Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: I8OnVI0ibBuS8bnfucZ9Gx1E2Dfbw5Yym1i237KKS54=
Subject key identifier: 2C:95:91:45:C8:C0:7F:A6:75:A1:42:84:4D:0D:D8:BB:EC:B3:59:44
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019A7293FF4935FCD47142115ED933C6BDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:01:33 +0000
Manifest this update: Tue 11 Nov 2025 11:01:33 +0000
Manifest next update: Wed 12 Nov 2025 11:01:33 +0000
Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=)
2: NH2BjpUAouOhcpZouA1RZzjRVTY.roa (hash: 24a7YxtpdykxCsVljEKHdP+oA0xGv3G4hBA1X06gGy8=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: iuCTIzwQJuOYU4lRYnR1RGqFfiiYZhoZ7XjUZgioXQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ff:49:35:fc:d4:71:42:11:5e:d9:33:c6:bd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Nov 11 11:01:33 2025 GMT
Not After : Nov 12 11:01:33 2025 GMT
Subject: CN=2c959145c8c07fa675a142844d0dd8bbecb35944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d4:a2:98:b1:b7:7b:54:8b:fc:81:88:83:89:
5e:a0:7c:cd:26:17:cd:a5:83:5c:a5:e2:3c:3b:b5:
dd:5b:40:7b:0f:46:88:9e:5c:97:81:31:7f:6e:5a:
fc:ec:fc:e6:e8:52:46:05:36:b0:22:48:d5:c7:e8:
1f:b8:2e:d4:41:c7:d8:e8:b3:1e:74:64:1b:06:97:
23:e5:6f:92:78:e5:0b:33:e1:40:83:ba:1b:65:78:
8b:1d:e8:04:46:d5:dc:2f:5a:dd:d3:6c:7c:ca:75:
d8:c0:93:69:81:b2:19:92:bb:20:0b:39:9a:7c:4f:
ed:50:8a:90:60:25:24:e3:63:51:a2:ca:f0:fd:cd:
49:19:c0:9b:b4:0b:5f:7b:ae:2d:2f:8f:b6:50:b1:
fd:e5:5b:03:9e:1f:1b:d3:88:d7:21:29:8e:59:75:
bf:34:9c:f9:53:c8:80:cc:4b:63:e9:98:bf:8f:5b:
06:10:74:a5:ce:56:c6:b9:29:a6:e8:bd:39:8e:6a:
a2:29:ad:25:8d:ae:c5:c5:c1:05:87:e7:0b:82:16:
93:16:ef:a0:9c:da:ae:05:0a:80:d4:dd:b2:14:9a:
5e:ac:45:f1:5c:7c:20:62:c4:32:17:d1:8c:77:51:
71:15:33:91:8b:46:1c:54:eb:28:59:da:75:59:80:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:91:45:C8:C0:7F:A6:75:A1:42:84:4D:0D:D8:BB:EC:B3:59:44
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1f:f0:97:bd:94:fa:97:38:ae:c7:c1:86:61:2d:87:76:f6:
95:87:68:ce:df:9d:a1:07:11:d5:a9:36:e1:ca:6f:fb:2f:20:
d4:50:c8:a3:85:55:6f:e1:ed:8a:5e:dd:35:17:b1:d3:13:50:
33:4a:2a:25:27:f6:3b:18:96:9c:a0:65:75:1e:38:ee:21:96:
38:41:27:40:42:3a:e8:06:22:fb:2c:16:27:5a:0b:a6:f0:ca:
69:26:72:64:75:65:0a:e8:a8:fa:d7:9b:85:66:d3:d9:ba:24:
9a:c9:18:2c:3b:db:df:c5:25:8c:57:c6:14:cd:c2:d0:20:0c:
c6:b9:89:9d:b8:86:6a:e5:0d:03:de:48:6c:0b:5e:29:40:55:
a3:3f:8a:a2:40:03:ce:9c:d0:70:ca:1e:c7:54:09:15:4c:8f:
a2:4e:a1:af:f2:c8:50:eb:3f:8b:23:e4:68:f9:a7:f2:0f:9b:
e6:19:fe:6f:fd:68:0f:e4:08:10:eb:4e:47:e2:b5:5c:8d:ab:
5f:0c:19:df:cb:bc:6a:9c:eb:e6:d4:48:95:8c:dc:5d:df:6a:
b9:2f:61:f9:b5:ab:a0:f9:72:91:73:6d:de:19:d4:23:42:02:
43:be:eb:a3:54:3f:0a:78:b6:57:a8:fb:d2:e7:ba:89:be:5f:
bb:fd:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:39 2025 by rpki-client