Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: u3MsLVlLjmCNIavA/Hn7zi3T/KCRMqcMLYESxAoQ/wE=
Subject key identifier: 91:AE:2C:82:7C:E1:80:2A:A8:11:50:F4:8C:3D:D0:0C:4D:85:FE:05
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 019A4F625F1D3E54AE84077590285EE19128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 0761
Signing time: Tue 04 Nov 2025 15:00:38 +0000
Manifest this update: Tue 04 Nov 2025 15:00:38 +0000
Manifest next update: Wed 05 Nov 2025 15:00:38 +0000
Files and hashes: 1: G5Dr2RNwPGFwAwTeNB-9AS_pm0Q.roa (hash: 0MjYAJyBV4+bo72HSaSmqLthye1AQFWyhQOJxf+19uc=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: Z7+veWluZ4nKdRQlaMhr8Sz0WJMb39AKPcJ9A7NTAHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5f:1d:3e:54:ae:84:07:75:90:28:5e:e1:91:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Nov 4 15:00:38 2025 GMT
Not After : Nov 5 15:00:38 2025 GMT
Subject: CN=91ae2c827ce1802aa81150f48c3dd00c4d85fe05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:35:2b:c9:52:2c:13:a2:93:a7:8f:ba:fa:
60:4c:9a:40:5f:e8:49:a2:fc:dc:65:5e:f8:26:e0:
6a:ca:7f:4a:1d:22:68:0e:00:45:e5:39:db:d2:8f:
17:c8:d3:52:2e:fc:00:af:01:c5:0a:a6:8c:8d:7b:
ec:3d:53:16:ff:2b:fc:a8:78:d4:e7:ba:d0:8e:db:
dc:7e:a7:a1:1f:6c:12:ab:48:a1:c5:20:9d:ed:39:
4e:6c:ae:b1:5e:0f:18:e8:71:09:ed:c0:2c:44:e4:
f7:db:78:7d:15:62:41:54:94:3d:d7:c1:ce:d7:d2:
4f:e2:f0:cd:ae:37:d2:1a:17:44:8d:bb:76:29:12:
17:e6:a1:6a:a3:15:4d:2b:14:2c:6e:00:15:c8:52:
ff:ac:10:42:c9:38:59:76:96:62:9f:c2:c7:62:3b:
b7:dc:a2:fb:c5:95:d8:9a:17:f3:57:c3:54:8c:6f:
19:e0:93:9f:a0:69:10:7e:1c:ef:38:84:be:82:dd:
fc:18:ad:4b:a7:65:13:82:32:69:95:f4:9e:1c:5c:
fd:d0:dd:d7:7f:ed:d6:20:14:2b:a5:25:db:0e:a2:
4a:42:2d:f0:c2:9f:5f:56:5d:20:20:0a:08:09:f6:
11:7f:15:4d:f4:d6:5e:63:70:47:4d:97:2a:17:b3:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AE:2C:82:7C:E1:80:2A:A8:11:50:F4:8C:3D:D0:0C:4D:85:FE:05
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8f:52:7d:58:b1:bf:32:36:05:84:2b:b6:84:66:d3:e7:0b:
ec:77:ed:8b:ec:59:49:d4:3e:58:4c:76:92:1e:21:9e:0a:06:
0b:ff:0a:f5:e5:51:f3:c7:97:ef:67:b9:12:7a:73:2e:aa:ad:
a9:5d:7f:b0:c4:51:f9:00:74:68:0c:ef:e8:62:1c:49:f2:b4:
d0:e5:a9:45:51:96:ad:90:38:75:ff:fb:25:52:5b:0d:60:77:
5d:6b:09:9b:8b:f3:ea:0e:27:73:24:e6:09:d3:91:6e:76:5e:
75:36:73:46:3b:f6:d1:e6:f7:1d:92:5d:40:e7:10:c6:82:ce:
99:16:6d:00:61:51:f0:37:d4:a3:f1:05:7b:6f:06:bb:33:ae:
60:e2:1c:e9:37:ec:c1:61:09:c2:22:54:ac:43:6b:9d:39:dd:
8f:00:29:3f:e8:5f:d3:ec:59:59:22:da:b1:0f:6c:8a:1d:f3:
87:fb:f8:f0:8a:22:62:56:e2:d5:0f:98:3a:38:ea:23:b0:fa:
32:62:8c:a9:28:4c:9d:2b:86:58:14:62:37:e8:e6:61:72:5b:
fe:22:9b:13:49:98:b7:f6:9b:60:d5:da:2d:dd:d2:f5:52:4d:
b6:87:5a:49:07:fb:2c:02:47:4e:93:58:54:7c:d1:48:61:b2:
ba:ec:4a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:11 2025 by rpki-client