Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: Uaa3UHEztUQGDajXoV53gsq1uRai3zO3SAGE+Hs3YzA=
Subject key identifier: 84:AA:78:DE:06:57:6F:C4:43:EF:F8:59:BE:F1:97:66:4D:6E:F7:95
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 019A541AE8D1B25AE82888FD607002F84B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 13:00:40 +0000
Manifest this update: Wed 05 Nov 2025 13:00:40 +0000
Manifest next update: Thu 06 Nov 2025 13:00:40 +0000
Files and hashes: 1: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: aVcFvvBzu1px9P8Kq38aGx6NLQGCfC6MUB48HSMh4yg=)
2: UXaxt-b39pINfZ1Y1ojLfS7SwMw.roa (hash: IC6xINcQpVjUgVum+7114aRM3S8XEivwvk3gYzMafvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:e8:d1:b2:5a:e8:28:88:fd:60:70:02:f8:4b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Nov 5 13:00:40 2025 GMT
Not After : Nov 6 13:00:40 2025 GMT
Subject: CN=84aa78de06576fc443eff859bef197664d6ef795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1c:6c:cd:08:9b:da:60:a5:d6:0b:90:bd:9c:
38:f9:87:8d:65:62:98:ec:3f:b6:44:c4:d7:20:46:
38:e1:a6:c1:c5:fd:63:3d:e6:55:c8:93:44:f6:7e:
f9:cf:e8:bb:ea:f1:00:90:3b:4f:2c:0c:ee:bb:c6:
85:1e:f5:65:02:d6:bb:23:33:af:f1:8f:2f:08:42:
1b:ed:00:4d:39:eb:8b:14:ec:2f:b4:fa:2c:bf:52:
dc:6b:1f:23:b9:31:29:a8:75:7a:dd:d6:44:d1:2a:
23:2a:be:e7:75:f9:93:f1:3c:54:95:44:03:cd:b9:
9d:e5:a5:7f:15:ae:1d:49:3b:4e:7e:17:c3:a1:e6:
de:d3:7f:f1:87:36:bf:47:8d:dc:e3:c0:01:ee:f7:
67:27:19:e8:8a:0e:43:e5:3f:59:a9:45:bf:99:bc:
f9:bb:df:ce:f7:66:a7:0d:6b:1f:d3:65:7b:d1:1a:
b0:0e:20:8e:05:99:ff:bb:f3:cb:d8:df:c0:63:aa:
2a:b8:d1:12:cb:38:e4:ee:57:06:cc:ca:5f:bd:a1:
85:06:7f:e6:d5:c0:d9:8c:b6:6f:ee:38:ed:1b:ac:
fb:bb:f1:13:eb:3e:a9:ce:e0:c5:71:f8:d7:e0:48:
5b:92:10:91:68:bf:3c:f0:42:92:f2:93:43:39:ec:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AA:78:DE:06:57:6F:C4:43:EF:F8:59:BE:F1:97:66:4D:6E:F7:95
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:08:cb:fe:7d:ce:c0:f2:2a:bd:fe:59:1b:78:5d:67:39:4f:
2d:23:47:ea:a1:e9:23:20:9f:48:72:4f:84:ba:d9:5b:e8:e3:
fd:2b:90:18:32:c7:0d:d7:81:c2:5e:d4:ac:2b:3e:d6:cb:71:
25:52:5f:95:87:95:9f:0d:36:d6:0c:9f:a5:44:3a:48:51:29:
fc:25:0a:21:ef:05:97:52:24:bf:9e:03:f4:2b:fd:25:55:69:
b7:c7:c1:d8:41:2e:39:41:9e:1a:af:5d:4e:c3:c2:03:07:6e:
87:3e:f7:fd:13:d0:23:3f:bd:1b:70:a3:15:df:87:6e:3c:4e:
9f:53:36:b5:fa:75:31:cb:e6:c3:5a:1e:0c:d4:a0:a8:47:a7:
11:c5:ec:59:38:92:e8:fe:99:ab:9a:e8:fa:7b:43:00:50:03:
26:97:f2:39:62:92:e1:ef:93:99:69:3a:83:22:6d:01:85:d5:
72:df:14:50:f8:71:72:c6:54:9f:fa:5c:bc:bd:d5:33:63:4e:
9d:c2:dd:05:41:f9:45:9b:70:47:2a:fb:2a:22:49:5f:da:80:
4b:e4:00:d6:0c:d1:78:dc:e9:4c:9c:72:67:4d:8f:a0:f8:f4:
80:b1:a9:6b:54:b7:bc:f3:6a:a5:5c:fb:cb:ac:02:da:a6:85:
95:e6:ec:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:53:01 2025 by rpki-client