Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier: 2H4gpwgka427EXAkkFO5SUeav+4uidu9A8S1jaTx+5Q=
Subject key identifier: 2A:2C:B2:09:A6:44:EB:38:93:2D:AE:26:FA:5D:29:1F:9A:44:F6:81
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial: 019A71B7723589C45E72F8C1AC9186CDDAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number: 130C
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: +/xwCOuCGoUnAAX9Kx/5oSGYbMPkWZ7a1w9bdR6BAAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:72:35:89:c4:5e:72:f8:c1:ac:91:86:cd:da:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=2a2cb209a644eb38932dae26fa5d291f9a44f681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:24:91:cf:4b:89:d2:2e:92:36:ca:a3:e0:
3b:95:05:86:c5:f0:b9:2a:eb:f3:1a:2a:b9:84:24:
71:1c:1c:11:4b:9c:12:bf:06:42:d4:74:d9:1a:1c:
8b:1d:0c:65:64:b2:d5:64:b4:60:49:33:70:66:ee:
e3:8a:e1:31:50:18:9b:15:78:84:06:9c:9a:cd:20:
d4:7b:2d:6f:6a:82:ad:c7:4a:76:74:5c:c9:f7:5d:
fc:bd:6a:32:81:a3:0f:9f:4d:2d:15:9f:93:f4:9d:
c4:b7:0e:42:ec:10:2d:1a:20:1c:98:b2:09:73:d3:
3d:7d:ee:b1:76:6f:4d:50:fa:b8:bd:30:25:d2:a5:
87:54:b7:5e:c7:ab:b8:67:9a:19:cc:8f:a4:d2:04:
2a:b1:68:83:e1:2e:ec:e2:fd:6e:5d:80:85:a2:b8:
49:6f:d5:d6:68:06:7e:2e:d4:f7:af:e3:a8:1d:af:
7b:28:8e:f5:de:77:f0:d0:02:13:fe:53:90:98:bc:
81:52:6f:8b:d2:27:ce:34:8c:ac:86:0a:5e:74:ce:
ca:4f:f5:d8:e1:e4:dc:59:17:f8:48:62:c2:45:73:
4f:a2:7b:fd:ef:1f:fd:52:c4:38:8f:2b:eb:c6:81:
1d:05:90:c0:69:f4:c2:bb:05:e5:a2:19:03:6a:76:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2C:B2:09:A6:44:EB:38:93:2D:AE:26:FA:5D:29:1F:9A:44:F6:81
X509v3 Authority Key Identifier:
keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7e:10:b6:18:a2:7a:09:e0:1b:e7:7c:c9:a0:57:e4:ae:09:
cc:92:94:5c:2b:86:16:24:ff:b7:b3:37:ae:67:3b:68:5a:57:
58:fe:c1:9a:c8:c7:13:9d:56:a5:ba:d1:63:9b:a3:22:8e:7e:
79:c4:51:98:6f:24:f8:58:9e:bf:58:f3:db:2f:d6:7c:4e:d3:
88:37:43:a1:07:5d:c1:35:c6:b9:1a:6d:64:42:a2:91:2b:ef:
db:a6:a9:d6:f7:b9:b9:18:5b:13:1a:76:d5:09:fa:e9:6f:d2:
a1:b6:23:34:da:0d:75:09:92:a8:e9:47:81:15:13:33:54:05:
ca:f0:5e:1f:56:80:40:6c:b4:f8:b6:96:19:f8:ec:bf:0e:23:
b6:4d:47:12:a3:6d:b0:cb:c1:2b:8e:c9:5f:15:62:1d:44:ce:
1e:9d:fe:9d:ad:7c:0c:28:c4:36:19:d3:7d:07:04:59:53:64:
21:c4:f3:42:1c:ea:07:02:54:6d:f3:54:f5:3e:d9:2a:b4:08:
36:52:77:e1:65:84:34:c1:24:a4:b4:d6:9d:8f:37:29:92:d5:
01:2d:89:6d:e9:51:cb:12:e0:b0:5c:38:28:fc:35:0d:6e:2a:
75:03:54:27:4d:e8:66:de:89:3f:02:2c:a7:c9:f5:ce:66:8e:
f3:b4:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:42 2025 by rpki-client