Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier: 00hGWB+zTGwvWp5FYeHYJJYlbr+v7AAlOni8LYkQOJ0=
Subject key identifier: C4:63:9D:97:14:B7:0E:94:95:6F:E0:DC:7D:C7:5B:DD:C6:20:66:3F
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 019A71130C2D8ECE71CAA316655E0BE37E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number: 1739
Signing time: Tue 11 Nov 2025 04:01:04 +0000
Manifest this update: Tue 11 Nov 2025 04:01:04 +0000
Manifest next update: Wed 12 Nov 2025 04:01:04 +0000
Files and hashes: 1: FFaDrp2TE8Iso6bJlqnb0FqxMJo.roa (hash: Jw9G+J8hnCo8w1musIzxpySO6bTcvYrzNLckyhAd2sE=)
2: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (hash: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=)
3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: m7Mt1Q75F5MVhDzZU1S9RaoC1a4b/QlMp5O9phxwP/0=)
4: wx9ZLfHq6PPLS3pCuhQK4_vKdmU.roa (hash: DnxpnoHYAliciPu4AVi4OmZMasKtCCrMr0Wd+JxLlgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0c:2d:8e:ce:71:ca:a3:16:65:5e:0b:e3:7e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Nov 11 04:01:04 2025 GMT
Not After : Nov 12 04:01:04 2025 GMT
Subject: CN=c4639d9714b70e94956fe0dc7dc75bddc620663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:67:a6:25:41:2e:b2:ad:e5:61:31:9d:05:
b0:b5:8a:56:6d:93:72:f3:8e:a8:06:8a:67:f1:bd:
a3:c7:56:42:ac:c8:1f:c8:04:cd:5c:35:bb:2a:a5:
e8:ac:bd:fe:9a:ab:78:1c:31:45:0b:7f:55:86:1c:
11:96:a2:e6:c3:d5:f5:03:88:b2:73:4d:79:07:7e:
fd:52:d3:10:11:2d:c4:f1:a6:63:a5:3b:20:2e:f6:
07:d0:2e:ed:84:fa:d2:60:00:fb:be:55:47:f2:cd:
7f:8d:a0:f4:5e:3f:b6:86:2e:0b:bc:cc:b4:89:9d:
80:14:59:f6:8e:c6:b8:09:d6:1f:e9:84:8c:47:8c:
3c:78:d1:d6:9e:5d:26:cf:53:4c:60:b7:3b:48:6f:
91:52:f2:62:c5:62:f1:f4:b1:0d:84:59:5e:a1:78:
e1:fd:c6:3e:ff:61:07:0c:29:98:7a:94:36:9f:9e:
8c:2a:46:33:79:c9:a4:fe:90:ee:67:5f:00:da:ec:
0e:2b:23:f6:c7:76:d4:f6:4e:eb:97:a6:aa:99:f0:
25:15:6c:0c:d8:1c:36:ed:85:4b:6f:cd:35:8e:17:
c1:6b:1f:06:0e:58:a3:26:d2:40:50:99:f3:b4:ac:
39:9f:ea:c4:ae:ed:aa:b8:09:6e:65:6f:54:0d:b9:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:63:9D:97:14:B7:0E:94:95:6F:E0:DC:7D:C7:5B:DD:C6:20:66:3F
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3e:41:88:d1:86:86:76:f5:0f:ad:44:a1:27:e4:d6:db:7d:
d4:ac:b6:b8:e2:16:e1:fc:20:56:48:36:51:00:03:bd:c3:20:
0e:05:40:e1:b4:4c:d5:6b:36:65:5b:18:05:93:03:19:61:7d:
6e:2e:86:8f:f3:98:17:c2:f3:57:4c:bf:52:a3:d4:e0:62:fa:
79:4c:c1:d2:1b:3d:c9:2f:2c:93:32:dc:09:aa:bd:b6:be:06:
7a:34:5e:c2:9d:f7:ba:60:23:11:da:9a:4a:ea:5e:96:90:35:
9d:0b:5b:37:b4:bb:21:b2:52:e7:d2:ef:3b:ed:e9:16:ea:21:
3a:f7:5e:7f:75:4f:3f:a1:be:c1:4c:ee:1e:6f:0a:0b:95:d6:
56:58:34:37:d8:ec:10:f9:8f:d2:23:66:19:a7:51:a1:a5:12:
cc:c0:f4:05:60:8c:c0:16:c7:0a:70:8b:39:55:ef:98:1f:b8:
1a:1a:f3:10:94:66:c0:5d:b3:e6:fc:64:77:95:1f:ce:54:5b:
e6:15:c3:77:ec:71:73:52:50:90:74:36:62:92:7d:83:f6:08:
21:80:eb:35:89:e6:39:43:81:ec:6e:b4:60:f0:4f:84:f3:ec:
c4:fa:f5:59:f0:01:69:7d:c4:2f:d6:fd:6b:7a:72:cd:d9:61:
21:4d:69:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:48 2025 by rpki-client