Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: oYybWACYQKYdFawUEt1hlureTwpJzTkFaI2EvGJzfsk=
Subject key identifier: D3:1B:D9:B4:2F:3D:69:8C:DE:14:82:4D:68:05:B5:19:65:41:93:2B
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 0199FB46355439794A74C037BCF1077A164D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 1118
Signing time: Sun 19 Oct 2025 07:01:46 +0000
Manifest this update: Sun 19 Oct 2025 07:01:46 +0000
Manifest next update: Mon 20 Oct 2025 07:01:46 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: UgnbeTCiBIeJ1QNoObW46AK6m+5KeTJOCSIWd4xlFU4=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:35:54:39:79:4a:74:c0:37:bc:f1:07:7a:16:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Oct 19 07:01:46 2025 GMT
Not After : Oct 20 07:01:46 2025 GMT
Subject: CN=d31bd9b42f3d698cde14824d6805b5196541932b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:20:6b:db:50:b8:1e:f8:91:7d:91:74:d1:
69:d6:d4:58:8b:19:22:2f:00:09:30:28:37:91:27:
e9:9a:ab:c7:00:b8:0b:89:ff:69:24:cf:f4:c7:5d:
e0:e7:e9:49:64:37:c4:fa:18:62:c9:bb:29:93:f3:
b8:77:2f:6d:2f:c8:90:db:dc:8e:b6:e9:56:de:91:
d8:15:a6:c1:9c:ec:1d:9d:48:22:c9:a7:6d:73:30:
fa:1b:71:c5:80:56:9c:2b:7e:11:4d:35:04:c2:03:
89:4b:b2:49:b3:d2:b6:38:72:06:e0:ba:3b:75:5a:
05:cd:7a:d1:14:d4:2c:c2:27:47:cc:14:54:64:96:
80:0d:7a:b9:6d:f4:4d:20:4a:cc:0f:68:93:c3:ad:
4f:b3:ba:86:c4:f3:6e:07:0e:9b:ce:d6:a2:5f:9a:
ec:43:fc:47:3d:36:53:ca:d8:f8:57:f3:4a:72:8d:
53:47:cf:31:61:cd:ab:92:b7:b5:00:c4:7a:ce:64:
c2:c5:78:31:46:f6:08:27:fb:19:b3:df:bf:35:68:
a9:99:6a:ab:87:3e:ba:6a:3a:7c:a6:1a:d8:24:82:
f7:f2:7c:c5:4d:67:43:ca:58:a1:fb:a9:d2:5c:f6:
4d:b7:00:84:17:90:83:4a:45:7d:e2:5d:5f:1f:21:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1B:D9:B4:2F:3D:69:8C:DE:14:82:4D:68:05:B5:19:65:41:93:2B
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e6:d1:cd:e4:1c:2d:0f:8c:ac:ef:1b:1b:91:57:84:68:0c:
26:01:49:a4:48:1b:2c:4f:12:42:60:95:c4:ea:ff:ff:c4:3d:
8f:38:87:7a:69:ea:77:dc:22:c4:41:9a:b9:da:d7:22:31:43:
1b:f8:e1:43:99:ec:9f:e0:a9:1c:ce:9d:63:80:78:d1:8b:5b:
dc:f4:65:c5:f3:e7:81:23:d6:80:8d:e1:ae:2f:a3:81:0d:cc:
d5:8f:7c:64:3b:34:21:d6:38:29:26:80:1e:9d:a7:5c:24:f5:
40:13:57:f6:0b:10:a8:45:0d:d8:51:26:ba:bf:01:13:a7:35:
0e:39:a2:34:e7:a0:9c:2a:e6:4f:11:4b:bb:7b:10:4f:b4:78:
fc:52:3d:a5:07:4b:27:2a:cf:1d:c5:62:21:8b:b5:f4:ec:ef:
e8:8d:c6:6f:16:1b:b7:1e:de:7c:78:68:c2:27:55:51:3f:11:
29:cd:26:a9:e7:b0:14:92:ff:02:b9:bb:f7:3e:20:e0:46:e4:
53:cb:cd:4d:23:8a:55:00:5e:14:ee:86:1f:ed:9d:49:78:c0:
0b:54:62:84:08:53:aa:79:c1:1e:ee:01:1b:ad:72:45:89:a7:
c4:7d:7d:3e:4a:b5:fe:83:74:4a:cf:bd:a4:52:70:af:3b:3a:
4e:46:67:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RjVUOXlKdMA3vPEHehZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2
YThkMmUwHhcNMjUxMDE5MDcwMTQ2WhcNMjUxMDIwMDcwMTQ2WjAzMTEwLwYDVQQD
EyhkMzFiZDliNDJmM2Q2OThjZGUxNDgyNGQ2ODA1YjUxOTY1NDE5MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVIga9tQuB74kX2RdNFp1tRYixki
LwAJMCg3kSfpmqvHALgLif9pJM/0x13g5+lJZDfE+hhiybspk/O4dy9tL8iQ29yO
tulW3pHYFabBnOwdnUgiyadtczD6G3HFgFacK34RTTUEwgOJS7JJs9K2OHIG4Lo7
dVoFzXrRFNQswidHzBRUZJaADXq5bfRNIErMD2iTw61Ps7qGxPNuBw6bztaiX5rs
Q/xHPTZTytj4V/NKco1TR88xYc2rkre1AMR6zmTCxXgxRvYIJ/sZs9+/NWipmWqr
hz66ajp8phrYJIL38nzFTWdDylih+6nSXPZNtwCEF5CDSkV94l1fHyHAOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMb2bQvPWmM3hSCTWgFtRllQZMrMB8GA1UdIwQY
MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt
OTMzN2YzNzQxNjhlLzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl
LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADubRzeQc
LQ+MrO8bG5FXhGgMJgFJpEgbLE8SQmCVxOr//8Q9jziHemnqd9wixEGaudrXIjFD
G/jhQ5nsn+CpHM6dY4B40Ytb3PRlxfPngSPWgI3hri+jgQ3M1Y98ZDs0IdY4KSaA
Hp2nXCT1QBNX9gsQqEUN2FEmur8BE6c1DjmiNOegnCrmTxFLu3sQT7R4/FI9pQdL
JyrPHcViIYu19Ozv6I3GbxYbtx7efHhowidVUT8RKc0mqeewFJL/Arm79z4g4Ebk
U8vNTSOKVQBeFO6GH+2dSXjAC1RihAhTqnnBHu4BG61yRYmnxH19Pkq1/oN0Ss+9
pFJwrzs6TkZnGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:08 2025 by rpki-client