Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: GFMn26husAGUxvXigYMNP8F+gWRhJsjKyEZbDKFlEGM=
Subject key identifier: 98:79:D7:CB:1E:7B:6B:DE:AA:99:0E:04:48:04:28:54:EB:5C:33:1B
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 0199FC219CC98F1F6DB4567C7182888F8D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 10B4
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: a7WymcSMmYMVjqc8RQOv3xwCsldAMA+iO3NSDFhbVUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9c:c9:8f:1f:6d:b4:56:7c:71:82:88:8f:8d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=9879d7cb1e7b6bdeaa990e0448042854eb5c331b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:6f:d9:70:40:9e:ee:04:5b:2b:b1:7b:72:
e5:19:14:bb:d1:c2:30:a8:56:9d:7e:6f:79:ce:19:
8e:dc:47:31:de:b1:e1:45:e8:5d:3b:d1:e7:28:99:
78:03:fe:ff:31:93:c4:7e:03:87:50:58:ad:af:ea:
80:05:c7:23:f5:bb:79:8f:ab:69:7f:7e:04:6c:6e:
f5:dc:2f:f9:68:3d:28:df:c9:05:bd:0f:64:00:eb:
96:27:89:9f:0f:5e:1f:9b:74:94:15:b4:9e:95:fa:
cc:d5:67:b1:6e:87:33:04:83:33:30:45:0a:05:78:
34:56:99:2d:dd:2d:a5:25:dd:f6:73:7c:19:57:bc:
5a:02:a0:47:38:3c:c2:f6:cf:1b:b6:22:2a:8a:8c:
e6:81:54:86:da:ae:2f:80:a5:d5:2a:f1:c9:89:4d:
6f:54:13:da:ad:1f:8d:b7:33:52:8e:15:d2:e4:b0:
8d:bd:38:05:36:7e:9a:df:7d:4b:18:a5:46:e9:f7:
3d:fd:6d:34:ed:94:d5:04:02:a1:fd:a1:d5:a2:76:
92:c8:2a:97:13:d3:fe:48:31:85:83:85:8b:74:9e:
d7:91:6e:c0:09:75:01:6a:aa:aa:74:a8:61:85:cb:
25:7a:d5:8c:b1:03:d0:ad:87:24:11:e9:3f:60:73:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:79:D7:CB:1E:7B:6B:DE:AA:99:0E:04:48:04:28:54:EB:5C:33:1B
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7b:32:b5:80:68:ed:3e:9b:8f:b2:c3:aa:15:70:2c:cb:5a:
87:45:44:fe:e2:e6:52:92:03:6d:15:71:7e:7c:31:c8:52:de:
d7:c4:65:cf:56:94:db:be:36:f4:21:87:99:e6:84:ae:06:24:
26:37:23:0b:67:5f:6f:3f:03:55:d3:59:42:07:24:ef:89:2c:
da:1e:5e:cd:4c:c4:2a:63:7c:22:6a:3e:50:b7:8e:50:85:a0:
65:c9:39:4b:5c:2d:31:f5:c6:6b:d5:a3:f4:e1:52:b3:dc:12:
47:00:1f:f4:15:c3:20:0d:b1:f8:79:eb:10:8d:1a:78:e0:c0:
c3:78:81:ad:49:89:88:f0:ab:61:19:54:66:23:f7:35:73:d4:
2d:49:0e:a3:b8:d6:a6:31:ca:2e:89:e7:92:f5:b1:4a:ef:19:
46:f4:e2:d9:ad:25:70:d9:8b:23:c6:4b:a5:91:49:35:34:36:
04:9e:9b:1e:dd:53:bd:c0:8b:4c:37:4c:84:7c:0d:80:99:2c:
78:21:53:e6:25:1b:df:91:62:66:cd:33:aa:ed:ce:f0:4e:85:
1b:f9:e2:cf:5c:3a:e2:e1:dd:00:4d:9a:7e:fe:58:4c:08:31:
e2:4f:c0:c3:1a:f6:09:19:55:b1:d4:1f:cb:cd:18:04:68:68:
05:fb:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:45 2025 by rpki-client