Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: F5uPkTytjmCARhCu40NxY7+zyPnwu/qMyL89/XQhwX4=
Subject key identifier: 00:9F:93:E7:6C:FE:DE:A2:1B:C4:0A:DE:E7:A5:97:25:A0:12:E8:5E
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 019A13BB66AB530D25C3F9393C5D41D2F16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 16EE
Signing time: Fri 24 Oct 2025 01:00:39 +0000
Manifest this update: Fri 24 Oct 2025 01:00:39 +0000
Manifest next update: Sat 25 Oct 2025 01:00:39 +0000
Files and hashes: 1: OgYJc9A280CynujJhuzMa0BI-4Q.roa (hash: MiNQpI1WP7M4DChXTEl99hg+v/DrVYZq8o6Yc8vjTOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: WKzDZCnxwMvMRcIQ5+1cZMIa8tO+lOJinzTA0rKhEF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:bb:66:ab:53:0d:25:c3:f9:39:3c:5d:41:d2:f1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Oct 24 01:00:39 2025 GMT
Not After : Oct 25 01:00:39 2025 GMT
Subject: CN=009f93e76cfedea21bc40adee7a59725a012e85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:36:13:82:67:16:ec:1b:3e:83:fd:54:f1:
16:44:29:d0:44:2e:a7:83:91:fb:db:12:0d:74:a6:
26:b5:d2:f6:c3:fb:43:72:b6:e3:ba:bd:19:48:04:
cb:7a:e0:f8:4f:c8:93:92:cf:14:b5:5c:8e:e9:12:
34:8c:59:48:43:5c:49:84:f9:f7:4c:a0:92:a2:d6:
bc:64:c4:16:43:90:4d:c2:81:8f:6b:05:89:2f:83:
c4:76:e6:ac:b7:1f:be:d2:b9:25:17:39:03:f8:88:
c1:31:21:d9:95:5c:81:55:22:4c:d5:66:14:7d:7b:
98:37:e7:8a:82:56:ec:1a:2d:bd:54:7c:2e:83:39:
a5:a1:9e:38:0a:48:55:f9:f4:ce:c0:a7:8e:d8:18:
1c:84:4d:1c:f7:2b:8c:d2:83:a1:0b:81:18:b6:70:
8a:34:84:83:61:0f:7d:7c:47:6b:a0:59:3e:5e:65:
d5:21:26:ff:c8:92:1a:c3:ec:2f:7a:41:65:f5:5f:
c1:bd:e4:07:b4:96:87:f8:a4:de:fa:03:67:de:bc:
cc:49:56:36:64:16:cb:6d:03:11:79:f6:c4:51:4f:
c8:48:e3:fa:98:a9:54:78:d7:b4:e1:04:58:ac:88:
02:b7:bc:13:46:81:ec:42:f4:0b:1c:77:cf:a1:e1:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:93:E7:6C:FE:DE:A2:1B:C4:0A:DE:E7:A5:97:25:A0:12:E8:5E
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d5:63:9a:1a:e9:44:96:f0:5c:76:fd:e1:1b:d0:fa:3c:31:
a1:4d:93:71:1d:20:06:41:8f:18:06:92:2c:ce:38:2b:d5:fd:
ac:3f:96:47:ba:d1:a3:09:6b:9f:40:1f:0f:19:d7:c7:71:cb:
d7:98:d0:ef:dd:94:65:71:0b:8f:81:88:ba:be:5b:6c:6f:eb:
3e:5d:f5:c5:10:15:14:d0:56:46:89:8f:8e:82:05:d4:9e:cf:
c8:8c:9f:30:71:ae:74:69:77:a1:70:e2:2c:40:3e:9a:9b:4f:
f2:cb:d9:78:e0:0a:89:65:21:81:8b:6d:21:27:a0:19:f5:9f:
56:f6:bb:5c:23:ef:8b:d5:8a:46:3b:1c:73:6b:f6:b5:b4:e7:
60:0e:26:1b:cd:ba:3e:56:c2:6b:a8:85:d4:ac:0f:4f:5c:7e:
cd:1d:66:8c:6f:d9:82:3d:e5:c4:5f:f2:df:ff:38:8f:dd:6b:
84:7a:a7:89:5d:99:e1:cc:35:9c:21:6b:43:07:b2:d2:54:39:
9e:39:18:bc:c8:56:63:68:b3:c0:2c:d1:ec:4b:ef:63:4b:25:
b4:4e:7d:69:43:15:0c:9d:cd:ad:65:3a:96:0e:a9:ea:44:83:
27:ce:e4:73:4c:df:1c:df:6b:1e:1d:83:df:5d:dd:24:cf:af:
fd:02:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:47:46 2025 by rpki-client