Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: hchvugdwtpsWQdds8yQSKxXPnD6a75N4B5Kr+VOyMoU=
Subject key identifier: 9C:18:68:B4:13:D4:8C:C7:63:43:40:2C:B5:91:3C:76:0D:48:1E:61
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 019A71EE846DD84C713907D7D48D2D4BD76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 11AA
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: 0rPvN01eFQAX9m1KlEQJOjEybfe3PgDo1SN/e97J2ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:84:6d:d8:4c:71:39:07:d7:d4:8d:2d:4b:d7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=9c1868b413d48cc76343402cb5913c760d481e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:bd:c5:ff:6b:79:a9:49:fc:3c:b9:72:8b:
e4:d5:91:68:bc:88:27:a8:91:6a:bb:8b:c9:95:e1:
bc:f9:c6:81:9d:81:e6:88:a1:79:1d:37:c2:49:57:
bc:e8:17:39:ae:cc:13:ec:e1:01:b6:46:74:7a:8f:
a8:51:0d:e4:a2:3d:e8:96:ae:c5:91:c7:81:29:2c:
40:64:d4:77:8d:5f:66:8f:8d:77:1a:8e:0a:9c:e3:
5b:81:0b:03:9f:a0:67:1a:14:9d:bb:02:40:0c:71:
10:48:57:a9:1f:51:85:0f:f4:b7:ed:5e:bd:8d:1c:
c6:d4:d4:af:bd:67:e6:a9:cb:a8:c9:6f:0d:b4:e5:
60:c6:16:24:7e:30:48:da:9f:71:ce:45:15:15:12:
c0:20:13:6e:63:ef:40:72:f8:e5:47:e4:64:cd:78:
f6:de:ae:ed:e3:e2:e6:45:ee:dc:93:1f:1e:31:f4:
f2:89:45:6e:76:dd:17:53:ae:f9:71:4b:be:a3:09:
14:22:30:a5:4a:51:54:45:71:3b:53:42:78:82:70:
41:f2:e4:a5:78:28:f0:ce:95:9b:9a:53:50:f5:dd:
05:43:87:10:c8:72:51:e8:18:26:e5:5c:c7:35:e7:
85:3f:7f:ed:19:cc:19:1c:da:7d:dd:b9:1b:0f:8f:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:68:B4:13:D4:8C:C7:63:43:40:2C:B5:91:3C:76:0D:48:1E:61
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b4:10:39:f6:90:8d:9a:7c:fd:40:60:d7:65:f9:60:8c:8c:
3f:cf:b4:d7:b5:de:e0:26:35:da:af:ac:a5:e3:22:e8:08:a2:
21:ed:92:86:15:2e:aa:63:de:58:e6:73:35:43:93:df:6d:41:
f6:57:dd:a5:86:1b:06:5d:ef:68:de:36:03:5f:8d:48:d9:39:
cf:d9:6a:e7:cd:66:bf:99:bc:18:21:a1:8f:88:8e:25:78:17:
60:d1:a5:1e:1e:90:a6:f9:a2:5e:6b:e6:45:3d:02:76:98:a1:
29:4f:47:03:76:65:35:07:a6:93:55:96:04:a1:e3:3f:71:14:
69:dd:38:ec:81:10:3c:99:76:24:cb:be:28:67:0d:0d:f5:ec:
be:0d:55:3e:ab:5a:ad:65:ef:03:05:04:17:d0:e3:b7:84:80:
46:cb:75:97:47:43:b9:d2:dc:ef:a7:0b:2a:d3:47:da:ac:2a:
71:e3:4c:0a:2f:c3:0f:66:c7:94:29:3a:96:78:08:2d:bc:ca:
46:71:4f:47:a8:1a:1f:db:5b:5e:3d:0f:9b:3d:5a:2f:8c:53:
17:ef:05:c0:eb:50:0d:fd:96:99:a3:01:d9:a5:05:60:b5:c3:
07:4f:22:e9:82:1e:c2:52:a5:81:80:05:af:31:e8:38:91:53:
e9:1f:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:56 2025 by rpki-client