Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: glmyRF/kSgjPGkvIzg36SODVhQJTcQ1FzxBWDB9EHDo=
Subject key identifier: C6:1F:0C:D4:E9:0F:D3:D4:61:5A:55:35:F1:AD:8C:94:5A:3F:99:2C
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 019A71EE5D9C9D0E6388050DA99AF4F5C6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 10F1
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: viwzk9H/aHinVAAZcG4MU2ssKKTCmuPM1o5+qv1yBJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5d:9c:9d:0e:63:88:05:0d:a9:9a:f4:f5:c6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=c61f0cd4e90fd3d4615a5535f1ad8c945a3f992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:76:3b:93:03:9d:7a:98:1a:ad:87:95:59:
ab:c4:c4:ec:55:77:d0:75:c7:b3:8a:37:30:09:01:
ea:64:a4:ec:b6:34:ac:34:e1:21:4c:aa:ea:cf:1d:
27:28:f3:d9:94:19:dc:61:2b:1d:fb:5c:9d:bb:a1:
a8:8a:ad:ff:f2:68:36:46:1d:ab:d2:0a:b3:45:23:
4e:18:f1:72:f4:50:64:a4:0b:ac:01:e8:11:bb:e8:
bf:c1:b7:fd:5d:18:08:be:00:56:ff:a8:de:76:65:
4c:a4:3a:22:ad:14:00:57:2d:f8:28:7b:9b:04:15:
f5:5f:39:b4:fe:24:8e:0a:69:d6:29:e7:be:76:9f:
18:c0:88:fe:b7:26:e6:9f:fa:05:bb:67:e8:cc:a5:
e8:40:f8:37:f9:85:62:3c:92:db:8a:27:e9:ad:89:
ad:90:56:cf:6b:c3:0a:14:18:bb:f4:c9:90:c3:f4:
03:5d:74:0f:57:19:f2:b3:b2:9f:a1:91:93:e5:3b:
c3:fa:99:02:0a:20:70:16:de:60:61:08:6c:6b:a2:
b6:f4:d6:cf:d8:3b:f0:d5:97:3f:ba:b5:80:a5:a2:
4f:9f:a1:52:e8:6f:d3:75:53:c6:9f:60:b6:5e:c8:
5d:9d:d1:80:d2:16:40:8d:97:31:2e:3d:27:64:4d:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1F:0C:D4:E9:0F:D3:D4:61:5A:55:35:F1:AD:8C:94:5A:3F:99:2C
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d9:bc:c6:33:5f:be:31:31:50:0f:7e:b1:57:40:f2:a4:c0:
b7:2e:8d:99:1b:79:42:47:2b:25:99:c8:00:50:1d:d0:d9:4e:
3f:d1:4f:11:33:79:e1:70:c8:cf:69:8d:91:6b:5a:4b:a5:d2:
72:72:d5:e3:6d:e9:4f:06:53:4f:1e:96:ef:f2:ff:bb:ef:25:
d5:b6:9e:43:34:a9:94:d4:8d:da:fd:68:c6:79:b0:7f:de:84:
f5:8b:62:53:15:4d:b0:2e:b7:c6:2f:96:d5:61:a5:a1:d3:c0:
5f:b9:0c:17:10:a9:12:ca:61:3c:7b:9a:37:a7:f7:93:68:7a:
12:c8:6e:b0:4a:09:27:eb:00:1d:72:70:03:c8:31:1e:d0:df:
74:9c:a2:39:18:6f:92:e8:cb:f1:fe:73:ff:5e:75:46:81:ed:
90:59:30:eb:f9:87:1e:d3:4e:71:82:b9:91:50:6d:cb:b4:e8:
4e:f4:7f:49:81:d9:87:84:0d:aa:f2:68:67:5c:f1:ae:b1:e2:
b1:b5:c4:ae:7b:b9:44:f9:d7:2f:49:80:63:5c:ac:af:9e:59:
56:a1:4a:34:f1:23:cc:2b:1d:0c:5f:2c:70:bb:45:29:77:5c:
04:8c:7f:d6:3c:96:5b:4c:a8:d7:bb:a6:4d:96:b0:68:ac:c0:
92:0e:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:32 2025 by rpki-client