Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: h5YuZiLagjG7P3e5K8vOu4AgKwxAlZDbsBvrLXm+tMY=
Subject key identifier: 8F:80:45:EC:10:F9:2B:1D:79:BA:8C:61:E3:41:69:F4:11:5B:B4:E9
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 019A71B89CF63C4C060E1713395BFC85C39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: PDf7lrEsFFe/Z1vNfpcawAftTw6ym/s20uXNgjPUGuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9c:f6:3c:4c:06:0e:17:13:39:5b:fc:85:c3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=8f8045ec10f92b1d79ba8c61e34169f4115bb4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:32:16:4c:67:0c:8a:86:76:79:f2:66:e4:
b0:db:8c:ae:9e:c7:08:07:93:16:e0:56:7f:ba:9d:
e5:2c:0c:02:a4:69:09:4d:d2:73:e2:d5:eb:0d:ef:
a8:f3:42:f0:32:c5:20:c9:20:c0:98:70:52:6a:29:
1d:e3:13:a0:f8:3a:20:38:a6:f8:4e:2e:34:0d:37:
e2:d7:21:ef:70:14:2e:b8:f4:8a:81:b2:1f:fd:4b:
bf:ae:d0:52:1b:f5:c0:55:d9:9e:0d:a3:d3:15:86:
5a:8e:63:2c:f8:f8:78:da:9d:2a:e6:f0:17:10:17:
08:61:1c:22:a8:4b:33:26:c9:38:11:2e:10:c6:66:
d8:f9:79:79:e2:b2:02:15:74:09:fc:cd:15:41:e8:
37:82:47:8f:24:16:83:41:a5:ac:4b:66:1c:26:0b:
8f:f1:0e:82:db:a1:8f:2c:16:c9:a5:f2:e2:61:d3:
c3:b4:b3:1b:27:3a:4e:1d:44:db:c4:56:57:09:c8:
6c:77:f4:4c:e4:dc:40:a1:43:39:5a:49:18:61:c3:
7f:bf:6f:5d:08:a7:ff:44:4f:db:87:4b:92:31:24:
ea:98:62:8a:79:67:32:0e:0d:7d:00:51:bf:37:d4:
88:58:fa:17:ba:e4:e9:5f:60:16:ec:17:80:bb:d7:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:80:45:EC:10:F9:2B:1D:79:BA:8C:61:E3:41:69:F4:11:5B:B4:E9
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c4:8e:2f:f0:19:bb:c1:b3:7c:8c:74:c1:87:89:69:e3:dc:
ac:57:3e:17:e2:a9:31:e6:88:9d:61:33:dc:f0:56:7b:cb:7a:
a2:a6:79:05:2b:08:07:60:89:0b:e0:e5:34:f3:43:b5:c2:aa:
0a:a1:ee:9d:c5:c7:9c:43:18:48:ec:9d:42:aa:de:72:bf:dd:
c1:c9:4f:d6:46:bf:3e:71:98:27:e1:44:d5:50:44:a2:8b:32:
5c:e9:ca:cf:73:25:de:f2:49:1c:54:99:e8:b1:89:b4:fa:c4:
92:1c:ce:a4:55:e4:05:42:88:d1:d0:c2:d7:2d:e1:4a:78:d9:
4d:8b:27:dd:8a:48:c1:f6:8a:39:dc:6c:eb:a9:b4:46:c6:bf:
06:06:69:26:7c:b2:f6:11:ae:a9:be:1f:e2:b9:4c:60:65:a1:
41:60:e2:9a:e7:76:a8:68:c8:20:0c:16:a3:65:51:67:86:5d:
f6:3e:ee:1d:b1:03:1f:61:10:0b:cd:52:5a:91:1d:33:ef:4b:
2c:9c:68:a2:82:20:5a:21:dc:c4:e7:c5:41:ca:ff:25:a8:83:
29:31:bf:2b:55:f6:a3:22:41:e7:05:58:30:7e:3a:41:55:ef:
16:67:51:25:03:77:b0:93:18:f0:12:34:6d:fb:f9:58:7b:08:
a2:6f:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:42 2025 by rpki-client