Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: aSoajwBPJptH3izFouUOrgK16oKzCAIYFAR9kDbspWQ=
Subject key identifier: 9D:E2:30:ED:1C:4B:AD:60:2D:37:59:44:E8:D7:59:7D:80:9F:F2:41
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019A0A8115261F5C240048C58DB18C0E192F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 16E9
Signing time: Wed 22 Oct 2025 06:00:22 +0000
Manifest this update: Wed 22 Oct 2025 06:00:22 +0000
Manifest next update: Thu 23 Oct 2025 06:00:22 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: LyaBRPt43ZIzm7Pnfyw4UUAXY/pfEyWiNpum7TjliW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:15:26:1f:5c:24:00:48:c5:8d:b1:8c:0e:19:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Oct 22 06:00:22 2025 GMT
Not After : Oct 23 06:00:22 2025 GMT
Subject: CN=9de230ed1c4bad602d375944e8d7597d809ff241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:e7:bb:33:4c:f0:97:f3:80:40:b8:63:35:
e5:e0:fc:e0:16:6a:76:ad:89:53:ea:d9:38:12:f8:
47:9f:7b:04:74:87:17:88:48:17:87:2e:ec:a4:96:
a0:15:ba:dc:ba:ce:75:fe:03:e5:c5:ae:27:89:97:
bc:c5:c7:93:7b:3e:1b:01:f4:b9:d1:41:9f:94:19:
5f:04:ff:ed:44:69:91:ec:13:03:f1:66:70:ea:14:
a1:59:5e:18:e0:5d:67:2d:40:cf:37:ad:c5:ee:f8:
0f:a6:da:79:3c:95:0f:0c:ba:5a:04:7b:45:c0:e1:
3c:89:7b:c4:34:fc:f4:42:9b:cb:d6:ac:2a:90:62:
05:f8:51:fa:3a:81:5f:d2:86:08:b5:5e:25:99:e9:
48:45:c8:a0:d4:f0:e6:82:20:9f:8c:95:4c:2d:a7:
b6:6a:27:dc:81:f6:bd:f2:3a:95:f3:e6:6d:ab:8a:
c0:77:55:f7:d5:75:13:a8:8e:2d:b6:ec:dd:8a:c1:
a6:9d:30:5c:a3:ec:99:1d:55:01:98:37:d3:1f:4a:
e3:02:a9:6d:f2:1a:de:df:f9:d3:f6:d6:10:12:22:
17:39:41:cf:cb:75:94:f7:cf:45:ef:7e:73:bd:bf:
8b:05:6a:c9:32:62:40:4e:6c:42:f5:60:f7:39:40:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E2:30:ED:1C:4B:AD:60:2D:37:59:44:E8:D7:59:7D:80:9F:F2:41
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:18:61:83:a5:b8:2f:f8:59:3d:2f:9f:13:3d:4c:41:c1:34:
3c:fb:8a:32:c2:6b:87:74:9f:be:bd:8a:82:26:bd:47:33:d0:
cc:82:4e:0a:82:d5:a5:d6:52:b1:8f:72:78:c8:26:2b:46:a9:
ee:25:1f:42:78:5d:6b:af:da:a2:00:27:b2:02:c0:86:7e:e1:
b7:cb:19:71:f9:6d:3d:c0:a1:89:02:af:2a:7a:ef:c1:33:ac:
c8:a4:31:2a:72:b8:7a:e0:f8:44:ef:79:95:12:5b:fc:50:4d:
76:80:b8:8a:d9:61:5c:c9:ec:12:fa:c1:35:50:5c:88:71:6d:
d7:80:8f:7d:8d:cf:b0:65:5c:a1:4c:35:8d:ab:8b:80:2e:ff:
02:0c:4a:0e:9f:16:d3:f7:2c:dc:df:5c:84:75:5c:85:3c:16:
4c:86:c0:5e:33:cd:11:b6:cb:a4:5d:88:39:ea:f1:02:37:c9:
a9:d1:e8:ed:c1:ea:60:91:87:c0:c7:c0:b8:a1:a1:93:99:33:
47:cc:3a:29:b7:9b:6a:ee:6a:cc:f6:cb:e1:9b:7e:b7:0d:76:
f8:99:68:02:60:4a:ea:fb:a6:af:fe:ec:07:41:0a:c3:cd:f1:
d4:8a:c2:4e:2a:10:94:d7:65:8b:bd:f3:77:6a:41:65:6f:4b:
11:aa:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:28:02 2025 by rpki-client