Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json)
Hash identifier: Vc9HhSyxD8vtDFXY4ew+SP8jEIchc2P7jt6jslNfoio=
Subject key identifier: 3D:A7:16:8C:F5:0D:12:D4:02:90:3A:66:F7:DF:50:99:C1:B5:E1:95
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 01984966EDA76606B0B6B818AD49F4D3266D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
Manifest number: 0C0B
Signing time: Sun 27 Jul 2025 01:02:18 +0000
Manifest this update: Sun 27 Jul 2025 01:02:18 +0000
Manifest next update: Mon 28 Jul 2025 01:02:18 +0000
Files and hashes: 1: X2bocyRVhCfvso68Pv43uBx6gHw.roa (hash: ch7Rg28zRrgi0YGzVdKPWQbcu7IjFqyNq5JbEbQ26hc=)
2: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: tJckyZ3eNMFb366yB1+yAHkv+fpNNwGV4Pm2HpJm/RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:ed:a7:66:06:b0:b6:b8:18:ad:49:f4:d3:26:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: Jul 27 01:02:18 2025 GMT
Not After : Jul 28 01:02:18 2025 GMT
Subject: CN=3da7168cf50d12d402903a66f7df5099c1b5e195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:ac:f9:a7:5a:9a:e6:65:ba:aa:54:3d:37:
08:4e:f6:27:3b:be:84:ac:58:93:e0:a6:51:b9:66:
3c:6a:e2:ac:fc:bc:50:dc:dc:68:83:20:38:0d:be:
d8:05:5c:32:b3:81:90:f4:7a:85:26:d9:02:3d:cf:
6d:62:12:6b:75:14:84:d3:88:f4:96:66:b8:ed:a9:
e2:0c:c2:bb:e7:2b:6d:73:b7:91:32:ba:6a:50:ba:
c3:45:98:f2:17:6f:d0:af:4a:a4:8b:e5:93:29:a3:
ac:b8:e1:2c:a4:9b:60:88:cd:c8:4e:b4:7f:4f:2b:
97:fe:b8:de:53:c5:c8:f1:8b:c2:99:e7:90:4e:71:
5d:a7:b3:32:2e:a2:67:69:2a:c3:ec:ac:e8:e1:f9:
e4:cf:bd:82:6d:99:b8:58:96:64:85:69:f0:ca:df:
fa:fd:76:80:98:84:a4:da:8f:c3:af:78:a6:8f:d9:
dd:2f:dd:df:79:54:b3:56:9c:e5:00:47:0d:08:b2:
4e:c4:51:c0:0d:2d:b0:ab:8a:a4:2a:14:82:cb:0a:
70:0c:6b:59:6e:9a:4a:3f:e0:42:a3:b4:30:92:a3:
26:91:e6:ea:c2:43:34:6e:22:43:68:9c:00:99:1a:
5f:5b:be:7c:2c:94:69:8e:aa:8a:6a:9c:e9:d0:8a:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A7:16:8C:F5:0D:12:D4:02:90:3A:66:F7:DF:50:99:C1:B5:E1:95
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:83:da:17:89:c4:15:d0:b2:95:4d:50:cd:f9:b8:b4:cd:5c:
d6:64:c0:b0:21:39:a4:df:7c:30:f7:df:70:c9:d6:81:31:b3:
ea:c9:9b:4a:06:50:81:58:6f:94:97:61:17:88:23:6f:5d:97:
1d:ae:05:89:4f:73:7d:48:bc:d8:07:8f:45:01:15:59:8e:e7:
af:be:66:b6:9a:92:46:66:b3:c1:6f:87:f1:ae:37:ec:c4:d8:
2e:44:de:f8:d4:57:b5:36:c9:fb:ba:57:38:ab:bf:90:98:87:
b7:65:a2:11:85:f4:74:5c:5f:b1:82:c4:52:62:b2:22:a0:05:
67:ca:9e:b0:a1:ba:fb:b4:66:f0:81:df:96:49:c2:1b:e9:91:
b3:d2:78:44:93:12:6f:56:23:40:93:a2:ca:f7:3a:a5:89:41:
b3:78:73:8b:dd:29:7a:61:ae:d1:0b:44:aa:40:72:b3:60:68:
5e:55:50:85:0a:ab:d4:36:fa:18:6e:48:c0:32:7f:1a:f0:89:
5a:a9:6b:f1:56:f1:45:a2:57:45:8c:d6:d1:d7:56:24:59:46:
e1:6e:e2:2d:e5:49:e5:ec:c4:9d:c1:21:2c:65:ff:2e:b5:c9:
d6:5e:7c:58:01:4f:09:6e:47:d5:de:35:a5:78:e8:00:2c:2b:
c6:a6:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:03:02 2025 by rpki-client