:7d:6c:44:
bf:e6:41:9a:cf:21:7b:31:35:f7:23:f5:b1:99:00:
64:56:df:3b:c0:52:8c:ed:c5:40:37:d6:bd:79:54:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5B:23:0E:37:1E:E4:A0:4A:F1:50:9C:B9:15:72:E0:AA:53:77:08
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fa:a8:ae:c3:c9:78:6b:9a:74:fb:3f:31:66:80:dc:e3:92:
33:43:82:76:8b:d8:76:46:7d:b5:e3:b8:37:d6:82:f9:26:29:
f9:ef:db:79:93:c4:f7:8a:bb:0b:0f:fa:2c:44:db:d6:68:c5:
09:9f:54:31:c9:3c:a9:56:8c:1b:3d:a7:ac:b3:8a:8c:e1:e7:
64:6f:92:62:6b:94:2c:2d:b7:d7:7c:fe:2f:4c:47:91:05:6b:
48:a1:56:0e:a3:19:a8:a5:10:34:85:8e:04:8b:d8:39:c6:8d:
26:63:98:51:e2:f6:25:0e:7e:7e:af:e3:50:4d:29:8f:0d:d0:
a7:15:53:6f:51:ff:63:b8:6b:a2:0f:1e:84:2c:6e:68:b8:bd:
5e:4f:6a:95:cf:28:10:9d:16:a6:16:c2:6d:df:7a:9c:a3:4a:
7f:48:12:b2:68:b3:69:d6:96:9c:de:56:98:5d:9a:e9:62:ff:
11:a1:6f:d8:e9:e0:4b:5a:09:f9:97:91:9d:c3:13:cf:d5:98:
ae:16:2c:3a:32:9a:ae:15:fa:86:e8:ef:1d:b0:74:31:07:88:
90:d6:58:02:d3:71:67:34:39:e3:1c:30:1b:0b:ce:f5:c6:f1:
2e:1e:ed:22:2b:f3:c9:c5:b5:64:97:bf:07:bc:2f:93:3a:6b:
97:4c:a5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:49:29 2025 by rpki-client