Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
File: p75X8mosEHsadWuDFxXr0HqH-5M.mft (raw, json)
Hash identifier: 5nei3pxK4v4NYKmt4Vq+njX4Z7k5C9U8oOgNA5ZvKkM=
Subject key identifier: 90:20:21:EA:B0:6E:50:07:58:A2:01:8A:1E:0D:34:A0:66:59:68:B7
Authority key identifier: A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93
Certificate issuer: /CN=a7be57f26a2c107b1a756b831715ebd07a87fb93
Certificate serial: 0199FAD854560F36FAA03F46E29276D457DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
Manifest number: 66
Signing time: Sun 19 Oct 2025 05:01:45 +0000
Manifest this update: Sun 19 Oct 2025 05:01:45 +0000
Manifest next update: Mon 20 Oct 2025 05:01:45 +0000
Files and hashes: 1: JiAa07vPm_-Pb33la8lIiEVcVsk.roa (hash: LTCDMolpBsWj5ww+QHR47bnfnmdoJo1c8oI26KgxQVA=)
2: p75X8mosEHsadWuDFxXr0HqH-5M.crl (hash: 2Hgsaq34uei3aLCUWbJhI9IKgzPVbzMRMOhIs4+FuEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:54:56:0f:36:fa:a0:3f:46:e2:92:76:d4:57:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7be57f26a2c107b1a756b831715ebd07a87fb93
Validity
Not Before: Oct 19 05:01:45 2025 GMT
Not After : Oct 20 05:01:45 2025 GMT
Subject: CN=902021eab06e500758a2018a1e0d34a0665968b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:0e:6a:f2:4d:dc:b6:a9:a9:8b:9d:2f:84:
8a:88:1d:d0:5e:ac:fa:31:4a:76:5f:55:6f:26:08:
92:2d:c0:76:3a:82:ec:00:4c:01:73:fc:d8:82:2d:
62:d0:10:9e:6b:02:43:d4:52:c3:03:4b:aa:ab:cf:
e8:4d:20:f1:51:4e:92:cd:33:e5:b5:49:07:da:01:
c9:78:82:75:26:54:8a:3a:d0:67:99:a7:4e:49:2e:
52:70:bc:f2:cb:64:c0:81:56:ac:1b:bb:bc:83:28:
27:70:39:af:38:6f:65:08:40:3e:87:f6:99:8e:8e:
51:47:51:2e:52:3e:a6:53:fd:22:de:92:e5:19:8c:
ba:83:a9:2a:1b:02:78:bf:81:c8:d6:00:01:df:f8:
8f:61:f5:3d:79:4e:a2:9c:3b:d2:76:95:a7:2f:84:
2c:3a:4d:40:0c:78:33:2f:bf:f9:f3:95:ae:cc:aa:
e1:47:ab:ec:a1:d0:46:d2:11:86:2d:cd:ed:45:9f:
53:e5:c8:63:b5:53:f7:b5:1e:ff:12:f6:8c:9b:ea:
5d:cf:19:d7:04:d3:45:cd:b6:de:82:80:9a:04:6b:
73:28:c6:21:c3:7b:02:1e:27:40:79:2a:d6:7b:ed:
77:9f:b5:e2:86:97:dd:5f:5a:9a:31:5b:86:55:6d:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:20:21:EA:B0:6E:50:07:58:A2:01:8A:1E:0D:34:A0:66:59:68:B7
X509v3 Authority Key Identifier:
keyid:A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:28:28:77:a9:8a:c5:c3:2f:4c:44:4c:0b:12:0b:79:4f:18:
2c:0f:80:d8:7a:0c:c6:4e:6c:d2:29:76:f0:42:19:00:a8:b9:
49:3f:76:ca:83:59:97:04:41:21:7f:55:dd:aa:f7:7f:b6:94:
4f:7e:c1:f6:2f:74:5c:c8:82:64:42:14:4f:2a:1f:f9:58:dd:
62:b0:0c:08:da:3e:e7:77:4b:33:60:0d:50:77:2f:26:81:0a:
71:50:55:cd:5c:01:88:93:29:4f:22:1f:d7:56:17:2b:15:0c:
ba:2f:f0:2d:6c:04:3d:25:bc:17:1c:fe:b8:cb:d6:e6:41:30:
68:26:66:17:68:d3:38:d9:a8:c8:47:1c:52:2b:0b:fc:fc:f2:
eb:f3:03:a2:e9:3e:19:57:f5:7e:a7:ee:59:7a:27:08:28:85:
52:5f:6d:f5:16:67:95:db:a6:52:b2:e2:f1:ef:30:84:3b:71:
29:d7:35:db:40:77:7d:35:f1:87:a2:f5:af:cd:27:ef:e0:95:
6c:7a:88:06:24:9f:83:29:30:95:f5:d8:7e:97:f1:a5:37:4d:
cd:37:9e:b5:17:bb:d5:9b:f0:5b:55:c3:72:a0:d3:28:c9:dc:
bf:a8:0c:7f:e3:9a:f8:c8:79:b0:75:04:ae:8f:38:09:33:f3:
b4:6e:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:11 2025 by rpki-client