Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft
File: pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft (raw, json)
Hash identifier: 90ue6as08DLipLOBnJ1b27rH2JEafzJ6ZH7ze4Tu9CE=
Subject key identifier: BA:35:AA:FF:C1:31:D5:B1:A9:65:BE:31:C9:9E:9A:65:AB:FF:11:C2
Authority key identifier: A4:D3:80:41:AE:4E:73:15:77:24:AA:9F:3E:E0:43:05:E5:F1:28:34
Certificate issuer: /CN=a4d38041ae4e73157724aa9f3ee04305e5f12834
Certificate serial: 019A71B8037B6CD5976A49FF7B5F1AEBE7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft
Manifest number: 16EF
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: pNOAQa5OcxV3JKqfPuBDBeXxKDQ.crl (hash: szs04dFAR1y4aSUhAjWCUSrh73y+HyG0PS4kH4dXFeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:03:7b:6c:d5:97:6a:49:ff:7b:5f:1a:eb:e7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d38041ae4e73157724aa9f3ee04305e5f12834
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=ba35aaffc131d5b1a965be31c99e9a65abff11c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a7:b8:be:6c:d7:5a:a4:56:4d:8e:16:b2:5d:
7e:9d:72:5a:a1:6b:ec:10:6d:a5:2b:36:d0:4b:90:
5f:ea:47:10:72:df:ed:f0:dc:04:be:fd:83:24:e7:
70:e5:9f:4f:64:93:35:95:a3:24:85:d5:dc:c3:8b:
e7:ae:45:bf:d2:57:7e:08:04:54:4c:06:8f:3e:8f:
15:a9:f9:7e:bf:93:b8:dc:cb:2a:14:f5:77:81:32:
d0:7a:81:be:fb:ae:58:32:0a:a7:11:37:94:1e:54:
00:d9:97:38:c5:94:f9:73:7e:e1:2e:14:e2:91:54:
49:66:c3:f6:f9:8a:ee:5a:d6:f6:e2:c8:0a:05:e5:
82:33:2c:6b:28:61:c1:f7:74:54:6c:7c:a7:b4:76:
b8:58:7c:b3:81:2b:40:02:a5:1a:f3:d2:f6:75:bb:
26:6d:0e:d4:22:9d:81:6e:d9:04:2c:08:6f:73:2f:
11:e9:3b:4b:55:17:58:07:5f:5c:2b:46:52:94:b8:
70:75:dc:52:98:41:b9:8f:82:70:91:1d:69:31:f9:
e0:59:4c:b2:c1:ba:12:85:ff:5e:6c:15:a6:ee:c6:
3a:82:e0:2f:96:0d:51:13:c6:0b:b0:f3:61:a6:4b:
60:65:cd:d0:f2:4c:5d:a3:29:b6:4a:cd:1c:fb:c9:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:35:AA:FF:C1:31:D5:B1:A9:65:BE:31:C9:9E:9A:65:AB:FF:11:C2
X509v3 Authority Key Identifier:
keyid:A4:D3:80:41:AE:4E:73:15:77:24:AA:9F:3E:E0:43:05:E5:F1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:28:b3:d2:80:67:0b:89:cc:e8:8d:27:16:f7:a2:91:1c:5c:
dc:ee:2c:6d:1b:a6:d5:5b:a6:e5:94:40:7a:f2:f7:51:a0:fe:
dd:b0:cf:c2:77:cd:c9:5e:9f:94:35:01:3c:d6:b4:df:c7:82:
f6:de:bd:63:64:35:14:29:44:76:1b:d3:59:3d:99:86:3f:b2:
85:d2:60:f1:61:05:36:a5:ba:f8:60:a3:71:33:54:5b:d2:28:
61:df:e3:fd:ff:c8:3c:04:6f:66:fe:59:4c:70:59:c0:2e:40:
07:07:23:dc:ba:4b:2b:22:15:17:a7:99:2c:bb:53:ef:01:85:
e8:b2:67:63:a5:e9:a2:55:9b:88:86:6c:fd:4a:8f:36:b4:3e:
48:ad:7d:69:d6:39:fa:09:fd:91:ed:82:62:dd:64:f6:17:2d:
3b:b7:4f:ad:c7:23:04:2a:c4:c0:72:94:2f:0b:9a:d5:cd:de:
0c:69:cd:20:a3:f6:e8:85:3d:16:74:15:8f:c7:f1:f8:a6:72:
98:0b:39:a0:e2:d7:de:c4:78:0e:ad:dc:bb:6e:e8:38:fb:79:
bc:44:e8:fa:f4:2b:5c:30:1b:9e:85:f4:96:74:17:56:eb:63:
69:20:a2:36:53:b6:de:e4:50:f3:87:29:a1:3c:c6:32:5c:ca:
c2:9d:53:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:27 2025 by rpki-client