Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json)
Hash identifier: 6It2yF6P2hCQe6c9rrWA88WwzOH37UA1FQWiPTMjHRs=
Subject key identifier: C1:66:51:47:1B:E4:FD:5D:08:52:27:45:F6:18:5B:09:5F:B3:F6:7F
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 019A209BF83E0F0A33D4AE665D2F49F474F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
Manifest number: 0CFF
Signing time: Sun 26 Oct 2025 13:01:23 +0000
Manifest this update: Sun 26 Oct 2025 13:01:23 +0000
Manifest next update: Mon 27 Oct 2025 13:01:23 +0000
Files and hashes: 1: X2bocyRVhCfvso68Pv43uBx6gHw.roa (hash: ch7Rg28zRrgi0YGzVdKPWQbcu7IjFqyNq5JbEbQ26hc=)
2: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: mZBNx1z7ALxuPW/gK5bifg8P3ve0hvsbcYuXmo7yvus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:f8:3e:0f:0a:33:d4:ae:66:5d:2f:49:f4:74:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: Oct 26 13:01:23 2025 GMT
Not After : Oct 27 13:01:23 2025 GMT
Subject: CN=c16651471be4fd5d08522745f6185b095fb3f67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:97:e4:fb:74:6b:46:73:25:08:c8:e8:c9:
ac:3e:a5:04:1a:fe:5a:dc:a6:e1:3f:86:a8:0b:8c:
18:89:c3:2a:6b:9b:fe:1f:f1:06:eb:e8:bd:ef:c8:
cf:2c:c0:05:cd:30:87:da:3d:ab:a1:55:bc:8e:73:
f0:06:96:3f:9c:04:d9:de:df:27:44:8d:ba:c6:4f:
f9:c9:8c:7e:9d:53:11:9d:9c:fe:28:d1:b4:4e:24:
16:d7:c6:84:90:82:82:1e:fa:6a:74:c6:60:70:e0:
26:a6:ee:b8:6c:f8:e7:86:ba:fa:ba:63:33:f3:06:
b4:cc:da:be:bb:99:92:83:8c:71:2a:4e:ae:3f:63:
ce:75:88:eb:58:46:66:f6:cb:a3:95:23:24:cf:5a:
4b:7a:58:ea:8d:62:4b:38:84:d6:49:81:3b:b5:5e:
1b:38:68:87:fc:2a:be:81:78:01:d8:9c:cb:51:3e:
36:96:e7:39:22:74:3a:48:a4:ff:fe:64:a2:74:89:
cd:7b:c8:f5:3d:16:ed:e8:17:2a:59:58:90:21:37:
f9:8c:e5:34:ef:71:83:ae:62:69:40:43:81:1e:0c:
b5:40:91:b6:17:2f:a8:1c:08:2d:33:99:bb:4e:55:
16:3b:b6:9e:55:31:9c:c4:7a:8b:e7:42:56:e5:54:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:51:47:1B:E4:FD:5D:08:52:27:45:F6:18:5B:09:5F:B3:F6:7F
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:02:91:76:51:c0:19:1b:dd:4d:ea:ac:08:0b:d9:2c:6f:7c:
3d:fc:9d:28:db:01:95:7a:df:55:c3:4d:97:9b:8f:dc:11:40:
b8:f9:7f:4a:10:88:c9:f1:eb:fc:37:c0:75:2e:70:ab:af:10:
06:d1:7e:fa:26:03:18:cf:09:cd:76:07:68:6d:8c:02:2d:9d:
bb:3d:bc:c2:43:21:37:19:83:84:0d:a1:de:a0:2e:f6:46:b3:
12:f3:75:9d:c1:c4:0f:fe:d5:47:b7:07:43:76:32:b4:4f:a4:
c3:4c:13:18:ac:10:93:57:93:15:25:a0:1e:50:ff:5f:75:af:
30:4f:46:32:eb:61:02:82:0d:14:83:d0:59:e3:8c:b8:91:99:
70:0d:d7:07:ca:39:b9:65:b8:e0:bf:61:a2:92:7c:ed:4b:e2:
fb:8c:51:fa:98:53:84:d2:20:a2:c1:67:4c:0c:aa:dd:e6:2d:
d3:06:f7:cb:3a:e3:6e:ff:b8:52:0e:b8:4b:1d:8b:ba:9d:88:
92:69:74:bf:cb:46:e5:a3:46:b5:f4:55:42:07:4c:07:77:4b:
5b:34:74:57:ba:3b:bc:a2:02:3a:d2:55:f6:89:4f:98:0a:54:
fe:c2:db:62:e8:d7:77:3c:8a:34:ad:45:48:8b:aa:f8:02:18:
44:9d:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:28:03 2025 by rpki-client