Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: JNADa6In+D4/Msj96khbwq00tnFkPfBffbcujfvWwNs=
Subject key identifier: 3F:4B:74:F2:70:D8:2D:02:A9:29:1C:AC:62:6C:7C:B0:24:D0:07:36
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 0199C48DB2E5D23E424402C46CC4BC483540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 059A
Signing time: Wed 08 Oct 2025 16:00:44 +0000
Manifest this update: Wed 08 Oct 2025 16:00:44 +0000
Manifest next update: Thu 09 Oct 2025 16:00:44 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: RPQSnoqYrJIC2AOQrVjck6J7pbqfttPdptEuGnxijPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8d:b2:e5:d2:3e:42:44:02:c4:6c:c4:bc:48:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Oct 8 16:00:44 2025 GMT
Not After : Oct 9 16:00:44 2025 GMT
Subject: CN=3f4b74f270d82d02a9291cac626c7cb024d00736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:a3:ed:95:67:4d:c1:8e:e6:2b:81:da:bd:
f7:1e:01:d6:21:2f:3d:17:03:29:2c:92:65:a2:2c:
ae:1a:a0:16:31:0f:76:4e:44:1a:c5:cb:9a:db:fa:
6f:5d:10:93:f6:c1:9c:1a:19:20:e7:7e:43:d2:0f:
4a:7e:99:5a:b1:3d:35:f0:ea:60:b2:a4:d7:cd:20:
38:1f:87:36:05:f7:05:72:3b:df:fe:34:c1:93:32:
e2:e8:24:32:ee:46:93:75:c6:1b:85:ec:ab:49:97:
eb:cb:d2:2b:23:ec:ac:76:8c:f7:81:8d:e3:10:31:
63:de:c0:c7:d6:b6:06:61:a4:a0:3a:45:95:ce:af:
4c:50:7e:e4:c5:d8:24:43:da:ae:ff:1e:5f:ec:b2:
fb:f9:4c:a9:84:93:3b:4c:be:1f:45:42:63:73:0b:
4d:17:fc:c1:e8:4b:62:89:55:a0:b8:df:f3:49:fc:
35:62:1e:47:db:32:27:93:2d:d5:50:7b:40:d8:2d:
90:2d:b9:29:83:23:8d:84:03:86:25:cf:1a:a5:fe:
10:ef:77:df:aa:01:7e:a6:70:3f:7e:c6:a4:b0:89:
b3:64:a9:0a:17:9d:09:85:94:2a:e7:bb:33:7c:3c:
5a:05:7e:16:18:7a:b7:66:18:fc:29:15:52:4b:90:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:74:F2:70:D8:2D:02:A9:29:1C:AC:62:6C:7C:B0:24:D0:07:36
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c9:f1:a3:cc:12:97:a0:b8:b9:52:c7:be:0a:a6:cb:6f:8d:
68:2f:09:43:11:9a:e4:34:7a:65:46:0a:26:ef:e2:3f:2d:84:
7b:d2:f5:bf:79:1c:ab:b2:4d:a6:af:cb:20:b0:db:c8:fa:b4:
a8:77:3f:1f:bb:16:58:ee:06:fb:eb:e0:d7:f3:9c:bb:44:80:
48:6c:97:7d:70:58:3f:1e:97:b7:96:bd:f7:d7:84:09:f2:24:
41:53:8b:22:40:10:ab:3d:64:9e:d5:10:4d:fe:c9:84:77:dd:
67:9b:e2:77:11:9a:b8:99:62:84:dc:3a:f1:e9:07:da:45:3f:
2d:ca:aa:6b:1c:dc:12:82:6b:e5:dc:c1:3a:c5:6a:08:42:a2:
d9:dc:74:dd:e0:eb:d3:6f:10:21:6c:95:d6:09:17:32:f6:82:
97:7a:6d:e9:6f:ae:00:ac:dc:34:60:92:07:ad:06:52:29:7b:
14:54:3e:b7:7e:6a:07:df:81:47:36:3d:07:a7:fa:9a:b2:23:
1e:e4:05:4f:96:e4:09:78:55:9b:5e:5d:ae:1a:6f:dd:f7:9f:
b3:fa:32:d0:38:68:b2:79:2b:67:d1:22:8d:10:c2:fd:94:95:
b7:15:bd:5d:cb:ae:16:d6:b4:65:91:ec:80:f5:e0:85:9d:cb:
ff:e2:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:12:19 2025 by rpki-client