Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: NB6VoAlX8q/8ja0X2FWtrEgInV/cxVnTAxZv+PgHgt8=
Subject key identifier: 7D:63:00:F2:05:98:12:FA:55:F0:25:37:8A:D7:0B:D4:32:21:76:5E
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 019A4E867C3919909C9CB62FAB07256AD376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 16F4
Signing time: Tue 04 Nov 2025 11:00:27 +0000
Manifest this update: Tue 04 Nov 2025 11:00:27 +0000
Manifest next update: Wed 05 Nov 2025 11:00:27 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: SDdBlJsiKqw4l0XIsyEouNr3Mdwn9nXxedSBHIyVLP4=)
2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:7c:39:19:90:9c:9c:b6:2f:ab:07:25:6a:d3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Nov 4 11:00:27 2025 GMT
Not After : Nov 5 11:00:27 2025 GMT
Subject: CN=7d6300f2059812fa55f025378ad70bd43221765e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5f:2c:92:78:a1:39:c2:db:f6:b6:71:f2:f4:
45:8c:df:cf:54:81:f9:c0:ba:c1:23:03:a4:d4:c2:
60:dc:ff:06:3c:fc:f1:e6:4b:bc:1c:ab:93:24:79:
49:d0:ab:d5:3b:29:cf:b0:b9:6e:17:e4:e1:50:16:
91:69:65:b7:4f:03:f5:4c:73:e9:59:7e:c7:34:67:
63:c4:20:46:16:83:81:9b:28:0a:7f:51:44:65:63:
40:0a:f0:78:7b:71:7f:a5:8d:b8:f2:d0:ab:16:dc:
a2:6d:94:74:23:e9:b0:11:ef:1b:eb:b6:02:7b:08:
47:9c:76:9d:7a:05:47:54:e4:71:63:06:d6:ed:e1:
10:45:c7:45:18:09:20:88:f5:5f:ca:35:79:ec:7d:
96:85:e7:ad:3e:17:5d:41:9a:29:5e:ba:eb:8a:2a:
da:85:ba:19:52:6f:bf:5a:aa:1d:2e:16:b3:6b:75:
cc:48:ed:df:6c:cb:4d:19:ac:a1:65:ed:75:75:c6:
9f:d9:36:90:b3:a0:91:3e:95:82:4c:db:55:66:3a:
ac:46:d0:d5:e6:b1:17:2f:99:e4:fb:e1:79:aa:33:
66:45:4b:11:ff:42:0d:5f:1f:2f:cf:95:af:ae:83:
08:8c:29:3e:6c:70:e0:f8:6e:79:05:08:f5:95:d6:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:00:F2:05:98:12:FA:55:F0:25:37:8A:D7:0B:D4:32:21:76:5E
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5e:e3:ef:bc:ec:5b:9f:44:b8:61:2f:63:2e:97:f2:24:bd:
a0:19:b8:80:a6:6e:7c:a8:58:ad:36:eb:5f:88:80:64:cf:bd:
02:db:fc:33:7c:68:d6:f4:16:f8:d8:55:60:55:27:fd:9d:96:
3f:50:11:68:31:b4:bd:32:69:3b:32:01:1a:cc:bd:4f:87:6d:
63:f8:96:0a:b8:38:13:c1:82:1a:91:e8:2d:db:a4:4c:4f:b5:
21:17:e9:1e:3b:fc:eb:4e:e5:a9:6f:08:2f:59:ec:c0:3e:a6:
58:c8:bb:d9:e6:49:ff:fe:1f:6c:93:45:e7:f7:38:97:cd:cb:
dd:10:6f:74:84:6f:24:f6:8b:ce:2f:88:5a:95:1a:20:72:11:
b1:34:70:e1:58:9c:55:9c:12:5b:4f:55:18:7c:ff:05:4d:51:
d7:68:13:93:1c:10:55:e4:ec:bd:45:cd:78:d2:c9:cf:04:c6:
4b:14:6b:90:f6:db:09:bb:2e:1c:16:30:66:6b:84:83:08:6c:
3c:bb:39:ba:7a:61:b1:f1:2a:df:e8:e1:82:aa:f3:f7:8d:3e:
8d:c9:60:78:c4:6f:6a:ee:1b:6e:3b:54:5a:9c:d1:b7:f0:77:
30:2c:c4:38:9c:ee:76:00:55:4e:17:f4:ac:bd:f3:c9:ce:63:
1a:a6:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:46 2025 by rpki-client