Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: YMywZXMeC/hicwiuD82HpTAU0uihcNIDBZAWCpMx6FU=
Subject key identifier: FD:21:5A:EA:26:5E:67:1A:AD:F6:F5:7F:B9:54:50:C6:60:E4:E8:C0
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019A04488D871B092481E84BD4EFDAAA026D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0F14
Signing time: Tue 21 Oct 2025 01:00:54 +0000
Manifest this update: Tue 21 Oct 2025 01:00:54 +0000
Manifest next update: Wed 22 Oct 2025 01:00:54 +0000
Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=)
2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: FKlOJwBnojy5ny6LUAD1t5YFwqCEcds+/m0YWXJbBwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:8d:87:1b:09:24:81:e8:4b:d4:ef:da:aa:02:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Oct 21 01:00:54 2025 GMT
Not After : Oct 22 01:00:54 2025 GMT
Subject: CN=fd215aea265e671aadf6f57fb95450c660e4e8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:b7:a5:16:ce:ab:35:ee:37:bf:7d:88:98:
c9:d4:3f:f2:75:ac:ee:89:ca:6c:94:95:01:7f:30:
1a:2b:75:16:da:a9:de:e2:ff:97:46:ba:95:d6:f0:
20:34:c2:51:e2:36:3d:c4:68:c9:61:e6:20:b3:cf:
1e:f1:a4:d3:f2:80:7d:4a:e3:1b:92:0e:9c:dd:e2:
d9:48:2e:42:60:08:96:6b:79:7a:a3:4d:3d:29:e1:
3a:0f:04:8e:c3:13:5b:4c:38:17:6d:92:0f:83:33:
75:3f:fc:f8:49:92:40:34:82:a3:0d:98:b0:f1:09:
e2:09:93:01:74:fa:b5:9a:2b:7d:30:06:07:7f:54:
40:7d:2f:24:65:ff:8c:7d:65:40:cc:a8:be:b1:d0:
8e:75:98:54:19:b0:07:c7:8c:47:74:c9:1c:3e:dc:
4c:4b:a4:73:de:1b:74:b7:3d:48:8b:e4:d7:b2:2b:
64:b6:0c:dd:a8:06:a3:5e:4b:44:95:f1:63:92:a6:
45:46:55:1d:d8:72:d1:93:96:db:1a:44:5b:9e:f5:
4d:74:36:70:94:24:75:d6:4e:c8:e0:63:7b:db:06:
fa:d8:c1:29:fc:17:54:62:c5:74:b3:85:24:a9:1a:
3d:08:d9:96:f8:e1:80:e2:b7:8c:4f:63:0e:a7:14:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:21:5A:EA:26:5E:67:1A:AD:F6:F5:7F:B9:54:50:C6:60:E4:E8:C0
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b7:7e:a2:ab:e4:4a:f5:0d:89:ae:72:3e:41:7f:bb:67:53:
e6:d6:87:ea:74:bb:df:30:c0:27:c3:b5:9f:12:75:bb:26:d3:
22:4c:ef:85:e0:01:0b:78:8f:ab:df:45:d9:cd:70:3e:30:f7:
04:77:54:fc:21:54:29:e3:87:78:89:3c:e0:ef:9b:fb:c3:54:
fd:5b:ec:9f:3c:ad:80:1d:50:cf:3b:be:e9:bd:2e:6b:09:41:
6f:3d:d0:c9:8b:17:54:83:e6:1b:0a:50:00:29:1e:bc:71:63:
6f:9e:8e:72:6a:90:ef:11:52:44:79:49:9f:56:e2:6b:07:78:
71:ab:2b:83:38:47:b6:8b:62:2c:00:fd:80:76:b5:05:cd:a0:
6d:f9:9c:e7:25:e7:dd:a2:b3:85:ab:a3:51:2d:75:a0:fc:1b:
a0:34:1f:d9:d3:51:a0:8e:dc:3e:44:81:69:8d:67:6f:c4:d8:
40:ed:99:6f:59:07:55:77:b9:eb:6f:6e:2c:0e:86:fa:15:7b:
db:1d:5d:34:3b:25:36:84:ab:a2:d3:e8:2e:10:ea:97:62:a9:
41:85:d7:4a:40:9f:44:c5:39:37:34:85:14:ee:dd:09:2b:a4:
59:e2:94:f9:11:2e:ca:0f:96:f6:ed:76:67:52:e6:c4:8b:8e:
57:18:d1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:49:20 2025 by rpki-client