Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier: KfSvLgNUYxb24LG9GG5oyEZgLHfjF3D2cnqDrP3yf9M=
Subject key identifier: A6:72:96:84:6A:B6:7D:A8:36:D4:6F:5D:EB:11:C3:E8:A5:2E:39:CC
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 019A711356013D72C25F5301BEA7DDA464B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number: 080E
Signing time: Tue 11 Nov 2025 04:01:23 +0000
Manifest this update: Tue 11 Nov 2025 04:01:23 +0000
Manifest next update: Wed 12 Nov 2025 04:01:23 +0000
Files and hashes: 1: ChDs0vPKHYXjmSRKvkz2qLqd3Rw.roa (hash: ThMIkvoH8p8/FHDDQvYXCmb7VtUAbCIv++31C7wNSNA=)
2: YH9rgvwa_c5tkfoIds2w3LcyxQU.roa (hash: O5b96K5UqDPwtmiTY4ipuOfWppIds6W4j/eFK50+Z/0=)
3: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: krX9aIvsFmrQY7TkCZoxbdGFB1kDNbaYW03v49NjRVA=)
4: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:56:01:3d:72:c2:5f:53:01:be:a7:dd:a4:64:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Nov 11 04:01:23 2025 GMT
Not After : Nov 12 04:01:23 2025 GMT
Subject: CN=a67296846ab67da836d46f5deb11c3e8a52e39cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:d6:1a:57:6d:e0:b5:ae:35:96:9d:96:95:
26:ae:cd:2e:d5:67:42:ee:b9:ac:be:41:eb:4c:d6:
a1:0c:01:37:62:53:4b:9f:10:63:5b:8f:c0:25:b1:
37:22:53:1b:ad:5b:07:6e:94:db:09:74:d5:03:e9:
85:2b:82:cc:5a:9d:22:2a:65:22:50:36:0b:6b:92:
6f:d4:a0:76:11:ba:3a:36:8f:8e:ff:19:33:71:47:
a4:86:7d:5c:40:25:c0:d3:77:84:fd:7e:ad:4f:d8:
94:67:60:93:d8:ef:6a:3b:bf:c9:f0:81:43:94:03:
a3:0b:f0:9b:9e:21:e5:96:b5:2c:7f:8e:e3:af:4c:
b5:de:08:31:73:6b:8c:e8:4a:a5:1d:02:fb:8b:2a:
56:16:23:9e:1d:90:26:ec:49:a7:9b:f5:ae:ce:3d:
8e:70:3f:ce:14:c7:e2:f3:2e:47:35:48:a3:69:9d:
26:86:48:bf:26:3d:8d:6a:25:95:5d:17:1e:36:77:
7c:fd:e9:6c:c4:e0:77:bd:99:39:f7:1e:08:6f:49:
a1:d3:43:ce:dd:b3:47:f0:88:a9:bc:26:99:34:28:
f2:f9:1b:5f:bc:56:73:96:22:7b:1b:0f:47:83:3e:
88:73:c2:30:98:4b:42:69:91:d2:9a:30:d5:7d:7e:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:96:84:6A:B6:7D:A8:36:D4:6F:5D:EB:11:C3:E8:A5:2E:39:CC
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:09:fe:55:52:7c:6a:7b:56:6c:4a:72:33:93:be:44:b2:d1:
d8:5a:26:39:a2:36:c1:7a:1a:ca:1c:06:6f:3b:0e:ae:3e:ce:
45:de:03:20:14:5d:48:36:cd:e9:6e:28:3d:3b:57:d7:03:ae:
75:4e:ba:d7:0d:3a:9c:84:4d:46:8e:2c:46:e7:34:90:fd:40:
9a:b2:4a:d6:70:54:c9:50:29:83:e1:62:2a:6a:59:91:5b:37:
eb:40:e7:0b:ee:9a:a0:d8:ea:53:a4:43:6f:83:aa:9b:19:e7:
43:2f:b8:42:95:e3:ab:f8:27:23:81:41:ee:f6:e1:40:9a:96:
c0:dd:3f:eb:b5:ad:76:70:3e:e9:22:99:4d:29:cd:94:3a:07:
94:2e:2f:d7:a9:36:31:5a:0d:6d:dc:72:e5:bf:df:1c:ed:67:
9b:d3:77:3a:a5:d3:7d:9a:50:3f:d3:de:e8:74:93:10:d4:50:
0a:f8:f9:72:24:61:b0:6f:2a:c5:ea:77:f4:10:af:f4:34:15:
18:49:2d:48:5d:53:fc:fb:03:36:7a:b2:e3:43:6a:a0:eb:92:
da:1b:48:be:fa:9c:ca:dd:04:d2:ef:8b:90:4a:1b:17:47:83:
41:f4:42:78:2c:d1:5e:21:9a:1a:0b:c9:38:f2:f2:99:8a:09:
03:5a:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:47 2025 by rpki-client