Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
File: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json)
Hash identifier: juC8uaifFUAopcQs7SR5X/lwKbnyxC7Ycnz05kf61Y0=
Subject key identifier: F9:15:5D:83:E7:31:D8:95:29:34:F9:C6:17:07:24:90:23:4C:25:B2
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 0199FE46BFA397D312EFCD9A4807A1C5669C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
Manifest number: 0C57
Signing time: Sun 19 Oct 2025 21:01:13 +0000
Manifest this update: Sun 19 Oct 2025 21:01:13 +0000
Manifest next update: Mon 20 Oct 2025 21:01:13 +0000
Files and hashes: 1: ehG-SCGwvd8yBJatadELhp3bH6w.roa (hash: YkiZ4YuzwJ9yzU2pKOGO15cIT4PrhxRCvMLtPrdtwoE=)
2: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: mRHKG/uT53sk17Mz5nkNrYRHK0IKkFE50offJbyQPmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:bf:a3:97:d3:12:ef:cd:9a:48:07:a1:c5:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: Oct 19 21:01:13 2025 GMT
Not After : Oct 20 21:01:13 2025 GMT
Subject: CN=f9155d83e731d8952934f9c617072490234c25b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:c1:f4:ed:ca:97:a9:ee:d8:52:4e:93:f4:
80:be:06:6b:76:8d:2c:65:4e:36:36:09:b8:66:a4:
0c:08:c3:ea:de:ff:bc:46:77:cb:6b:08:a5:a5:9e:
9c:0a:d5:46:a4:e0:d9:34:82:97:ef:b6:38:d5:73:
04:de:4f:06:48:b4:c1:5c:3f:b4:35:49:a3:eb:b1:
a1:9b:db:21:9c:33:56:9c:36:4e:00:0b:e6:55:e0:
cd:46:ac:a2:27:72:a3:74:b5:aa:7c:47:e4:75:ee:
d7:74:de:a1:04:f5:5c:01:84:6b:4f:e6:fb:6d:d3:
e4:d8:f7:7a:d2:77:a3:e3:27:0c:0d:e1:22:2c:b4:
ae:84:97:6a:96:b2:16:95:f5:69:7d:9f:87:63:56:
53:d2:5d:f6:2d:1f:8a:90:b8:ea:98:be:3b:da:9b:
b3:51:58:62:94:71:da:01:70:75:38:26:c9:55:63:
3e:41:22:fc:c6:2c:7f:f0:ee:e5:bb:63:5f:f1:4c:
24:92:04:f8:68:9b:2e:50:81:fd:78:43:12:2f:0e:
4c:94:62:f9:1d:c7:f9:f7:22:2b:b3:4c:03:19:78:
7a:23:c6:87:5b:c2:bf:7b:ea:89:b7:6d:7e:ef:d7:
f6:17:df:ac:d6:7a:d5:1d:82:8d:fd:df:fe:cc:00:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:15:5D:83:E7:31:D8:95:29:34:F9:C6:17:07:24:90:23:4C:25:B2
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:11:21:09:56:a4:0c:c1:c9:dc:67:37:fa:80:91:10:a3:2f:
95:7c:ed:ab:81:f5:64:b8:4e:88:e0:23:93:c0:7f:cf:be:47:
50:83:a6:20:db:bb:7d:ed:a1:f4:f4:13:50:3c:1a:41:c7:4d:
4a:31:fd:ee:35:08:f5:33:f6:0e:cd:71:99:e6:6c:9d:41:d6:
24:50:40:6b:ec:31:5e:5f:17:a1:9e:f7:e2:82:8e:f7:06:33:
ac:21:03:ab:8f:97:3f:3c:64:d4:9d:c0:2a:41:86:d9:fb:cc:
b5:c5:6d:f6:dc:e8:d7:62:fa:5c:cb:ac:ec:5a:bc:5a:47:5f:
07:b8:12:b2:50:db:35:29:46:0d:9c:39:40:14:a0:9e:ea:16:
ca:7a:d0:fe:9d:3c:24:c4:5e:80:ff:fa:b5:eb:09:85:c1:5d:
dd:a4:be:e4:03:ef:f2:e4:b8:e1:7d:b8:ba:7f:d2:28:ee:a3:
83:3b:2c:c2:7e:ae:d5:73:37:ca:09:e2:9d:80:52:ad:26:e1:
dd:fa:42:95:50:16:56:70:c2:35:59:4f:03:b5:7e:7c:9e:e1:
09:79:7e:39:99:a7:30:f1:fa:bc:4d:31:b2:77:10:38:56:ad:
63:96:95:04:89:d5:0c:1d:16:51:99:f2:82:71:20:dc:f0:8d:
e8:28:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:39 2025 by rpki-client