Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
File: pI2lIJvWz5DG321-bWOmOVW61LU.mft (raw, json)
Hash identifier: 3LFjvHt98645CrYzqovbTGlcWQLHeSCNG42dRlFUEfk=
Subject key identifier: BB:98:35:FE:D2:C8:24:F0:E4:C1:A0:58:AA:23:1D:01:CA:28:8E:15
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Certificate issuer: /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial: 0199FE101AB329A09C976EEEF914DBF14964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
Manifest number: 076C
Signing time: Sun 19 Oct 2025 20:01:32 +0000
Manifest this update: Sun 19 Oct 2025 20:01:32 +0000
Manifest next update: Mon 20 Oct 2025 20:01:32 +0000
Files and hashes: 1: gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa (hash: LNpaqhIXeGRj9rxSqG8l9W+yrY/Iu+GRMv3w/Y4Inpo=)
2: pI2lIJvWz5DG321-bWOmOVW61LU.crl (hash: UT5Uisb+U2PNDgpyodNw40HH/jV+z23b0SYzlYJZUDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:1a:b3:29:a0:9c:97:6e:ee:f9:14:db:f1:49:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Validity
Not Before: Oct 19 20:01:32 2025 GMT
Not After : Oct 20 20:01:32 2025 GMT
Subject: CN=bb9835fed2c824f0e4c1a058aa231d01ca288e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:03:2c:66:43:14:c4:9f:93:8d:09:17:41:
05:40:66:4f:d3:5f:8b:73:5f:4f:09:e5:6f:07:16:
26:d7:82:65:0d:dd:0b:8d:fe:0d:ae:36:08:8c:c0:
05:40:c1:3a:61:6f:99:07:57:b9:84:6c:f1:f0:48:
27:90:cc:38:e7:7a:d0:fd:10:7a:2d:0a:ba:36:2d:
51:82:85:93:a5:5e:ce:cf:b7:6b:06:8d:a0:41:ac:
52:00:4f:6f:55:6a:08:fb:74:6d:62:f8:d9:35:4d:
3b:95:77:ba:00:93:4a:f9:07:3a:c1:3c:de:2f:ea:
86:17:c5:c3:d0:d8:d1:5d:58:9c:48:c8:1f:38:b2:
05:e4:4e:a8:48:78:9f:03:bb:7b:d2:f2:d7:fb:95:
e5:4e:8c:85:5c:83:83:4d:c6:c1:7f:a0:55:46:d5:
6b:17:b9:bb:9d:a7:a8:76:8d:f5:da:df:63:1f:92:
18:be:77:3b:7d:b6:10:26:b8:00:3d:47:e8:08:bb:
5f:8b:38:64:2c:7f:4a:aa:e6:12:50:c0:5f:5c:16:
64:34:0f:2c:05:9b:5f:30:3b:ec:ac:38:3e:f7:39:
62:00:9a:01:81:6a:0e:32:16:f6:11:a8:9e:65:fa:
2a:3f:f8:64:36:0d:db:b6:2f:56:d9:f1:38:30:32:
a9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:35:FE:D2:C8:24:F0:E4:C1:A0:58:AA:23:1D:01:CA:28:8E:15
X509v3 Authority Key Identifier:
keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c2:0f:cf:de:fc:a9:ab:35:2a:89:a6:d1:c0:d0:15:48:6e:
8d:3d:27:1a:eb:06:4d:68:13:f1:cd:67:8a:27:79:e4:31:eb:
23:62:f8:a3:35:ff:93:4d:ed:06:50:22:ee:19:70:57:88:f1:
40:3e:ea:fd:82:87:9a:96:4b:33:f0:40:93:71:6d:fc:af:37:
45:aa:9c:52:6b:b6:ab:eb:3d:d8:5f:2f:cd:8e:ae:bf:04:e2:
1f:3a:50:1c:55:02:95:f6:92:d2:8d:a2:a9:ed:61:63:9b:22:
a5:7e:90:25:5b:96:b5:16:9e:a5:63:17:0b:a0:9f:85:2b:3d:
8b:78:51:12:40:c9:64:97:38:0e:9e:6f:2c:b0:0b:6b:4d:bb:
c3:92:6f:fa:d3:fe:81:e5:08:d6:9f:1b:22:8e:2f:8e:20:0d:
bf:d7:90:43:76:f2:eb:f8:fe:a6:38:e9:71:0c:84:9a:84:0c:
8b:98:e7:fc:39:04:c4:fb:7a:1b:2e:e4:ce:89:e6:f7:dd:f0:
51:34:c5:69:db:fa:a6:1b:62:d1:59:42:41:96:f1:cc:d9:26:
05:49:df:95:ad:04:4c:56:c1:cc:ee:58:07:f6:df:0c:67:5c:
f5:d7:44:fc:2c:79:60:00:b3:53:45:cb:df:3e:54:56:29:ea:
26:26:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:51 2025 by rpki-client