Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: D2aXSqH+9EttHiP/MmOfF2cSmrORQjuEtRKQxTwGq1M=
Subject key identifier: 75:38:C0:D5:AD:3B:3C:47:BF:E6:2A:F4:6C:B6:90:5B:04:E2:12:5E
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019A725C555CD802373A081BA6052B1081E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: XQe8rzzJWV2gHI0dSlBqMK1b0yhsvw2xZDdMfxlz3iY=)
2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:55:5c:d8:02:37:3a:08:1b:a6:05:2b:10:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=7538c0d5ad3b3c47bfe62af46cb6905b04e2125e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:e5:b0:02:61:f2:25:5a:02:89:95:14:84:
ab:00:4a:d3:69:30:c6:27:8c:c6:00:a7:7f:9a:d1:
03:46:7b:83:8d:1b:e6:aa:b2:a7:c6:7b:03:7c:eb:
49:2e:42:14:b9:55:b7:22:33:c0:1c:73:b2:ab:5f:
2e:e3:da:3e:ac:39:7d:b1:a6:ed:dd:83:5a:cf:14:
9f:ad:3f:2c:02:96:cd:57:4e:1c:03:ec:88:f0:7a:
ef:33:96:c5:c6:f2:eb:ac:49:e8:44:e2:4a:48:57:
bd:aa:df:a8:e7:ac:04:ca:36:97:70:ff:75:d9:2c:
3d:90:28:e6:0e:da:0a:7e:ca:a7:2b:4d:d1:a4:67:
ce:db:39:7a:9e:d9:2d:25:88:a8:9b:9a:2e:06:0b:
91:ab:af:9f:32:ec:b7:5f:81:66:3b:82:e7:47:be:
91:90:37:79:61:e8:30:78:4a:a6:64:c8:c6:d5:eb:
11:52:51:1c:2a:fd:fe:be:21:a2:81:d0:3a:f3:e7:
dd:0d:fd:95:3a:8d:3a:64:c7:76:bd:dd:c6:85:ea:
49:0b:e5:25:31:01:ec:7b:47:8b:52:2b:7c:12:11:
54:52:94:86:f3:2b:2f:85:08:b2:f1:63:3d:09:99:
63:80:25:5a:a3:88:09:19:a4:b9:0f:e4:16:b0:7d:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:C0:D5:AD:3B:3C:47:BF:E6:2A:F4:6C:B6:90:5B:04:E2:12:5E
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:79:61:51:2d:5f:cf:21:a1:0a:6f:d9:88:4f:62:95:5a:fe:
27:7c:14:a6:98:f4:b1:ca:7c:16:09:53:39:be:7f:0d:bb:18:
f4:06:35:1d:0a:69:43:2e:e4:c3:ab:3b:6b:cc:69:18:8c:b6:
09:ae:84:ad:51:1d:64:68:41:bb:57:e1:9d:3b:3d:9c:4d:da:
67:57:1e:f8:0f:f8:14:9b:78:b1:3c:40:f1:2e:4b:b8:3a:08:
e6:df:ff:a5:65:10:27:7d:2e:a3:08:76:80:64:2d:ca:c5:df:
fa:3b:09:08:cd:33:8f:f9:b0:ac:c3:23:e6:f9:d9:8a:30:ca:
92:7f:85:f2:4e:1d:71:5b:2d:9e:5b:1b:1a:a4:c5:5b:58:f4:
11:b8:49:5e:32:39:43:65:f6:8f:4f:8d:32:e6:16:59:67:f3:
f7:1f:15:7d:23:66:92:ca:ba:4f:c6:7d:cc:18:3a:3c:2d:84:
2d:71:92:43:27:65:34:0d:76:8e:f4:45:2e:f4:4e:b4:a2:24:
72:a8:56:53:46:6d:7a:fe:fa:cd:dc:0a:3a:02:cc:b1:75:f3:
ca:a9:be:db:0f:ef:af:a4:d0:55:73:41:a9:79:2b:8e:4c:fa:
b6:c0:72:7f:67:d2:23:fc:2f:b6:b0:76:f0:c4:e9:af:7d:d2:
0b:7c:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:18 2025 by rpki-client