Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: 1SPS2HEipTVwP0MnsSwaorx3w4r8YGIhNrsQEZ8kY/M=
Subject key identifier: 2B:75:66:99:7B:3A:4E:C8:64:A2:B6:3A:90:A7:E8:DD:B9:5F:07:78
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 0198D5BBCE3A8FDC00DA1374C30040F3DE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 1080
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: viNMibsmTdnXwRgpZUp74YxecioXI5y+7JEx6RRJFUU=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ce:3a:8f:dc:00:da:13:74:c3:00:40:f3:de:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=2b7566997b3a4ec864a2b63a90a7e8ddb95f0778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e3:71:5f:be:a5:c9:9a:4d:9e:26:34:19:54:
8d:8a:58:71:2a:67:90:2f:a7:22:7e:e9:0f:68:56:
b5:d2:3a:c7:36:ac:7d:c4:ce:8f:43:ae:c9:b6:60:
30:69:3e:a7:8b:b7:01:d5:05:4e:29:57:51:e7:69:
05:a2:72:18:d8:63:bb:c7:27:cd:da:c8:16:c4:f7:
77:d5:50:24:f4:8f:1c:35:d1:dd:85:5b:83:31:fc:
d9:3c:28:bc:02:5b:44:73:ad:bc:64:52:98:30:a6:
e9:90:f8:18:c9:89:ee:94:13:1b:82:10:e2:58:13:
8a:62:a5:27:9f:ef:3b:e4:a3:09:ef:ad:a5:76:53:
a5:ec:da:f3:e0:9d:6b:0f:33:da:f0:bb:ca:93:6c:
76:f1:1b:7e:80:b6:b3:fe:60:38:d6:6f:ac:9f:35:
18:56:e0:16:86:f2:e4:d2:0f:77:60:48:9c:96:91:
f8:83:6c:29:56:5f:b4:2e:26:8f:32:18:39:8f:c6:
7f:9c:85:27:aa:3a:29:38:9e:c0:d0:3e:76:b1:a1:
ee:73:f2:38:54:b2:ad:11:16:a0:4b:88:56:46:f5:
fd:0c:ec:db:58:51:23:77:56:87:5c:c3:56:dd:b3:
eb:ee:60:e8:59:8c:ad:f1:20:4a:e1:02:bd:c2:1f:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:75:66:99:7B:3A:4E:C8:64:A2:B6:3A:90:A7:E8:DD:B9:5F:07:78
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0b:3d:0d:b1:14:5b:85:41:09:e6:bc:6a:03:ed:ad:3e:4b:
5f:a6:9d:c5:9f:df:bf:3d:5e:cc:15:bb:71:e1:16:b3:13:76:
18:bc:87:60:13:c0:71:c3:6f:c6:b3:90:b7:c4:d4:cf:d8:d2:
d9:a4:e5:1b:90:4f:a3:3e:ac:c9:f1:6e:70:26:09:13:ae:16:
dd:c7:9e:52:a0:4f:73:4c:a8:3d:91:32:49:08:ec:ea:ce:aa:
82:46:0a:58:b8:26:63:34:ba:85:34:08:94:e9:c2:2f:6c:7e:
4f:7c:31:a2:11:c9:d8:e1:f8:1c:04:3a:90:d6:4c:e7:10:57:
93:41:c8:43:fd:8b:b8:a5:bd:2d:42:35:07:57:cd:df:1a:9c:
ab:70:b6:e7:54:4e:34:c2:b6:9e:6a:37:0c:94:d5:70:e0:93:
df:a8:27:13:38:6e:24:02:9c:84:91:9d:9b:c6:16:04:62:62:
ac:1d:bf:e7:41:9a:cc:b0:16:a4:3c:12:12:7c:f8:9a:08:bf:
b6:98:df:35:1c:31:50:26:94:89:2d:8a:90:67:4d:71:55:59:
8b:e9:32:8d:51:65:6b:c9:f8:85:fb:da:8e:db:3f:4a:dc:6a:
2a:c7:d1:52:b5:4e:d0:3b:55:68:fe:4f:7b:74:a2:9a:6d:4f:
a6:15:73:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:33 2025 by rpki-client