Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
File: p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json)
Hash identifier: mgbRYykUyJSDT6kKTBDAVWWlStb1iNwI3RtU0m7kA8g=
Subject key identifier: A4:87:2F:9F:D9:93:37:F9:0E:39:9D:16:F3:F1:91:11:48:19:4A:7F
Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Certificate serial: 019A02C769A641A28CE62EAC243D98720482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 18:00:14 +0000
Manifest this update: Mon 20 Oct 2025 18:00:14 +0000
Manifest next update: Tue 21 Oct 2025 18:00:14 +0000
Files and hashes: 1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=)
2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: RMjrKKLulp3WoZS5iRQ4qaap29JnX4lzizKhknEEjss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:69:a6:41:a2:8c:e6:2e:ac:24:3d:98:72:04:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Validity
Not Before: Oct 20 18:00:14 2025 GMT
Not After : Oct 21 18:00:14 2025 GMT
Subject: CN=a4872f9fd99337f90e399d16f3f1911148194a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:71:c0:04:d9:98:3b:69:b2:96:2c:17:58:
46:e1:18:d7:44:aa:c4:e3:a4:c1:3d:a2:bf:35:05:
f0:cb:8e:3c:61:7c:77:d2:71:26:4d:03:b5:61:e3:
0e:f6:5a:06:0b:73:f3:36:0b:20:81:56:3d:5d:77:
1f:66:57:3a:fd:53:6d:fd:10:be:03:c9:bc:65:34:
c0:60:b1:63:29:28:ac:98:8c:bf:71:b6:b5:0d:a1:
f6:28:39:36:b4:58:c8:8a:43:f5:7a:bd:a9:65:08:
61:36:a2:a2:da:a2:33:64:d6:c9:4e:ef:ce:79:b9:
87:9e:90:b8:46:a6:1c:ad:b0:df:fe:b9:99:fb:8c:
f3:1d:2d:b0:de:cf:f0:17:b4:0e:5e:e1:25:fc:8e:
9d:4d:b6:f5:e8:f6:15:38:0d:ed:0c:d1:fe:bf:a2:
08:bf:b9:a6:e6:a2:c7:ce:3b:ef:c8:d1:d0:c4:f1:
12:ab:69:4c:3e:13:0e:7e:34:28:f2:1a:e4:7a:64:
5c:9e:a5:db:81:3e:56:99:c3:c5:55:cd:fb:68:b8:
be:5f:5e:08:9f:3b:da:65:dc:56:17:83:d5:43:5e:
61:d0:b3:75:70:6d:77:b5:50:fa:6b:99:b3:73:8a:
d5:9d:3c:3d:77:bc:a1:47:a3:35:05:76:3c:d6:1e:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:87:2F:9F:D9:93:37:F9:0E:39:9D:16:F3:F1:91:11:48:19:4A:7F
X509v3 Authority Key Identifier:
keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a8:d9:b0:b3:d3:38:a0:91:d2:81:dc:ee:3e:f2:51:37:e4:
36:d6:db:a1:92:48:8b:6f:36:90:06:27:e6:60:66:40:a5:15:
bd:1c:ed:77:a5:2f:f1:15:db:de:58:49:c9:04:29:65:7a:43:
84:9d:8f:41:cf:1b:96:69:fd:be:c1:d0:cb:6d:01:93:c8:fc:
f9:0f:d3:df:24:cb:8c:13:44:77:8d:6e:96:c8:bf:24:4c:a7:
92:9c:67:53:46:6e:da:f1:6c:4f:f9:9b:68:2e:73:87:08:70:
a4:e6:88:c2:25:43:b2:d7:54:93:92:0e:21:48:b0:8c:0f:ff:
a8:6f:7d:fa:1b:c5:85:9b:81:06:a8:2b:28:91:02:0c:eb:b9:
ab:d6:12:d3:7c:6c:98:d0:84:11:90:4f:42:18:52:c9:68:bb:
5e:ce:48:1a:15:19:28:27:11:58:9a:ce:4d:04:c9:29:0d:94:
81:08:f6:cc:dd:03:00:4e:05:b2:ae:9e:ee:61:c0:1a:23:50:
d8:fe:8e:df:31:6c:b2:4d:aa:74:83:13:d5:15:56:da:ce:bb:
2e:c4:36:c3:d1:cd:94:d0:29:68:d1:e0:ce:3f:bc:c6:8b:1f:
cf:35:d5:fb:26:13:12:df:a6:c2:24:67:b9:64:c9:f2:47:7e:
e8:75:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:45 2025 by rpki-client