Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
File: p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft (raw, json)
Hash identifier: Paud6eT1rVgg6b9Y/FKSlOxJO315Z+tCT1tzpBEWP0Q=
Subject key identifier: 02:5E:3E:AD:7B:F5:6F:6C:AE:93:CF:FA:23:F8:94:24:F0:4C:E2:1E
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Certificate issuer: /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial: 019A71B7E50578413A3584D8E989A7AB2134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:08 +0000
Manifest this update: Tue 11 Nov 2025 07:01:08 +0000
Manifest next update: Wed 12 Nov 2025 07:01:08 +0000
Files and hashes: 1: 1-iNy3jh1NFZXcxAiKeiVx48NW6M.roa (hash: exM+KStZhJxdlJqEmPR+3n9NcBPaEAtgOuwOgKWeJq0=)
2: p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl (hash: LHDqK3iTo9kgSEnr6AAK7i4Z9SucXBYnURZH3z4dskQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e5:05:78:41:3a:35:84:d8:e9:89:a7:ab:21:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Validity
Not Before: Nov 11 07:01:08 2025 GMT
Not After : Nov 12 07:01:08 2025 GMT
Subject: CN=025e3ead7bf56f6cae93cffa23f89424f04ce21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:a4:1e:79:28:8d:ce:33:7f:1f:32:f0:08:
54:cf:b9:9d:97:64:5b:b7:81:c6:b8:d5:89:f7:06:
98:1c:5f:b5:4b:0d:11:9e:63:97:63:0f:0c:e2:ae:
db:71:68:f7:c7:5e:1f:5f:b6:5f:22:4b:68:36:9f:
af:47:b0:d9:15:e8:06:f6:ac:bf:2c:6a:08:a7:04:
25:2c:19:ff:eb:04:42:fe:4b:11:b3:8a:c1:da:78:
52:24:da:f8:39:ef:9e:b2:22:76:91:7a:84:1e:3b:
d9:ab:e2:c7:7f:aa:1d:45:7d:40:f1:14:7e:e0:78:
43:a2:86:37:01:b3:f3:85:73:00:ad:65:9a:c0:2b:
67:bc:33:39:ad:b6:cb:f3:dd:fd:6b:d8:bf:be:39:
70:2e:78:6d:34:6a:cb:27:ba:0a:c0:e6:b0:ae:18:
43:d3:63:34:95:68:cd:ca:c8:6b:28:64:7a:3e:0d:
b9:db:f7:13:92:04:7a:56:12:01:37:df:8a:18:f5:
4c:8d:ef:2b:db:df:04:ee:5d:a4:90:1d:10:00:6c:
b2:42:e1:25:7e:79:e8:d5:53:73:ab:11:62:8a:d4:
66:94:a5:b3:d4:e0:a8:b9:c5:e9:34:7a:57:2f:6f:
f6:ad:06:09:ec:bd:99:43:ee:d8:fe:01:c0:88:2e:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5E:3E:AD:7B:F5:6F:6C:AE:93:CF:FA:23:F8:94:24:F0:4C:E2:1E
X509v3 Authority Key Identifier:
keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:13:55:fc:d3:47:d5:9b:73:59:26:98:8d:28:e0:bc:58:e7:
e8:ea:65:fb:b0:61:05:54:fb:2a:88:81:c3:bf:16:4a:ae:1f:
8f:0d:10:55:7d:3b:e4:11:f6:76:ac:b9:c3:0e:35:99:76:aa:
c5:14:c2:7a:b6:89:ae:f8:e6:94:cb:f1:9a:bb:56:15:a1:35:
a8:49:60:fe:83:25:38:0d:e9:60:f1:53:87:30:d9:c2:35:fa:
e8:70:4f:c9:2b:dd:46:5f:16:a5:af:14:8c:0c:e1:81:cf:93:
c6:2c:b0:74:c9:fe:54:56:2f:10:16:fb:6b:5a:e7:f0:83:ae:
73:0a:96:52:7b:44:c1:41:16:29:c3:b7:ca:15:1d:35:89:0c:
88:5a:d1:6a:36:e0:6c:9b:85:3f:91:d7:b7:9b:30:0d:bd:35:
d0:c1:a8:32:e6:5d:fb:c3:e5:9f:55:5e:fb:1c:71:3d:f7:78:
6e:b1:87:98:04:df:47:88:27:1e:e9:39:5c:02:c3:90:61:f9:
a8:5d:c3:36:ed:99:da:56:b8:c6:45:04:5f:34:94:c7:92:d5:
e0:02:1a:72:33:e6:b6:88:9e:79:f0:45:eb:dd:7d:5c:c3:c7:
66:64:f1:53:45:07:87:02:15:35:c8:9f:88:08:55:cd:a4:cc:
d8:d5:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:08 2025 by rpki-client