Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: uwrSo7sHM0dpPt7y9Ss33rKlRspUhOKW7yCCTVm79Zc=
Subject key identifier: 58:96:F7:52:84:AE:E3:2F:EC:68:6D:C4:B5:68:64:22:D1:A4:A2:6A
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 019894B7514C11B989D28879E08A76BBE841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0D8A
Signing time: Sun 10 Aug 2025 16:01:38 +0000
Manifest this update: Sun 10 Aug 2025 16:01:38 +0000
Manifest next update: Mon 11 Aug 2025 16:01:38 +0000
Files and hashes: 1: YzYY5Pk4uD_RFCQ6kGkD8Ksosug.roa (hash: JV37Wu2EuvzzpKn9Z7XGUJb+gi9iNJI/YQAjXDOu0ds=)
2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: qHGI5Yc0qTDGG6wqoCYMt8Xg9YEyuZPGsdVeP5airvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:51:4c:11:b9:89:d2:88:79:e0:8a:76:bb:e8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Aug 10 16:01:38 2025 GMT
Not After : Aug 11 16:01:38 2025 GMT
Subject: CN=5896f75284aee32fec686dc4b5686422d1a4a26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:99:f1:6f:ba:79:10:d1:51:09:80:94:60:
59:1b:cc:de:10:f2:00:21:b0:5c:59:b3:fe:93:a7:
9a:90:4d:1f:31:72:31:16:8c:04:50:68:b8:3f:85:
52:0a:c4:82:97:52:00:9f:e2:67:5c:a6:a3:68:2a:
36:fa:f5:ea:cc:20:a0:07:78:d9:06:42:59:e3:0b:
f8:b1:a2:06:70:11:a7:c7:b0:6f:44:9d:81:8f:bf:
39:78:50:6d:8d:9a:a9:a8:e4:8a:0d:48:7c:7a:e4:
44:4c:ff:24:1b:c3:01:16:20:f4:45:6a:a2:18:fa:
23:6f:d5:df:a5:e8:7a:9c:a5:a0:ec:62:5b:95:5f:
8d:56:eb:fe:ff:0c:64:bb:08:95:18:7e:d1:0c:ac:
8b:f6:45:bf:30:d0:26:48:ee:06:c4:aa:bc:23:d4:
81:1e:89:e7:01:cf:32:29:2b:3c:a7:6b:e0:65:51:
a7:fb:68:75:88:5c:d5:60:85:15:64:cf:da:f9:60:
23:fd:c0:98:36:3c:ff:48:13:5f:bb:b4:f8:6b:ec:
54:19:ef:6f:80:2d:96:63:8b:09:7f:8c:c2:4b:5c:
4d:dd:80:92:f8:a2:af:fd:09:3f:44:13:4a:17:5d:
97:af:28:c3:fa:a1:f4:d4:8e:d0:db:93:6e:a5:68:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:96:F7:52:84:AE:E3:2F:EC:68:6D:C4:B5:68:64:22:D1:A4:A2:6A
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e5:dc:ea:31:2e:eb:81:e4:76:29:aa:54:56:70:0c:3b:a8:
4d:86:02:e8:f3:f3:68:30:9c:d7:a4:fc:3e:0c:18:e6:a5:88:
e3:ab:e9:f2:8c:b1:d5:3e:67:20:82:64:73:ce:89:28:f4:4a:
81:b1:00:5b:d3:d7:3a:38:c0:ff:27:6a:12:67:f1:80:0d:ef:
92:9d:88:a6:17:b5:40:37:ba:23:0c:32:c7:da:e6:47:76:50:
c0:21:f7:95:d4:01:27:bc:2d:ca:94:b5:53:52:9d:c1:84:1e:
a4:0a:41:44:16:fd:92:3a:e5:4d:97:e2:89:50:a7:79:03:48:
a6:8f:9b:e6:8a:8c:7d:f1:c3:c1:7b:12:3f:11:da:91:9b:1c:
15:9e:6d:2c:fd:14:d0:f5:6d:32:97:96:4a:03:f9:a2:fb:ec:
9b:0e:1b:0b:09:c0:12:cf:62:3f:9b:92:a4:5f:59:d4:78:17:
7d:55:99:a4:9b:63:1b:ac:aa:e2:5d:a0:15:31:2d:02:1e:bf:
36:0f:e5:b2:ab:ac:93:ab:76:b9:03:7a:26:05:08:7f:a9:be:
8b:77:f6:42:df:c3:44:ca:6e:bf:e2:88:0a:5c:7b:2e:c0:40:
be:a3:b0:3e:d6:b7:33:5e:9b:34:8e:71:1f:73:64:8f:12:8c:
93:4a:8d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:54 2025 by rpki-client