Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: 2lwSrN0KWwUTNF9Hy9MQGsmXVHJQOnqPMrrdRTl2L38=
Subject key identifier: 61:D8:69:22:E4:23:A2:3B:F0:6D:15:C3:18:74:A0:60:C8:95:91:ED
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019A21E4E39BEDD970AD36E21A2EBBECAD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 07F4
Signing time: Sun 26 Oct 2025 19:00:39 +0000
Manifest this update: Sun 26 Oct 2025 19:00:39 +0000
Manifest next update: Mon 27 Oct 2025 19:00:39 +0000
Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: +vdG2eyglSFW2o9X86/Q3iSj+3pmZmps7g7z2+moKsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:e3:9b:ed:d9:70:ad:36:e2:1a:2e:bb:ec:ad:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Oct 26 19:00:39 2025 GMT
Not After : Oct 27 19:00:39 2025 GMT
Subject: CN=61d86922e423a23bf06d15c31874a060c89591ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:86:52:38:c5:6a:02:9f:e6:36:a6:e5:53:
41:c7:c1:54:1d:17:a7:82:2b:d3:34:41:98:24:a7:
a1:c8:25:ea:db:0b:59:64:cf:10:da:83:79:7b:db:
6b:3a:cc:55:29:0a:c8:a1:3f:20:92:c8:23:8c:21:
9c:f9:36:8e:88:9e:2a:b8:8c:57:bb:67:e9:a5:4f:
73:b7:a7:cb:dc:ad:cf:ec:a2:62:03:e5:78:3d:88:
2a:ea:e1:b6:62:40:cf:5c:03:b6:df:8e:ce:0a:26:
c8:32:30:23:c4:c0:88:6a:13:07:22:5a:40:62:0c:
05:b6:a7:a3:cd:e8:d2:4d:b6:74:90:99:1e:f1:7e:
e4:c2:c9:a8:e5:60:a6:ed:26:cb:89:19:96:d3:5e:
66:32:f5:4f:35:eb:32:93:c5:88:9e:dd:ff:01:75:
eb:c1:4c:08:7f:ba:ea:a7:49:72:53:4c:25:8f:24:
0e:cb:d3:9d:a5:3b:c9:1a:b1:e3:d0:53:7f:1d:b8:
dc:07:b4:56:e2:2d:16:fe:74:30:80:c6:2d:63:03:
e4:96:7e:e3:bb:a0:f5:13:ac:5f:10:c4:e1:73:3e:
47:a4:d5:b5:91:8a:cf:d6:49:e3:67:f2:c7:52:74:
94:b0:a6:8e:42:cc:51:80:83:e2:de:5e:a8:54:ba:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D8:69:22:E4:23:A2:3B:F0:6D:15:C3:18:74:A0:60:C8:95:91:ED
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c6:0a:f6:3e:6d:9e:25:b0:ec:6b:0b:f6:a4:f5:bf:dc:ca:
79:f6:72:04:50:e9:7f:22:d2:29:9e:8a:a5:66:ca:b9:38:4e:
77:7b:34:9d:aa:64:77:77:4a:a5:f3:0b:1a:b1:ec:0a:22:72:
62:ab:c9:f2:f6:4a:d7:e1:1e:59:6a:48:33:f1:d5:f7:7d:f3:
74:86:5d:65:8f:20:2f:e4:4c:37:ab:4f:fb:ab:38:ef:2b:bf:
1b:f0:4c:91:54:3c:91:55:fa:c3:9e:46:50:22:e0:70:e2:69:
20:72:34:e4:5b:09:00:a0:12:d2:b1:0b:84:a7:56:b6:34:09:
7d:52:1a:9f:4a:66:16:20:8d:2b:ca:1d:bc:59:18:e4:cd:06:
8d:b4:3b:34:f9:df:76:76:7a:5a:8d:16:e6:c5:13:2a:35:08:
97:15:a2:b6:1e:6d:b0:3a:9b:6e:ea:80:cf:2f:05:9e:62:fe:
d7:e2:d9:8f:93:5a:5f:38:a0:ba:35:5b:41:67:ba:2e:04:e6:
d1:65:29:af:46:3c:ea:26:f6:d9:2f:c2:dd:7b:b7:43:90:2c:
c2:d6:11:6c:c4:f8:f7:18:ba:ed:bb:e9:05:80:41:97:86:c6:
bc:31:c1:fa:8a:f7:2d:24:d6:52:24:c4:c7:f3:1b:d5:a3:46:
20:29:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:04:06 2025 by rpki-client