Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: pODwH3aMzMvySbiJIRiNCiq3nlfP9252OIdPBeoLXho=
Subject key identifier: CC:24:A4:EA:D6:5C:E9:71:BD:77:70:B5:A4:1C:48:92:AF:05:FA:B1
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 0198752BC0AD1FB2D4D0919E9F656AADC72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 13:00:58 +0000
Manifest this update: Mon 04 Aug 2025 13:00:58 +0000
Manifest next update: Tue 05 Aug 2025 13:00:58 +0000
Files and hashes: 1: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: xAthOBTIXViHTvp46UWHp2fOLQjX1PX0ibbxWWDdk6k=)
2: UXaxt-b39pINfZ1Y1ojLfS7SwMw.roa (hash: IC6xINcQpVjUgVum+7114aRM3S8XEivwvk3gYzMafvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:c0:ad:1f:b2:d4:d0:91:9e:9f:65:6a:ad:c7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Aug 4 13:00:58 2025 GMT
Not After : Aug 5 13:00:58 2025 GMT
Subject: CN=cc24a4ead65ce971bd7770b5a41c4892af05fab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:fa:d0:0d:d4:b7:a9:64:ad:ed:27:87:64:
88:78:bd:4b:2f:31:00:d4:46:e3:ae:81:a1:b4:5a:
30:0b:1a:00:65:38:4b:b3:62:cf:09:bb:3f:71:d9:
ed:87:fc:78:d6:17:a3:ce:cb:20:55:93:b9:a4:71:
2a:d4:aa:12:58:e7:bc:c0:e6:fd:0a:4b:a7:0e:6a:
49:3b:ae:34:95:53:5d:21:e7:a1:9e:35:7d:37:31:
bb:8c:16:61:57:2c:7d:af:41:a7:a8:be:93:cc:3c:
44:bc:51:0e:16:b5:32:91:04:63:5f:4d:eb:a9:f5:
30:cf:5c:42:2e:ae:5c:83:6d:12:20:ee:e4:79:11:
68:51:50:9a:43:9a:69:80:1b:76:ee:f2:92:c8:4d:
b0:29:47:f3:65:1d:c2:13:01:dc:6a:c8:2f:1a:a9:
c6:46:87:5e:49:8c:d4:42:95:b2:ce:d0:db:84:b8:
52:3b:eb:ec:7c:ab:bd:64:71:f9:93:83:02:fc:6e:
6a:63:ad:ef:de:7c:ca:24:d7:0f:b1:23:07:5b:d3:
6e:c5:42:d8:36:e8:ef:1b:5c:ba:e5:84:42:87:b1:
fc:d6:37:25:91:58:4a:71:4b:99:8b:85:9f:60:cb:
86:76:31:d0:3d:60:69:f3:13:9f:26:5c:da:23:c0:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:24:A4:EA:D6:5C:E9:71:BD:77:70:B5:A4:1C:48:92:AF:05:FA:B1
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a1:2d:60:63:88:bb:db:68:20:bf:01:ed:5c:1c:af:9e:d8:
e7:c1:2b:53:c4:36:1f:45:3e:0a:27:74:89:6e:d7:62:1d:94:
fb:bc:a4:97:e6:00:52:62:4a:27:37:5d:8b:c4:54:0a:44:b1:
dc:4e:68:23:c7:58:da:f5:0d:f0:f0:4a:ea:f0:96:8e:38:3c:
02:06:eb:fd:99:45:21:10:28:b8:8e:d9:b8:13:d1:a6:89:a2:
ef:83:c0:d2:04:e3:27:7c:e9:e9:36:ae:e1:6e:ff:47:12:10:
7a:fb:57:92:e5:37:e8:2e:d7:18:33:df:3d:6e:41:20:a5:d3:
87:29:fe:76:47:bf:3d:a5:ef:e3:66:41:9c:3d:be:43:c2:52:
db:30:ce:ea:9b:ef:62:ee:8f:77:80:7c:88:cb:d9:61:ae:bb:
96:dc:9a:a5:e0:33:4c:1f:8d:a0:85:67:95:e1:5a:dd:c0:09:
de:d8:82:5d:f2:c8:f7:20:c1:ce:67:dc:23:64:28:bb:aa:73:
af:e4:50:30:80:0d:c3:4c:d1:a2:ed:95:b2:36:a4:bb:93:ad:
e1:eb:3a:dd:81:7f:8f:87:76:78:e7:c0:cc:63:83:79:27:46:
e9:f8:5f:fd:3e:88:15:14:7f:4a:f7:9b:e8:8b:88:d3:6f:c4:
74:a4:4e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:56 2025 by rpki-client