Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: sJtRrMOz5I84+FFHgaeJGURl/C7DUrKmPV33W201zz0=
Subject key identifier: B5:8D:24:2D:9A:A5:8B:DF:9B:55:E0:32:AE:EA:FD:DB:58:71:97:37
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 019A73019E79BF7D42499B4637EF30A3C756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 13:01:17 +0000
Manifest this update: Tue 11 Nov 2025 13:01:17 +0000
Manifest next update: Wed 12 Nov 2025 13:01:17 +0000
Files and hashes: 1: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: Hlu4/VXS5IR6DmciWrPU0DewU9jghZXJwhArfLNO1jk=)
2: UXaxt-b39pINfZ1Y1ojLfS7SwMw.roa (hash: IC6xINcQpVjUgVum+7114aRM3S8XEivwvk3gYzMafvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:9e:79:bf:7d:42:49:9b:46:37:ef:30:a3:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Nov 11 13:01:17 2025 GMT
Not After : Nov 12 13:01:17 2025 GMT
Subject: CN=b58d242d9aa58bdf9b55e032aeeafddb58719737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:35:9a:8d:71:22:34:8c:44:46:64:c1:3f:
a1:03:d8:cf:60:b8:3c:f4:1d:59:c1:53:34:84:63:
27:a8:4a:0c:89:60:f7:db:af:6b:5a:a6:1b:1a:c5:
b9:d6:b6:9a:a3:7d:29:73:3d:b7:aa:62:c6:27:1b:
51:9c:8f:ae:5d:51:6e:35:f9:68:71:71:d5:30:70:
30:bf:c6:b9:b7:c5:3d:d9:36:0b:93:3a:3e:ef:dd:
a7:0a:2b:cc:f4:2e:aa:af:59:67:83:3b:e7:06:9f:
75:a6:34:34:f8:44:87:79:7c:b3:c5:6a:e3:d4:8b:
e6:42:7f:1e:c3:42:7d:5d:27:6c:f4:9c:1d:64:47:
12:38:f4:42:22:73:1a:fb:f2:6e:51:10:88:71:4c:
ca:7d:87:d0:72:42:cb:1a:3e:f5:0b:3c:c9:f5:23:
28:fd:98:1a:17:b9:c1:4d:d9:8f:9b:ae:e3:27:52:
f0:e0:31:96:51:c4:92:77:43:bb:34:95:10:4a:5f:
02:94:e5:c0:33:97:03:82:b1:4a:44:ec:e4:5a:ba:
59:9c:fa:ab:74:4d:c0:ed:c9:4f:69:4d:2d:af:d0:
e2:5d:9c:92:ec:65:df:3b:b7:d6:61:e0:fc:0a:d1:
d4:1a:0e:1d:b0:07:c1:64:f0:9a:52:c8:1d:5c:2a:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:24:2D:9A:A5:8B:DF:9B:55:E0:32:AE:EA:FD:DB:58:71:97:37
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9c:8e:d2:6b:eb:6d:bb:90:fb:49:3a:9a:8a:07:da:24:61:
21:c0:c1:fa:f1:23:9f:c8:39:0c:48:d0:41:9b:f9:6c:f1:b5:
11:40:72:04:fa:59:64:d7:09:98:53:10:d5:5e:d7:a1:05:a6:
d6:09:78:de:61:e1:c4:91:8e:a7:48:e7:f7:2c:f5:54:6b:8e:
89:9b:01:ad:8b:d4:0b:8d:7d:f0:9b:a6:2d:f6:94:66:e7:4e:
4f:8d:ab:e9:32:54:6e:06:62:cc:6c:bb:10:cc:de:4a:93:17:
74:27:57:3a:d2:88:8f:33:70:d8:fa:b8:c6:46:46:bf:7c:86:
02:87:d4:7d:c0:0a:5d:5b:c6:41:ab:10:43:fc:2a:2f:7b:41:
63:d5:fb:a3:a4:a5:46:27:eb:57:d3:c5:36:9b:95:53:ea:f8:
77:ec:ce:ec:d0:f6:3b:98:61:af:1e:27:e6:49:34:bd:b4:e1:
ea:79:f4:74:09:9f:88:74:ee:c1:d1:ce:41:87:77:56:6c:59:
21:87:3a:da:08:0b:e2:79:fa:65:b2:1f:8a:ff:09:fd:3b:cf:
84:f4:07:b4:07:ab:67:f1:41:b6:19:f8:c2:6d:28:32:72:7b:
aa:c2:66:ef:e4:2a:75:61:72:d3:52:44:cf:9f:ca:cc:0a:9f:
3b:ab:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:37 2025 by rpki-client