Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
File: p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft (raw, json)
Hash identifier: pD/DhJdnWQw7IUqckDVwx8kpbC/A8R41yRpXr7yBPHg=
Subject key identifier: 9B:FC:7F:B5:F9:71:06:D3:B0:F1:62:DF:36:61:31:0D:96:D1:93:F9
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Certificate issuer: /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial: 0199FBEB711332E49782092E027579AAA3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: 1-iNy3jh1NFZXcxAiKeiVx48NW6M.roa (hash: exM+KStZhJxdlJqEmPR+3n9NcBPaEAtgOuwOgKWeJq0=)
2: p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl (hash: B5qjU7V8BwAGSO5fJhXYn4twM6TPO5OelY1UD+IdmMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:71:13:32:e4:97:82:09:2e:02:75:79:aa:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=9bfc7fb5f97106d3b0f162df3661310d96d193f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:8c:dd:8e:a2:ef:80:41:39:84:d1:5e:ef:
69:3e:a6:4b:2e:f8:55:34:67:d5:b1:c8:c7:9b:a0:
89:74:58:1f:9e:73:82:85:bf:2b:ea:b8:15:bb:79:
02:46:b8:7b:99:01:53:30:3d:a1:80:2c:a1:ee:9a:
ec:c5:44:d0:b3:67:3a:31:c7:00:a4:0c:26:88:09:
96:0c:23:6e:c4:12:58:2a:cb:bc:48:db:9c:9d:4e:
9b:bb:64:ef:ca:6e:2d:83:36:4a:7c:6b:9a:83:83:
f8:8f:65:c6:fd:9c:ec:b5:9d:3a:21:15:e4:6f:fc:
7f:32:66:03:e3:a4:6d:8c:b3:13:84:de:9d:54:5d:
5e:86:ed:bd:7a:ed:67:16:74:10:63:0d:90:88:f8:
b3:aa:79:0b:46:7f:41:a8:92:77:ef:7c:e9:ca:bf:
fb:0b:71:c2:0a:57:17:4b:14:5b:b1:ab:bb:31:0b:
39:e1:40:43:34:1d:81:30:b2:34:11:33:16:f9:7f:
49:bf:a6:3d:ca:56:5e:98:0a:e2:a0:c4:23:72:f1:
2a:13:d3:af:62:35:d3:32:c4:da:cc:ee:ec:a1:35:
e6:4b:a4:9c:d1:40:8d:f7:02:b7:bc:79:16:77:99:
dd:50:27:0c:c3:1f:ba:b3:14:e7:c6:9c:f5:c6:56:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:7F:B5:F9:71:06:D3:B0:F1:62:DF:36:61:31:0D:96:D1:93:F9
X509v3 Authority Key Identifier:
keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:37:0b:df:44:5d:8c:a6:a5:58:02:11:0b:a2:71:df:94:aa:
cb:78:a8:76:27:f6:ec:1e:dd:83:9a:70:b1:df:31:02:ae:b6:
b4:fc:34:0c:2a:94:36:45:f8:6d:8c:34:81:99:f2:69:72:a7:
ba:06:50:66:73:55:d6:e1:d6:21:eb:e7:c0:e7:90:9f:a5:e2:
22:7c:ad:89:e5:76:ec:a1:06:a0:91:5d:e3:79:49:e9:66:cb:
72:37:4b:2e:3e:ea:8f:5e:e9:c3:73:6c:8e:0e:39:70:ad:50:
27:eb:f3:38:90:d0:f8:aa:60:38:37:2a:94:0b:e2:0d:97:8a:
a8:e8:f6:2b:fa:50:64:89:01:2a:d1:1b:d9:a8:ca:b3:6a:8d:
99:dc:5c:b9:e7:c7:bd:51:72:24:d7:15:68:14:dd:89:f5:7e:
92:18:39:c6:eb:51:37:2d:c3:ce:bf:da:7e:0e:e3:06:b0:29:
24:2c:af:d0:45:ca:3a:45:30:87:b1:8c:3b:90:a7:80:42:f4:
7b:a1:9b:09:40:21:40:27:87:ef:87:d8:a7:45:e7:64:49:46:
0f:c9:b1:9f:0a:41:00:af:d2:e4:eb:df:32:13:0c:5c:a2:19:
3f:2b:c8:fd:71:ad:3d:2e:de:64:5f:cc:e2:1e:59:0b:c5:9a:
1c:2d:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:13 2025 by rpki-client