Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json)
Hash identifier: 5DTGkjtoOyPv4/OXp5PThVUP2Ggs0PuoiCsNxiaRDpQ=
Subject key identifier: 52:38:31:1D:44:0B:FD:16:FD:CA:66:CB:7D:37:66:12:62:C3:E6:0B
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 0199FBEA9CAE5C74C693B0052D9E3422B2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
Manifest number: 0CEC
Signing time: Sun 19 Oct 2025 10:01:20 +0000
Manifest this update: Sun 19 Oct 2025 10:01:20 +0000
Manifest next update: Mon 20 Oct 2025 10:01:20 +0000
Files and hashes: 1: X2bocyRVhCfvso68Pv43uBx6gHw.roa (hash: ch7Rg28zRrgi0YGzVdKPWQbcu7IjFqyNq5JbEbQ26hc=)
2: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: GItFGQgQipy4SEHv24aKVey3bgJGkCOqkBxrylB+0JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9c:ae:5c:74:c6:93:b0:05:2d:9e:34:22:b2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: Oct 19 10:01:20 2025 GMT
Not After : Oct 20 10:01:20 2025 GMT
Subject: CN=5238311d440bfd16fdca66cb7d37661262c3e60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:98:ff:cd:50:c2:16:74:ba:d8:45:42:d1:
1d:79:3c:7f:53:e4:f4:21:22:d1:e0:8f:28:63:d5:
74:2a:b3:9b:34:ca:ee:8e:b9:03:1d:42:31:11:96:
50:ad:b6:96:8e:b3:9a:9d:a9:6b:5a:bc:82:5f:f6:
43:07:0a:37:f9:7f:ad:d1:97:a7:86:de:b6:34:48:
5d:6b:01:b2:3a:2d:e1:25:44:c0:a3:78:49:4a:ac:
88:51:f1:9e:6f:b5:e0:d6:9a:e3:36:e5:2f:9d:97:
02:32:ec:25:7b:28:85:22:60:7e:fb:ec:e3:ea:12:
17:62:a5:db:6b:62:be:3d:07:94:d8:3a:0a:f2:7c:
6c:0e:78:8b:c9:c4:4e:c7:cd:44:ee:cd:aa:64:da:
be:c4:31:33:dc:53:af:16:89:74:73:2d:6a:3f:78:
3b:a8:b7:ec:af:cc:63:ab:95:75:cb:d4:ab:60:03:
26:b2:0a:62:86:bf:a9:66:0d:5a:37:5c:2f:ea:a3:
ee:f2:da:bb:10:a9:b3:97:e5:fc:06:27:75:49:de:
b4:d0:31:9c:7e:09:ac:60:07:26:3c:79:09:05:ee:
f2:d0:5d:05:fa:99:77:ff:3e:f0:0f:2f:33:76:b4:
8b:9a:e1:13:e2:19:ad:f1:58:45:dd:fa:54:6a:b8:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:38:31:1D:44:0B:FD:16:FD:CA:66:CB:7D:37:66:12:62:C3:E6:0B
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:55:26:2f:35:8c:7e:fa:9f:fe:d3:ac:ec:17:81:5c:e3:c6:
bc:e5:53:64:d8:2f:1d:17:72:6c:fe:e4:a8:41:d3:0e:60:2e:
9c:38:b8:f8:a4:35:b9:9b:6c:46:7c:ba:34:02:47:11:10:2f:
33:82:4f:d9:88:e5:0b:6f:79:80:b7:01:28:72:ae:a4:7c:c8:
38:8b:19:8c:15:fa:a6:33:84:b8:6d:ed:6e:e8:45:f5:a5:bb:
42:be:86:37:d0:03:be:95:26:54:e8:07:7a:dc:1e:6b:0f:b6:
d5:0b:48:84:b8:96:6b:d3:e8:4b:34:be:8b:91:d6:ce:00:ad:
c7:c2:2e:64:6e:6c:b0:90:5a:76:2a:48:f2:c3:8e:f9:d4:82:
23:0c:84:98:14:c8:61:f7:aa:b7:71:26:19:fe:4a:32:2e:38:
dd:2f:d6:97:47:1b:ca:98:9d:66:66:38:26:8e:37:a8:37:94:
e5:fc:48:81:ed:a6:27:61:0c:9b:22:30:9d:2d:be:7e:85:95:
50:28:a7:0d:c6:8b:be:49:66:c4:b3:ad:8b:db:50:7c:32:cc:
df:1a:1a:ea:c2:2a:da:57:7e:95:38:f1:ea:8b:43:a3:ba:4c:
71:6e:51:a2:0e:c2:8e:54:16:c6:11:7c:2b:d8:17:83:44:83:
09:42:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:33 2025 by rpki-client