Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File: p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier: ICrcR3vHP769AQIc+b15vFl1xsn3s4PGE4f6r/8lkoo=
Subject key identifier: 3D:69:D2:82:64:9C:48:56:FE:71:BC:E3:37:DC:1A:F4:97:9B:F4:DF
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial: 019A71B7A6EDBC7BE6C1B7ACD7327A7DF61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: UarbJunDzdiwKhPvp9z5bZiFyh6UuAGqLkMlXTQcJqo=)
2: zPOGOjbboaQbMeAXK6bmSX50QU0.roa (hash: OFCJwWf3DDsRtbtAfKkoaMdc4vMktJu9Jl985uyVWSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a6:ed:bc:7b:e6:c1:b7:ac:d7:32:7a:7d:f6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=3d69d282649c4856fe71bce337dc1af4979bf4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:0e:3c:bf:3b:e7:b1:64:11:a0:0e:49:64:
9d:3e:74:07:92:e3:0f:19:9b:99:96:01:fe:16:c5:
82:f8:cb:fe:c2:ee:81:89:7c:ae:f2:41:fc:7f:f0:
ee:4a:39:9c:5b:a7:65:31:d4:5e:62:ca:3e:e2:c1:
d1:a2:26:1f:e1:5d:62:95:bf:28:6f:3a:3c:86:2c:
eb:0d:9b:59:d8:5a:a1:80:17:df:b7:02:53:f5:71:
db:8b:2b:b9:7c:e5:c5:a3:7a:61:9d:3d:a4:ed:32:
8c:ff:40:c6:f8:76:16:99:78:8d:00:96:82:65:7e:
dc:c0:c2:ae:f4:ec:72:a1:68:99:a0:f0:c0:f8:96:
07:e3:a8:ad:3d:ad:e4:f3:fb:21:f6:aa:70:cc:d3:
f6:6e:cc:2a:55:cc:3d:9f:74:1a:f6:95:ae:5c:c8:
1d:67:39:2c:c8:bd:17:d9:0a:3f:c3:77:66:0f:06:
3b:9a:65:be:44:a1:50:75:fd:6a:42:f4:38:6e:c0:
a3:ff:26:2f:8a:71:1e:2d:f8:b9:c2:69:05:47:c1:
89:f3:9a:fe:f1:82:9a:f9:54:7e:09:59:87:02:fa:
b1:b6:a6:f6:30:f3:f5:db:6d:af:69:4c:64:79:b2:
11:3e:e0:3c:fb:7f:3f:23:33:0f:60:de:4e:d0:c0:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:69:D2:82:64:9C:48:56:FE:71:BC:E3:37:DC:1A:F4:97:9B:F4:DF
X509v3 Authority Key Identifier:
keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a9:97:5d:00:56:17:bf:31:71:bf:46:93:30:cb:a9:2f:88:
d1:a5:fe:b9:0a:82:50:41:34:64:bb:c3:a4:67:a0:82:f3:da:
f5:98:7e:fc:e9:44:73:d8:88:00:45:c3:9d:9f:2d:35:00:a4:
66:2b:f1:5e:7b:f1:00:4a:47:dc:18:92:60:f5:51:4b:85:b8:
92:3c:8b:cd:f2:b6:71:ea:cb:e7:3e:b5:80:55:c8:63:40:4b:
00:34:59:0c:3f:a0:95:da:57:1e:9c:6a:5b:3a:53:41:92:67:
f4:77:2f:2b:d1:46:14:75:61:9f:fa:cc:d0:ed:80:55:53:16:
84:bb:14:84:7f:a8:2a:c7:7c:c2:df:9a:3e:9b:84:ef:58:6a:
35:77:83:09:95:84:f4:60:9d:46:02:09:c2:e5:72:c1:da:e2:
80:4b:fd:cd:2d:32:c8:ee:23:52:e5:a0:4e:e5:e4:c0:f5:39:
89:51:04:9f:c2:57:76:2d:c8:1a:82:d4:10:85:25:b1:ef:dd:
6e:3f:78:c6:24:47:4e:a4:73:59:c6:bc:5a:03:2a:e3:be:66:
61:d8:4f:8f:e1:57:95:68:36:51:3c:ca:bd:ac:69:01:9d:16:
c5:e1:3a:cd:fb:d2:02:65:b1:74:c2:e4:eb:6b:3b:31:c0:7b:
fa:df:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:55 2025 by rpki-client