Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: 6B46xqTp+sGf8nhm9HB0V+aDn07ylgMLkwMsuHh5zAk=
Subject key identifier: D5:99:94:04:8D:50:55:F7:A3:CC:4A:DE:03:1A:FE:E0:30:79:4C:BA
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 0199FBEA8406C500780D50712065FA3E9B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 0F2B
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=)
2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: bq9lhWuerehbB+uRZ5l++hYBVVzhfoYBSlgTu/uQdls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:84:06:c5:00:78:0d:50:71:20:65:fa:3e:9b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=d59994048d5055f7a3cc4ade031afee030794cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:1f:48:5a:19:4c:8c:14:ea:f4:8e:f2:7a:
1a:b3:5e:cf:5e:cc:0d:f4:0d:95:c8:9f:b0:ce:a4:
27:fc:3a:2b:4e:b5:72:b5:9f:a6:e0:20:72:4f:ae:
fa:48:b3:9e:4a:8c:d6:b4:ce:9a:2f:05:2a:30:36:
b4:5f:f3:5e:9b:0c:b2:41:c2:7f:1f:3d:56:c8:33:
d1:a1:b3:4b:93:b4:6f:df:f7:99:b1:52:41:56:b8:
d6:23:c6:ec:05:2c:42:e4:88:6a:23:6f:57:58:9d:
41:fc:92:7c:68:a5:c2:94:b4:ce:83:38:0e:f7:7a:
ed:1e:c7:c1:21:7d:9c:5e:0a:fc:ae:3a:a1:a8:f7:
cb:a9:10:a5:f7:e9:c1:01:1d:95:db:fc:59:55:a9:
02:79:58:86:93:fd:83:31:c0:63:e6:d4:e3:8c:25:
7d:41:cc:6b:22:ac:27:27:0a:46:c8:4d:66:ba:c7:
20:67:a6:ae:05:00:23:2b:45:19:95:96:2f:16:29:
20:47:89:5d:9c:84:c5:3b:b2:f5:d4:53:a8:18:3e:
ab:49:39:3a:bf:fa:7b:64:f0:74:a1:27:89:b9:56:
e3:3d:49:5a:65:2a:cd:7c:3b:3b:04:d9:f6:02:8c:
62:09:f3:37:08:ff:0f:b5:3a:b7:39:5b:ef:20:28:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:99:94:04:8D:50:55:F7:A3:CC:4A:DE:03:1A:FE:E0:30:79:4C:BA
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8d:69:dc:e1:67:79:33:ae:64:ce:46:65:52:38:3b:fb:a1:
79:65:5d:44:27:2e:ca:57:30:15:42:9d:86:40:04:75:94:48:
af:90:79:6b:c8:ab:76:fa:b1:da:29:77:b6:53:ed:49:4f:08:
b8:0d:ad:0c:f8:1c:bc:30:08:15:12:c0:d1:9f:7b:9b:59:76:
7d:97:67:52:7f:27:5f:0e:6d:4c:03:88:ff:ed:37:c1:da:a8:
42:da:f4:37:c8:9e:c9:80:46:21:2f:36:2b:2a:6b:44:6c:c8:
0b:0f:69:e6:62:7d:ba:c3:a2:a1:a9:38:e2:a7:0d:0d:b1:a6:
5f:c7:db:9b:6e:d6:5d:98:08:d0:fd:68:f4:45:b7:31:06:6b:
6e:b7:f4:70:05:29:30:4e:0c:6e:39:2e:15:52:bf:cc:89:1a:
13:22:ac:1f:94:84:03:50:0f:92:a2:9c:6c:0a:6d:17:c7:4a:
16:89:f8:a3:8b:af:90:b0:4f:e8:32:71:bc:75:88:6e:ee:a1:
17:37:8d:aa:e4:17:ed:5e:03:a0:81:9c:f3:59:ef:c4:66:ef:
93:bc:f2:2c:1a:eb:18:31:83:ed:de:89:b5:2a:f7:b3:d9:14:
5e:23:d9:6c:ba:85:19:70:52:e6:c1:50:d0:f3:2c:9f:e3:84:
1b:86:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:18 2025 by rpki-client