Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier: 9eaPRtwb8BQ+6a59vSPZ+a2Wr9z9ggDb4qRu7QXMfxo=
Subject key identifier: 97:60:CA:03:95:A1:17:C5:BF:17:BC:3C:B3:79:86:09:1B:79:77:41
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 0199FC58BD7E380F5222B34C802C3C972613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: n1wGi+ZakiLiUvjxGZzrLvrZBM61WjeKLDkkCNauyKA=)
2: T32ivR4pPT16GdJvEk3qcae9a-0.roa (hash: Ar4IuLNK/JbYrWnO/0jZmTGQAGYJO2SXqHxbBEnLR+A=)
3: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (hash: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:bd:7e:38:0f:52:22:b3:4c:80:2c:3c:97:26:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=9760ca0395a117c5bf17bc3cb37986091b797741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:d7:7e:62:a5:ea:7a:90:92:59:67:cc:0f:
7e:9b:12:a7:3f:4d:ce:49:79:88:0c:d5:2b:23:5a:
98:5a:35:23:52:8c:55:5f:d6:55:67:bc:a4:d1:1b:
e4:f1:b4:f2:2e:a1:97:eb:d9:9b:f5:b6:c4:a0:57:
1a:47:ed:ee:57:62:84:0b:01:f8:64:0f:9f:20:4a:
19:11:92:db:ff:0b:2c:fd:f9:76:c4:f4:3b:c6:5d:
c8:2b:1b:4e:33:d5:98:f8:e4:91:6e:a6:a8:55:96:
70:1e:6a:1e:ac:93:99:c5:7c:6d:69:c0:94:b5:c4:
51:fe:f3:62:09:b2:45:fb:58:a6:1a:b0:05:5e:c3:
00:46:bd:57:80:b3:11:c6:53:9a:8e:2e:97:a0:de:
0a:2f:9a:49:ca:86:4e:33:65:9b:51:85:83:bd:8a:
b5:3d:cf:5d:ac:b9:e2:01:44:29:d5:f4:6d:be:35:
ee:47:60:09:11:dc:ab:69:5f:8a:5f:71:79:7a:1b:
bc:a2:ad:1a:d7:de:30:2f:bb:fa:f9:ed:e0:86:38:
52:05:6e:c2:67:75:39:63:77:62:fb:6c:8f:76:cb:
fc:eb:32:8c:4d:9a:00:31:a9:4e:d4:f6:bf:de:41:
59:56:8a:74:4f:a5:fd:b2:72:ad:2d:51:00:4b:cd:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:60:CA:03:95:A1:17:C5:BF:17:BC:3C:B3:79:86:09:1B:79:77:41
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:40:a9:c9:43:71:4f:88:76:53:ce:18:29:fa:7d:16:e9:9f:
98:63:f3:9c:f1:14:6c:cc:53:ed:68:5e:05:6f:a9:28:87:39:
18:15:cb:b3:a0:8d:de:40:30:b9:2e:4c:7c:29:dd:9f:11:bf:
c9:19:07:e0:12:6c:41:0e:57:61:40:c5:89:66:f2:d9:20:c5:
25:1f:4f:db:9f:14:8e:dd:cb:4c:62:7c:a7:e9:89:fb:07:60:
c7:0f:81:75:c1:ba:8b:01:fe:51:80:2d:54:3f:ed:1c:15:19:
df:13:ce:f0:15:cd:41:52:83:b6:ea:cc:03:c4:aa:49:24:0c:
7c:1a:f0:20:11:39:ef:69:5a:41:8f:47:66:52:12:a6:20:f7:
3f:09:6d:be:a9:f2:04:8c:6e:1c:86:66:b9:ee:b2:39:02:7e:
6d:88:bb:b6:b1:a0:da:b7:77:e0:52:04:da:37:d5:2b:c7:73:
d5:ea:ea:70:77:36:e0:22:28:43:e7:20:9f:65:2b:bd:1c:fd:
00:2a:23:bd:c8:51:bd:fa:e2:f4:ed:a5:0a:b1:7c:f4:58:8b:
26:6c:70:3f:63:ac:84:c5:71:4e:ad:86:59:a3:e7:a8:bf:8e:
e2:d9:d6:5c:94:3b:53:c0:6b:ce:2c:40:c5:4f:e2:87:ef:25:
69:71:7f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:34 2025 by rpki-client