Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: 471KsWVO2KjYyZHnPiY7IiL3i6MW1hFEx2Rar9gRMDg=
Subject key identifier: C9:75:43:94:48:D9:14:43:48:EA:3C:3C:A7:C5:BF:EE:11:E0:9C:FC
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 019A145FFA1CF1F59AD9D0B66065E83DABB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 1125
Signing time: Fri 24 Oct 2025 04:00:25 +0000
Manifest this update: Fri 24 Oct 2025 04:00:25 +0000
Manifest next update: Sat 25 Oct 2025 04:00:25 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: oC8fY+KBMDwvy5EBvJmCzVFc0vZQ5A2QL8Opr/ivzQY=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:5f:fa:1c:f1:f5:9a:d9:d0:b6:60:65:e8:3d:ab:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Oct 24 04:00:25 2025 GMT
Not After : Oct 25 04:00:25 2025 GMT
Subject: CN=c975439448d9144348ea3c3ca7c5bfee11e09cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:50:6b:86:5d:15:9d:64:c9:b3:c0:77:96:
53:5e:52:be:35:9a:c1:5b:bb:b4:4c:d8:75:b3:ad:
32:59:80:5b:e4:8e:08:af:a3:93:f2:31:4d:7b:ff:
0b:99:07:f6:d1:b7:12:32:fb:51:ce:25:2d:7f:9a:
7d:dd:69:c5:b3:f7:fb:6a:66:38:d6:6d:98:3b:b1:
d3:34:d3:aa:c4:57:13:07:54:97:a9:dd:ae:bf:6f:
7c:40:d2:94:34:65:5c:c2:b2:89:e8:0d:69:4e:80:
18:dd:5e:a5:88:06:60:a4:af:c0:9a:69:cb:5a:d6:
9e:92:1c:8f:b2:ef:ea:21:7e:91:c3:81:a2:50:e9:
70:a8:71:67:7a:26:46:4f:4c:b8:c5:a0:77:75:12:
c7:0b:d4:67:ec:96:3d:0e:71:85:88:f3:08:ff:c0:
5c:bc:ee:76:b3:54:e1:8a:32:f7:5c:47:73:95:2f:
aa:f1:90:5b:c7:b6:e7:9a:40:61:6d:49:f9:82:96:
df:53:e2:f1:b4:09:e4:9f:da:34:f5:1a:16:e2:81:
6b:c2:8f:13:86:a4:fc:dd:d0:82:a3:91:2a:46:26:
c2:5f:ad:39:5b:60:01:66:3a:d1:51:28:b0:97:11:
56:f1:6e:92:fd:7d:3d:ed:c5:24:2c:44:41:72:3b:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:75:43:94:48:D9:14:43:48:EA:3C:3C:A7:C5:BF:EE:11:E0:9C:FC
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c4:98:4f:c1:2c:54:39:05:83:52:d9:40:44:fb:36:29:8e:
bc:9d:d8:df:6f:b0:c7:6c:9e:5a:81:69:8b:46:2d:3b:5d:f0:
2a:fb:f9:e9:8f:26:4d:33:4b:3b:2b:f6:00:a1:d9:d1:c3:5e:
bb:d3:ed:df:34:47:89:2f:df:34:56:ff:35:7f:f9:f0:99:5f:
ff:a4:98:12:55:99:f3:6c:ef:5e:13:1b:4c:fd:05:8f:ee:0e:
35:7a:68:40:e9:5b:ee:8d:c3:b4:cb:6f:8c:f1:7a:09:94:e8:
3b:6a:28:42:88:f8:d6:5c:f1:26:4d:e2:c9:f2:47:21:26:f8:
12:34:5d:77:a6:8d:e4:2d:94:c9:b3:58:65:89:ef:0d:0b:67:
1e:fc:11:01:6b:43:e3:6f:b2:e4:cb:11:db:4b:49:f2:2f:8e:
d2:c3:49:42:63:92:6e:d3:d9:de:80:5b:cc:30:89:55:c7:cc:
9d:d6:1e:c4:bb:83:09:ca:0f:00:0d:88:4a:62:e1:87:72:52:
24:a1:cf:74:68:7d:0b:aa:9c:67:30:fc:35:63:d3:20:24:fd:
87:7b:f3:98:54:cb:8c:b4:eb:00:59:4b:cd:cb:dd:59:50:28:
71:40:8c:c4:4e:b9:66:93:f3:16:3d:69:0f:9e:5b:9d:a2:88:
ff:b8:f7:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoUX/oc8fWa2dC2YGXoPau5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2
YThkMmUwHhcNMjUxMDI0MDQwMDI1WhcNMjUxMDI1MDQwMDI1WjAzMTEwLwYDVQQD
EyhjOTc1NDM5NDQ4ZDkxNDQzNDhlYTNjM2NhN2M1YmZlZTExZTA5Y2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuBQa4ZdFZ1kybPAd5ZTXlK+NZrB
W7u0TNh1s60yWYBb5I4Ir6OT8jFNe/8LmQf20bcSMvtRziUtf5p93WnFs/f7amY4
1m2YO7HTNNOqxFcTB1SXqd2uv298QNKUNGVcwrKJ6A1pToAY3V6liAZgpK/AmmnL
WtaekhyPsu/qIX6Rw4GiUOlwqHFneiZGT0y4xaB3dRLHC9Rn7JY9DnGFiPMI/8Bc
vO52s1ThijL3XEdzlS+q8ZBbx7bnmkBhbUn5gpbfU+LxtAnkn9o09RoW4oFrwo8T
hqT83dCCo5EqRibCX605W2ABZjrRUSiwlxFW8W6S/X097cUkLERBcjsHBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl1Q5RI2RRDSOo8PKfFv+4R4Jz8MB8GA1UdIwQY
MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt
OTMzN2YzNzQxNjhlLzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl
LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8SYT8Es
VDkFg1LZQET7NimOvJ3Y32+wx2yeWoFpi0YtO13wKvv56Y8mTTNLOyv2AKHZ0cNe
u9Pt3zRHiS/fNFb/NX/58Jlf/6SYElWZ82zvXhMbTP0Fj+4ONXpoQOlb7o3DtMtv
jPF6CZToO2ooQoj41lzxJk3iyfJHISb4EjRdd6aN5C2UybNYZYnvDQtnHvwRAWtD
42+y5MsR20tJ8i+O0sNJQmOSbtPZ3oBbzDCJVcfMndYexLuDCcoPAA2ISmLhh3JS
JKHPdGh9C6qcZzD8NWPTICT9h3vzmFTLjLTrAFlLzcvdWVAocUCMxE65ZpPzFj1p
D55bnaKI/7j3DA==
-----END CERTIFICATE-----
Generated at Fri Oct 24 11:50:38 2025 by rpki-client