Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: afgFuHQKoMggP6z0PmoUIZW2Y0SzAg1eKKPu59UhRfA=
Subject key identifier: B2:A6:B6:76:7D:89:56:E8:32:60:86:E4:40:44:FE:28:08:C1:95:10
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 019923D5C37AD646B2AAB097F3B93C73BFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 1044
Signing time: Sun 07 Sep 2025 11:00:35 +0000
Manifest this update: Sun 07 Sep 2025 11:00:35 +0000
Manifest next update: Mon 08 Sep 2025 11:00:35 +0000
Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: 1ruPY2TqSI8gv6O0bMUZ2Dz7FTl8i5OUuNwWPWAA3cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:c3:7a:d6:46:b2:aa:b0:97:f3:b9:3c:73:bf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Sep 7 11:00:35 2025 GMT
Not After : Sep 8 11:00:35 2025 GMT
Subject: CN=b2a6b6767d8956e8326086e44044fe2808c19510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:ee:ef:11:eb:ea:63:43:8e:1f:c3:c3:05:
20:e2:90:7a:72:a4:de:1d:12:5d:73:2f:1a:6c:4f:
ed:70:8e:6b:e8:3b:92:3c:81:10:40:26:70:70:ea:
55:33:d1:8e:b6:33:08:fd:93:b2:1b:2e:f1:27:50:
c8:4a:1c:a7:ca:8d:cb:0f:a8:6e:d7:a1:66:e6:a8:
1a:b8:f7:1b:66:7d:93:ff:aa:80:e5:55:a7:5e:76:
e8:26:73:91:8e:b8:48:ce:96:a4:78:28:ae:b2:84:
be:0d:34:b7:cd:13:f7:78:0d:00:38:78:7e:82:56:
af:40:16:5d:9b:2d:0c:11:72:72:b9:f5:28:d1:5c:
3c:38:17:dd:f8:7e:b7:9b:ea:74:95:b6:d4:8c:67:
8e:e2:d6:32:c5:50:be:67:b9:34:01:c3:b9:b0:55:
a1:cc:5e:75:2d:51:81:ce:59:a3:0b:71:ed:7f:6f:
7a:21:f3:cd:5d:23:f2:d0:3a:93:6b:dc:b5:67:98:
9c:10:24:e4:6f:d7:51:1a:72:e0:26:05:d0:b2:e5:
87:8a:28:5f:9f:4b:67:db:ef:83:38:f6:0a:cc:5a:
db:02:37:8e:4d:8b:73:9a:7d:47:a1:cc:0e:05:a9:
33:90:d1:0d:b9:05:b7:97:86:24:2c:55:ff:7c:98:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A6:B6:76:7D:89:56:E8:32:60:86:E4:40:44:FE:28:08:C1:95:10
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d7:96:94:de:ee:f9:19:3f:f0:0f:96:ca:79:1e:31:92:a4:
06:08:0e:2e:bd:20:2e:4f:6d:4e:3d:6f:e8:8a:de:01:f2:2e:
75:2d:d9:3f:77:3e:ff:02:ff:6f:7c:53:5f:d5:87:58:e6:26:
6c:86:be:85:f5:bc:d0:55:f1:8c:41:fc:01:4e:fa:c9:6c:01:
a9:a7:e5:46:98:9f:85:6d:9f:19:43:bf:ce:e5:40:93:42:c0:
98:91:f6:26:bf:23:b2:25:06:c5:92:e4:7a:2f:40:40:76:0d:
23:e7:2a:5e:e4:ab:49:af:48:50:c8:a7:da:0b:db:dc:91:25:
52:9a:f1:f5:90:e3:81:4a:62:e0:48:91:1e:5b:3c:f6:62:62:
1a:b6:03:09:4f:ec:1c:38:59:ac:7d:1f:ed:fc:73:8f:62:90:
a9:cc:d2:60:65:46:29:c2:fe:e2:bb:f9:2c:00:2b:33:fe:4f:
8b:c5:c9:ac:07:37:c4:98:1a:bf:35:e3:7e:e1:5f:11:6d:78:
75:dd:a2:56:64:b4:89:de:89:c8:6f:7f:82:2a:70:59:e8:f2:
b8:4c:de:44:da:d2:a8:25:e1:99:af:a6:f9:05:83:d8:4b:6c:
5a:79:4b:20:d8:ba:ba:06:c3:10:e0:3f:44:43:1b:b5:b0:a8:
ff:f8:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:13 2025 by rpki-client