Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
File: pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft (raw, json)
Hash identifier: Psp4/41gyup9dPpeXJO6Mlm89uYSLJqGGVUsh2t8xpA=
Subject key identifier: 16:30:D5:30:93:D1:E9:E2:75:89:2F:D2:74:84:02:66:A5:DC:DE:B0
Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
Certificate issuer: /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Certificate serial: 019A70A59C34EF0CA36C0E16BCC5DDA78DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
Manifest number: 0B2C
Signing time: Tue 11 Nov 2025 02:01:32 +0000
Manifest this update: Tue 11 Nov 2025 02:01:32 +0000
Manifest next update: Wed 12 Nov 2025 02:01:32 +0000
Files and hashes: 1: Zul1tgj5h7XyL00R81W1mi6g1V0.roa (hash: JA2Lp3OQPetYYVSiRbEJs9OwBpQrX9gJ6sScomlZ4Xo=)
2: pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl (hash: caZunOxcz2DpmDkHKZpi232v7bFkGt+7YMYCFLWsEKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:9c:34:ef:0c:a3:6c:0e:16:bc:c5:dd:a7:8d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Validity
Not Before: Nov 11 02:01:32 2025 GMT
Not After : Nov 12 02:01:32 2025 GMT
Subject: CN=1630d53093d1e9e275892fd274840266a5dcdeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:76:ba:df:a6:a1:c6:7b:15:98:5e:75:e9:
2f:4b:4d:5d:78:9c:c7:41:c6:f4:fe:42:67:80:ba:
61:0c:78:68:de:73:7d:b0:7f:f9:16:aa:d4:2b:c1:
5d:9b:c8:ac:1e:3d:af:4e:b8:e7:66:ed:e3:1e:79:
f9:a8:8e:d9:49:b4:27:23:7f:7a:ee:23:8b:8d:19:
84:39:5c:e8:b4:6e:d4:4e:3c:15:d6:0d:31:09:07:
67:e7:5c:dc:d6:40:d9:df:d9:5c:3b:0a:82:4d:40:
bc:f3:c0:2e:33:af:3b:0b:34:f7:2e:77:cd:3f:a8:
3f:db:36:d2:9a:96:c9:7e:da:64:db:5a:d6:e0:7f:
f1:ec:97:41:39:9e:fe:93:8e:aa:e9:17:9e:ef:f8:
bc:a6:b5:4b:5a:36:5f:c5:5f:66:ef:66:8d:7f:31:
c9:f5:1a:b7:33:7d:60:4f:de:3c:cf:98:39:9c:23:
ee:48:f7:d5:19:2d:f0:f2:06:0f:b7:2c:7d:2e:c8:
fc:75:d9:d8:ba:e1:1e:64:d3:31:fb:09:d5:17:c0:
77:bf:4b:69:bf:0a:21:4f:24:42:f2:ba:f8:ea:3b:
01:14:43:fd:65:6b:81:ec:0d:f0:3d:1a:3c:2f:6f:
a6:73:04:a9:22:20:5c:94:46:57:78:dd:5c:ca:39:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:30:D5:30:93:D1:E9:E2:75:89:2F:D2:74:84:02:66:A5:DC:DE:B0
X509v3 Authority Key Identifier:
keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:46:e4:5e:7d:ce:0c:c9:3a:c5:6a:0e:80:a8:e4:4b:65:6d:
c9:7d:6c:84:b2:ef:c6:be:46:bb:bb:d8:c9:d6:42:fa:21:76:
94:cf:79:da:a1:4a:78:5b:4e:e1:bc:4d:13:c6:1f:c8:8f:d5:
aa:e9:62:7a:ac:d6:72:07:af:5a:eb:30:37:c8:61:be:c1:6c:
3c:c7:10:96:99:ba:70:40:28:ae:f7:6f:cb:00:10:78:c3:3f:
70:50:20:38:9f:32:48:f0:27:d6:6b:9b:81:8a:45:45:ea:8d:
4b:f5:bb:73:1a:17:d3:08:03:95:ba:5b:b5:98:5c:86:b0:77:
df:7c:41:eb:63:2b:93:66:f3:c3:cc:e9:55:0c:b5:b9:df:07:
bc:88:53:b7:13:c0:f0:03:8f:5c:7e:0d:18:59:52:6c:45:6f:
19:ac:eb:07:c6:70:98:89:cf:2d:bd:e5:78:f6:9c:6c:85:d2:
d9:48:81:c4:35:f2:04:99:08:5d:9e:f3:3a:49:d3:06:ea:0f:
b9:f1:32:d2:a0:48:98:86:b0:22:5c:2b:97:52:74:4e:9f:af:
f0:fe:17:5d:38:76:de:ab:ce:fc:16:03:1d:9b:5a:01:b1:6e:
c4:74:ce:c2:c5:2c:5e:80:6a:5f:bf:e6:e3:30:b3:42:f8:ff:
04:05:40:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:19 2025 by rpki-client