Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: c6etLFJ/o47rMgkECht+yUY7sLXTkYOG0TRE3GfGhWc=
Subject key identifier: 97:A1:5D:82:F8:02:5B:E4:9D:4A:83:17:61:77:3D:AC:AB:3D:55:9B
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 0199180964CC64ACD0955D73278377195505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 0EB5
Signing time: Fri 05 Sep 2025 04:01:32 +0000
Manifest this update: Fri 05 Sep 2025 04:01:32 +0000
Manifest next update: Sat 06 Sep 2025 04:01:32 +0000
Files and hashes: 1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=)
2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: ydVHFAblGPRYoYaBIRGWBuyU3MuYeAUez6M+4/mwi1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:64:cc:64:ac:d0:95:5d:73:27:83:77:19:55:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Sep 5 04:01:32 2025 GMT
Not After : Sep 6 04:01:32 2025 GMT
Subject: CN=97a15d82f8025be49d4a831761773dacab3d559b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:b6:0b:ed:44:28:d4:f3:5f:39:a2:4f:e1:
ce:b2:10:d3:54:be:f8:a4:74:3f:d4:a1:2d:ba:a4:
2a:51:08:19:38:5c:af:bf:05:7a:be:de:32:51:46:
b3:a1:d6:38:3e:8c:93:7c:a0:31:e1:f2:d5:11:d3:
7f:eb:09:69:f0:3c:ac:e0:fe:9f:40:37:0d:b4:03:
e8:ad:42:3e:1e:3e:9f:42:76:4a:17:be:d6:b7:23:
f3:45:c3:86:b0:5e:3c:48:c5:d8:40:ac:c3:e8:a0:
0a:02:54:c1:e2:8c:35:25:b9:87:6b:02:78:27:66:
b6:9f:5e:a5:ad:e5:01:d0:3d:a4:6a:70:37:ee:5c:
6b:09:8d:f5:38:39:e5:4b:35:8b:8f:e1:60:7d:57:
1f:0f:73:e3:bc:84:99:7e:bd:5a:19:f4:6f:e2:da:
20:02:4a:b0:ab:f9:6b:4d:de:8c:bc:7c:a8:f4:fa:
e3:d9:08:30:b3:0e:b8:0b:53:67:f5:00:a5:dc:48:
6f:80:a9:4c:91:10:97:c5:b0:fc:b3:c8:1a:6a:6b:
12:15:e8:69:fb:e0:13:4e:fe:28:3e:45:6b:02:67:
46:c7:fb:e1:56:21:f4:c6:6a:85:93:70:62:7b:41:
02:35:8d:11:80:cc:5b:7a:3b:80:b8:b2:27:97:eb:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A1:5D:82:F8:02:5B:E4:9D:4A:83:17:61:77:3D:AC:AB:3D:55:9B
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2c:21:4a:cd:65:d4:51:e1:15:b6:e9:06:80:15:ca:fa:62:
19:c8:b0:e9:00:77:af:dd:6c:e0:c5:e0:3e:70:e5:02:ea:0a:
67:47:62:46:9d:d9:01:42:de:77:f3:21:44:b5:b2:88:22:dc:
0b:fa:6d:ea:c2:a3:bc:ab:49:a0:58:56:c0:45:da:72:64:b4:
1c:80:20:4a:4b:a0:b3:6d:6e:3b:f3:33:85:dd:b6:31:6b:db:
72:9a:0b:8a:0b:7e:11:29:c5:07:82:ce:b8:3b:b2:9c:43:e5:
14:be:e9:c6:72:92:36:09:f0:3f:cc:49:d7:e8:76:68:8d:d1:
d4:fa:6a:03:b0:c6:75:09:a6:67:52:99:6a:30:12:14:49:6e:
b4:a7:2b:57:81:9c:67:e8:d7:0c:16:ca:8a:80:8d:da:bc:90:
10:0a:b8:12:30:c2:7b:69:b6:7e:22:a2:ef:55:be:10:32:0b:
9a:a4:11:00:7c:f0:e6:31:76:6f:00:ad:a5:ee:a1:c4:ab:17:
ca:b3:99:59:1c:32:de:9b:2d:aa:c5:bd:7c:ae:06:bb:7e:b4:
c7:4e:08:04:e7:c6:9c:4a:72:db:a3:27:16:a2:6f:45:34:b4:
53:87:75:fc:5d:50:a8:18:27:c7:b6:7d:c3:e8:e7:7c:55:26:
85:10:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:24:49 2025 by rpki-client