Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: kCLPxu6ftorjsm3Q7qsTh4ARt7n2fWocbppRWgHs1Qg=
Subject key identifier: 4E:D9:9D:2D:86:47:A0:AA:B1:15:AC:27:43:E1:FC:E4:88:CD:07:8C
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 019A7225D9B03B9DC3A8D12CC29398A6DAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 0773
Signing time: Tue 11 Nov 2025 09:01:14 +0000
Manifest this update: Tue 11 Nov 2025 09:01:14 +0000
Manifest next update: Wed 12 Nov 2025 09:01:14 +0000
Files and hashes: 1: G5Dr2RNwPGFwAwTeNB-9AS_pm0Q.roa (hash: 0MjYAJyBV4+bo72HSaSmqLthye1AQFWyhQOJxf+19uc=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: M3IZZLgt7hd8VWieIDUzstyNs3ak2ZtGPgHkqTrMioU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d9:b0:3b:9d:c3:a8:d1:2c:c2:93:98:a6:da:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Nov 11 09:01:14 2025 GMT
Not After : Nov 12 09:01:14 2025 GMT
Subject: CN=4ed99d2d8647a0aab115ac2743e1fce488cd078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:f1:6a:85:d9:9d:88:2a:4e:73:13:50:b7:
0b:0e:70:d5:1f:3b:6e:39:84:a7:75:46:85:d8:28:
77:6a:2f:e2:99:58:ec:e7:cf:79:5c:03:a4:e6:05:
05:bc:6f:29:17:c8:69:6a:17:e5:7c:6e:ff:84:6e:
ff:6c:17:5b:c0:be:36:87:09:d4:05:71:28:05:3d:
1a:90:c1:cc:b4:96:b1:fd:24:6e:22:ca:ba:51:6f:
82:b8:52:27:96:31:ad:f8:90:2c:8c:85:93:dc:e1:
02:55:4b:da:42:f6:e9:61:f5:0c:ba:20:a4:53:14:
62:63:7f:96:c6:f4:c3:31:aa:53:ef:44:54:d1:c6:
59:ee:f6:0c:13:af:8b:34:89:70:d3:00:e5:1b:42:
3b:36:e3:40:b6:ae:55:06:e9:4a:a2:9d:fd:b9:ab:
95:72:3a:40:6f:70:4f:11:a7:f6:b6:e1:ee:08:3d:
29:fa:a9:47:ee:7a:45:ff:d9:b2:a7:77:61:bb:fc:
ce:c1:2b:78:39:96:04:c9:75:45:8d:9d:21:96:c5:
e7:5a:60:0e:64:1c:9e:41:cd:ce:8f:ce:22:93:31:
5c:80:38:3a:dd:ef:e0:a9:1c:6e:69:48:3e:26:49:
ac:8f:2d:f7:76:94:5b:0e:20:3d:58:3f:4c:64:16:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:9D:2D:86:47:A0:AA:B1:15:AC:27:43:E1:FC:E4:88:CD:07:8C
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:35:c7:77:62:42:7b:fd:a8:3a:98:69:b5:45:cc:9a:b6:52:
6e:58:5c:c7:3a:04:ae:67:8b:7d:e4:23:c4:6b:78:36:65:a4:
6f:27:98:96:29:6e:b6:67:61:e9:37:b7:96:89:9b:6f:c8:59:
72:10:56:14:92:fa:6a:2f:c7:91:1b:4a:21:e2:21:45:ac:0d:
2b:09:d4:88:d6:34:e5:fd:fb:e9:22:10:b6:76:38:d6:b0:5a:
dd:19:01:38:84:c9:8b:cc:66:ba:d2:66:fa:fe:7f:6f:20:a7:
1e:05:4a:e6:61:36:16:e9:f7:ac:0c:4e:79:fb:a4:ec:06:f8:
02:84:f1:16:e5:2c:66:46:a2:47:e6:e6:a9:07:79:bc:97:fe:
26:8d:6b:ff:20:52:be:79:15:a9:ce:84:eb:a7:87:b1:69:3e:
94:98:ff:a0:66:9e:69:f9:00:e0:af:9d:b8:00:61:9f:33:c3:
30:af:b4:02:22:ed:cb:82:8d:47:65:a8:7d:9a:dc:13:ab:8d:
29:09:7c:89:29:a2:06:9a:13:97:5c:73:63:2b:e7:6d:eb:33:
4f:28:fa:00:45:09:c4:a3:c6:84:3c:4a:f9:fe:6c:ef:f5:0d:
ac:45:b5:09:f0:9f:ab:54:a1:f7:84:d4:31:5a:8a:54:ce:2a:
b8:6c:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:36 2025 by rpki-client