Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier: oOxjGMKBOfgh18jEGNiSEOX9oYMZZ+/YLomT5vMvyXI=
Subject key identifier: 79:08:0D:E4:6F:65:50:0B:55:22:73:17:F7:3C:00:06:A2:CA:78:4A
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial: 0199FE7D8F129F8E4F40214AF05B16276EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number: 0D9B
Signing time: Sun 19 Oct 2025 22:01:05 +0000
Manifest this update: Sun 19 Oct 2025 22:01:05 +0000
Manifest next update: Mon 20 Oct 2025 22:01:05 +0000
Files and hashes: 1: Z94Es0pJzdNNFG_pvtxbCrg0w94.roa (hash: uXR+OJPAQJAMUd3RxLmxlHyff75ZTmhyAoVDvTJyktM=)
2: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: TCNQpy4Exsj4KofGBLn/dqH2+SsTDr/qGKl6BH6ZLC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:8f:12:9f:8e:4f:40:21:4a:f0:5b:16:27:6e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Validity
Not Before: Oct 19 22:01:05 2025 GMT
Not After : Oct 20 22:01:05 2025 GMT
Subject: CN=79080de46f65500b55227317f73c0006a2ca784a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:32:b8:8b:49:48:19:fe:56:4c:e9:b2:9b:
3e:03:1c:4f:cf:8d:32:27:8a:6d:71:b5:bd:95:e1:
26:e6:91:31:02:5c:f6:06:06:72:7b:fa:bd:a6:3b:
19:37:c0:af:27:32:13:bc:37:8a:71:27:05:ae:c5:
01:d9:20:2e:d9:0a:ea:2c:21:db:eb:71:c0:a0:a9:
28:6f:f8:5c:46:c0:9f:bb:8a:1e:11:4c:62:bf:5b:
4d:e8:ec:80:c4:7a:d9:4f:99:fc:c6:98:04:ab:64:
8b:de:64:77:67:8d:79:bc:4f:16:0f:00:99:63:a3:
c1:89:94:8c:35:fb:19:dc:e9:56:3c:c7:83:1b:1c:
e2:6f:dd:83:0b:8e:cd:4e:67:85:d8:91:ae:97:5a:
96:81:c7:69:c1:d2:1d:1a:8e:37:c3:35:79:e9:b8:
30:9d:e2:ec:50:01:11:bb:bf:2e:9e:54:4a:4d:cd:
fb:89:b2:f2:7a:7a:b4:68:c4:7f:bf:7a:f9:a6:71:
58:43:51:ec:d5:3d:c1:dc:71:18:b8:a2:cf:47:ef:
ba:27:39:f4:b0:0e:ea:13:cc:8d:bd:20:99:27:86:
e6:ed:f9:fc:b2:ae:a6:f9:c5:07:39:ca:68:e1:5d:
1d:62:3d:bf:0c:b7:2a:74:49:87:e0:0b:2d:f6:2f:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:08:0D:E4:6F:65:50:0B:55:22:73:17:F7:3C:00:06:A2:CA:78:4A
X509v3 Authority Key Identifier:
keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:77:fd:0e:e9:13:f0:da:4d:e0:b2:32:0b:c8:07:ff:e1:1c:
c1:2c:72:54:ba:a5:6f:cd:3b:19:d5:1e:c4:cb:12:dd:eb:48:
11:b1:0a:ee:30:89:2e:18:7f:3b:72:33:ea:f0:77:98:65:cb:
bd:4c:67:47:29:e0:cd:36:19:d1:03:b8:03:6a:31:ab:23:d9:
a4:aa:95:d9:09:e3:2e:b6:7a:ff:48:31:00:ba:36:04:86:3a:
e2:e4:cc:ac:aa:89:b7:dc:12:23:bd:c0:e0:37:6a:72:4c:23:
c2:e0:75:38:3a:f6:51:96:21:34:17:86:3d:bb:ac:a6:39:70:
26:31:5b:59:0e:4e:30:f5:c0:99:fb:fd:76:d2:5b:16:06:76:
62:6b:d7:29:eb:19:88:96:ab:da:1c:99:8b:f8:76:88:44:46:
5f:09:8f:be:f4:83:22:ed:68:3d:c6:d6:9b:53:53:94:7e:81:
de:5a:cd:cb:d1:84:01:b1:da:e0:23:62:d7:31:b8:8a:df:b1:
c3:07:11:4a:24:77:31:3c:2c:8c:00:4b:73:32:3c:9c:d8:1b:
f3:34:e2:8b:0a:36:85:91:0f:4c:36:9e:05:c5:a6:ec:6a:05:
ed:dc:5f:62:9e:dc:ba:3b:46:1d:23:b5:fa:71:37:fa:a2:64:
87:25:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:45 2025 by rpki-client