Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier: wSiInrpGUbgfAT0CaZ8KRodDTTNiM8HbDmlt7O7GAE4=
Subject key identifier: 7B:65:E9:3C:11:86:67:E0:40:45:51:08:2B:DE:FC:93:A6:89:E7:9B
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial: 019A7149C7DDF7A48F93874676CD57B7707E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number: 1129
Signing time: Tue 11 Nov 2025 05:00:51 +0000
Manifest this update: Tue 11 Nov 2025 05:00:51 +0000
Manifest next update: Wed 12 Nov 2025 05:00:51 +0000
Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: fhvIIFyNahDPG8utVyPFhfVEAdSpkPlhdLvnA6KA4yI=)
2: i_E14tU_jnnkTSG9INpa9JShg9E.roa (hash: ZqQOvQcYLRY+mr+wSPe0ltP607X6tGik7hBPTVxfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c7:dd:f7:a4:8f:93:87:46:76:cd:57:b7:70:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Validity
Not Before: Nov 11 05:00:51 2025 GMT
Not After : Nov 12 05:00:51 2025 GMT
Subject: CN=7b65e93c118667e0404551082bdefc93a689e79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:22:b7:98:5c:38:df:be:41:e9:af:38:be:
bf:1b:80:ff:c9:23:41:fe:07:cf:6a:bb:8a:c5:cf:
1b:0a:c7:f0:fa:6e:0a:8a:8e:e9:06:d5:23:5c:b2:
78:19:93:26:16:24:2e:b1:14:6b:cc:85:b9:1f:b5:
3d:f0:5c:01:37:a8:c2:31:94:5e:98:71:ca:a5:99:
4b:5c:76:7f:2b:9f:f4:7d:53:88:e7:8b:13:f7:41:
69:83:c8:19:68:c8:d2:6a:28:25:42:0d:9e:a3:75:
07:63:a5:23:78:9e:d8:23:4b:dc:b5:f8:67:ca:49:
bb:dc:43:c5:63:b1:a1:4f:8d:61:cd:d5:dc:d0:ab:
b7:f1:c4:4f:51:ca:90:54:c4:4a:bf:45:99:71:24:
8f:a4:f9:6e:ae:4d:08:7c:c7:ed:1b:55:a1:2d:63:
94:5c:ef:95:c1:e3:8c:36:2c:78:1c:76:3f:a5:85:
a0:59:ab:72:4b:c9:16:ea:06:ea:79:8b:df:e0:d0:
6a:5f:e4:49:70:27:b9:90:f0:1f:27:67:76:91:e2:
5b:04:58:77:59:93:c0:61:25:eb:a6:58:cf:de:da:
c4:48:34:1f:46:71:8f:ea:54:6c:89:22:e0:3a:95:
b6:42:9d:ca:5d:9e:d8:ee:a9:bd:fd:38:16:c3:ae:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:65:E9:3C:11:86:67:E0:40:45:51:08:2B:DE:FC:93:A6:89:E7:9B
X509v3 Authority Key Identifier:
keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0b:4f:34:55:69:a4:8b:e4:d3:86:7e:0a:bb:96:64:8d:71:
a2:70:9d:c2:95:09:57:5e:0f:02:f3:1b:a6:29:6d:ea:1c:80:
48:b6:15:b2:36:c9:c4:2a:1b:48:3d:93:c3:de:0e:38:14:01:
f4:0f:5f:76:20:45:7f:f2:45:f1:ca:79:5c:00:a7:34:31:9c:
c0:39:7c:7e:ac:00:d4:35:5c:42:fa:42:0a:62:ec:d9:fd:73:
e0:7c:f8:07:2e:e1:ed:94:51:21:e1:ed:c1:3f:f9:21:e2:cc:
c9:3a:46:5d:fc:30:fc:ad:a0:b4:bb:e3:47:c3:41:93:2a:cd:
25:0a:dc:19:6f:5a:e4:7a:53:a2:7a:4b:7c:ad:a8:96:6f:5d:
f5:7d:94:4a:45:58:c8:94:fc:b9:6e:22:1d:5a:7b:9a:0b:1a:
5b:49:37:6f:68:b4:19:2e:38:36:99:ac:c2:2c:e5:9f:89:ce:
34:cf:97:f6:16:93:42:f1:28:00:64:39:41:74:10:fe:d9:4a:
6d:8a:a3:76:04:ba:65:4f:4d:28:e3:e3:c2:4d:32:7d:31:16:
ae:f0:b5:d7:2a:75:83:fa:b5:4c:f4:49:6f:e9:b7:01:6e:3a:
ea:61:5b:0e:27:03:59:ed:3e:ba:13:9a:e5:4b:66:7a:01:c4:
34:c6:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:12 2025 by rpki-client