Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: plni9l/8WS+2+5dE2cOtnZ4PmCplZ4+XqlJFJJ2Yiw8=
Subject key identifier: 45:9B:10:FE:4F:C9:71:40:47:BD:09:1D:EB:83:8C:5F:67:46:6A:39
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019A15E0503FC646E974B91E31E18D85E4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 65
Signing time: Fri 24 Oct 2025 11:00:13 +0000
Manifest this update: Fri 24 Oct 2025 11:00:13 +0000
Manifest next update: Sat 25 Oct 2025 11:00:13 +0000
Files and hashes: 1: QBmdu5DezxoxKGOkAZGRTHz_Ovo.roa (hash: FxhiZR0M8vGdibBrIWA/GLd0J4VZN3IOW0ocA5RR3YQ=)
2: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: oMHrGDomTdv5Fs8sfmVsQJNGWgo+UGcmyldbmdnlf3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:50:3f:c6:46:e9:74:b9:1e:31:e1:8d:85:e4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Oct 24 11:00:13 2025 GMT
Not After : Oct 25 11:00:13 2025 GMT
Subject: CN=459b10fe4fc9714047bd091deb838c5f67466a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:3a:63:84:58:46:2c:db:a2:9f:cf:de:44:
91:18:51:b6:fb:64:b3:74:9d:17:1a:46:29:49:f2:
d1:03:11:df:52:2c:78:b1:ce:1d:a4:98:a8:ad:e0:
6a:04:4a:18:2e:54:03:8a:31:28:d4:8b:8c:ce:19:
09:15:7e:2c:af:72:36:0b:c4:ed:c2:f7:69:48:fc:
dd:0a:08:0d:33:d8:9e:4f:8c:6f:02:6d:ec:f2:8f:
9e:72:6f:82:d6:2d:d5:d2:ed:6c:4a:6e:5e:9f:fc:
b1:1a:3c:47:0c:66:a9:97:5c:2c:dc:fb:b1:16:ff:
49:e0:1a:37:0a:d8:e7:1d:da:59:42:52:fc:44:d7:
08:2a:19:ce:ea:f5:9c:f5:49:6d:0a:37:65:19:d7:
8c:ce:aa:a0:72:93:41:9b:09:ab:0c:7a:05:25:73:
9e:6b:eb:d3:49:ea:74:d3:2a:78:59:b6:8a:8b:9d:
b5:6f:6d:7f:8c:df:d7:1b:aa:d6:37:27:d2:8c:bb:
37:2d:74:f7:b5:db:f2:48:89:dd:09:a5:bf:49:d8:
0e:79:05:d2:e7:23:09:19:5e:07:52:86:57:f6:5e:
4f:5b:db:c2:3d:32:9a:7d:af:c2:14:d4:12:e6:91:
06:21:73:9f:25:d3:46:f5:aa:f0:4e:a5:dc:1a:6c:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9B:10:FE:4F:C9:71:40:47:BD:09:1D:EB:83:8C:5F:67:46:6A:39
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:07:4c:96:28:95:b2:fc:ec:19:3c:0f:a5:e6:9e:b2:96:8b:
98:bd:02:3b:06:0f:d2:fe:d0:be:0a:9c:7e:66:5d:d9:e5:3f:
a3:7e:61:03:80:a7:fa:76:ab:fa:d5:80:cf:e4:6e:5d:e9:b7:
6c:b8:38:50:9c:91:16:c7:d3:98:bc:59:2c:84:4f:51:74:bf:
98:82:1c:6c:00:da:e4:23:59:86:1f:ab:34:18:6c:d0:58:e5:
17:a1:ac:96:d6:c5:3b:ad:de:62:06:bc:bc:f5:1e:79:69:b2:
8b:26:07:9f:28:f9:a8:4b:00:7a:cf:07:30:2e:ba:0e:c9:49:
9e:eb:d6:d6:7b:c8:42:ce:de:59:ba:e3:97:4f:4c:d0:71:73:
8c:f8:83:1e:c9:16:94:f8:a1:29:75:41:69:ba:ac:9c:4b:4c:
21:c4:84:3f:15:c9:c6:27:cc:22:5f:1e:0f:c5:60:69:c4:4d:
95:b8:dc:ad:e6:71:ef:4e:1c:33:6d:34:e6:f7:e3:48:ca:68:
3c:72:35:1d:a9:e4:f6:f5:d3:1d:ac:d8:df:f0:2a:c1:81:d3:
37:e8:53:4f:62:84:00:a0:de:fb:e2:54:55:5d:3c:f0:91:21:
e2:f6:4d:44:5c:78:66:83:46:d6:11:58:e6:95:7e:5a:f0:7b:
a2:31:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 14:28:02 2025 by rpki-client