Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier: 5RgBliMuto9/UG4PuYvjHaicfQqw4ffFry3/zhquXmo=
Subject key identifier: A3:88:54:E9:60:41:45:3B:AE:AA:ED:18:26:3B:D9:FB:41:F6:23:B9
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 019A51F56F5B26157C0E696450A1C7FE3F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number: 1324
Signing time: Wed 05 Nov 2025 03:00:30 +0000
Manifest this update: Wed 05 Nov 2025 03:00:30 +0000
Manifest next update: Thu 06 Nov 2025 03:00:30 +0000
Files and hashes: 1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=)
2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=)
3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: /usHHJR1x7jvO3kcj3L+BVFsbzIvS976wSrAfJs3k8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:6f:5b:26:15:7c:0e:69:64:50:a1:c7:fe:3f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Nov 5 03:00:30 2025 GMT
Not After : Nov 6 03:00:30 2025 GMT
Subject: CN=a38854e96041453baeaaed18263bd9fb41f623b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:72:64:6e:62:60:d6:b1:b5:1f:1c:b5:f0:
8e:ea:1f:e9:71:ae:06:4a:f3:e3:69:33:06:c4:b9:
f2:8a:60:ec:23:14:ec:d0:a3:58:fb:eb:ee:ea:84:
69:b1:78:a7:48:00:9c:c1:50:22:cf:a4:6e:0a:9a:
c7:d3:26:f7:b9:f9:e4:51:31:44:e5:d4:e1:05:45:
1d:30:77:1a:d4:ec:d8:26:12:7c:aa:48:e5:3e:fa:
bc:aa:0c:4c:44:2d:c7:2b:b3:a8:4b:6a:33:f6:1a:
d2:27:ae:6c:bf:2e:21:2f:b6:ed:25:db:4a:52:2c:
7d:62:a2:34:78:84:4c:b4:8c:c0:82:b7:d7:fa:08:
e9:f0:cb:5a:40:d9:ab:86:1e:b1:71:2a:3b:e6:7b:
ec:c8:e6:9c:45:a2:4a:7a:0a:db:f2:1c:f6:41:19:
0d:00:2f:1a:5c:cf:6a:c1:23:02:30:8b:fb:db:34:
a9:e8:6b:53:63:a0:12:01:9c:b0:5f:76:b9:d9:c9:
98:ef:1c:07:bb:85:6c:9e:d6:ab:1d:19:c8:5c:f8:
6b:58:81:4b:dc:69:24:48:71:31:1c:28:3a:a5:f7:
8f:27:9f:29:a0:41:5f:d7:91:a6:92:5f:e5:4c:6f:
bb:dd:c8:15:85:86:40:34:4b:87:94:0d:cc:02:70:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:88:54:E9:60:41:45:3B:AE:AA:ED:18:26:3B:D9:FB:41:F6:23:B9
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d2:a1:7c:c7:83:d5:00:76:1d:4f:a8:36:b1:4f:bb:58:a8:
bb:c3:c8:f9:b2:75:97:76:2c:66:35:c2:be:b3:71:e2:ff:a1:
c3:74:ff:8d:d4:16:90:84:56:9e:6b:89:7e:c2:57:37:1a:72:
d6:5d:ac:5e:77:b3:0c:2c:ce:32:92:0c:1b:93:0f:5c:9d:d9:
e0:81:b1:29:5e:88:74:46:65:1d:fa:7b:a9:66:0c:51:37:bf:
07:20:df:bb:38:19:69:76:82:9a:85:89:ce:42:81:4b:6b:76:
c5:07:d1:88:93:a6:f5:e6:cb:94:1a:74:da:03:9f:a9:43:2f:
21:e7:a3:09:c4:ac:11:e5:5a:01:fe:f7:ff:1d:23:0b:c6:aa:
2d:55:01:3e:8c:52:5f:0e:23:a1:7f:ff:59:5e:8a:b1:09:7f:
0f:74:74:a7:d3:69:83:a2:9f:f1:6f:ca:ba:48:bd:c4:18:5d:
be:e1:ef:82:ac:ad:99:cc:17:d8:71:67:04:6c:dd:fe:01:c1:
9c:c7:81:1a:7b:bb:97:f9:3e:db:d3:e4:6d:a5:50:3d:e7:e9:
40:1b:9f:3c:1b:8b:0c:7d:b3:85:06:1b:e5:08:b2:81:52:ba:
4e:43:12:d1:69:5c:50:b6:8b:d4:2c:bb:9d:7a:a2:9f:5b:29:
0c:ab:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:03 2025 by rpki-client