Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: 4idrGNNEMsmZrFlMngB8VLAjkGAv4PiwKCvL/v+rA8A=
Subject key identifier: 3A:E1:07:46:6D:0E:4B:B9:DE:52:FF:13:C4:9E:99:DB:64:13:A0:D4
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 019922FAE9A551CFBC1AC25E0C9F6B64AA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 07:01:33 +0000
Manifest this update: Sun 07 Sep 2025 07:01:33 +0000
Manifest next update: Mon 08 Sep 2025 07:01:33 +0000
Files and hashes: 1: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: gIzvgmFnngcdJhxugmdFx5ky3P0pKnvAd6azWZeVo0Y=)
2: UXaxt-b39pINfZ1Y1ojLfS7SwMw.roa (hash: IC6xINcQpVjUgVum+7114aRM3S8XEivwvk3gYzMafvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e9:a5:51:cf:bc:1a:c2:5e:0c:9f:6b:64:aa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Sep 7 07:01:33 2025 GMT
Not After : Sep 8 07:01:33 2025 GMT
Subject: CN=3ae107466d0e4bb9de52ff13c49e99db6413a0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:af:54:d8:8a:00:0b:02:54:f7:a1:e3:90:
ea:04:12:16:96:cb:58:4a:23:5b:6f:17:79:c3:cb:
3b:50:23:6b:01:6f:99:68:ae:84:34:ef:e0:f5:ce:
b5:cd:ee:a0:33:af:e4:13:3f:fb:40:68:fd:9e:1c:
9a:f4:90:fe:f0:6f:7b:69:09:d3:37:56:0a:10:9f:
18:b1:bf:72:2a:77:2e:8e:b9:18:f3:41:7a:46:a8:
e3:0f:6b:53:d8:7f:45:9d:df:d6:8e:fd:aa:54:b0:
74:28:c2:36:86:61:dc:bb:ef:81:9c:e2:72:6c:eb:
22:5e:2f:f7:08:de:cf:a5:10:10:4c:63:f9:91:ad:
2f:3c:e4:58:e9:ac:96:a9:ff:f8:aa:b1:d1:0c:a1:
95:74:d6:0c:f2:d3:ed:d9:2f:ff:d7:a4:66:e2:87:
e3:e7:7b:0e:c7:45:49:7b:68:2d:70:67:91:ba:69:
4a:23:bb:51:09:c3:49:cf:dc:f1:db:76:c2:52:03:
68:90:a5:86:d5:8e:1f:50:a1:42:7d:41:4f:98:c5:
78:f2:e8:c2:52:f8:64:c5:6c:71:88:26:ee:c2:dc:
08:f1:d6:9b:e7:d1:a7:3b:4d:94:8d:1e:f3:fe:d8:
d1:6b:0e:ac:70:e0:cb:c4:2d:26:29:0d:c2:37:3e:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E1:07:46:6D:0E:4B:B9:DE:52:FF:13:C4:9E:99:DB:64:13:A0:D4
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2c:23:5c:89:08:e9:f1:63:94:97:7f:e2:24:dd:f2:32:cd:
1b:84:98:66:de:03:e2:b7:1c:00:a1:a6:94:5e:f9:34:81:0c:
cf:0e:ff:45:b8:9c:98:8c:e5:50:ea:d8:04:f4:c1:9b:8d:ad:
b7:a3:06:78:98:03:d7:3c:ea:5d:fc:4d:8d:bd:c4:bc:4f:b0:
a6:50:13:83:4a:ad:22:df:c1:9e:a7:a8:14:b2:39:dc:32:68:
c5:9c:3e:aa:c4:9c:46:c8:d4:9a:9d:3e:62:d8:77:58:f9:92:
64:ce:a4:96:56:b3:47:70:42:56:76:c3:62:0c:74:a4:1f:60:
66:af:c8:2e:c8:10:d9:6d:56:d2:66:69:08:f0:dd:75:55:e6:
69:65:0b:02:db:b3:0c:24:b6:88:48:68:5e:f3:05:83:06:02:
e9:8d:b1:d3:e0:87:1d:ad:74:94:27:71:9e:6a:da:20:18:57:
db:80:ec:a8:ff:fe:f7:cc:9f:95:58:89:fd:87:ef:35:3e:56:
44:f4:83:2a:0c:fe:a9:10:24:59:f9:b4:51:b9:d8:ec:74:fa:
16:cd:39:e6:f7:55:cf:9b:b7:02:b0:ef:d1:3c:1d:2d:8a:5e:
18:28:a0:82:72:a1:67:d1:fe:c8:75:3d:d7:bf:d5:5a:bf:6e:
00:d9:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:16 2025 by rpki-client