Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: mKsfVbQWjCN5k9jYDSsqWIuTcXcKZJ+YEW5SIquOK0Y=
Subject key identifier: E2:FC:2B:FB:2A:C2:95:5E:CE:2E:64:EA:CE:F2:A9:C4:0A:9C:64:83
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019A251CEFA3B90669702B1CBBEB607BF8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 1422
Signing time: Mon 27 Oct 2025 10:00:44 +0000
Manifest this update: Mon 27 Oct 2025 10:00:44 +0000
Manifest next update: Tue 28 Oct 2025 10:00:44 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: 6QIKsXtln0dHbUSFKd+Z6syEtjLoKEAsarneM9HrDrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:ef:a3:b9:06:69:70:2b:1c:bb:eb:60:7b:f8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Oct 27 10:00:44 2025 GMT
Not After : Oct 28 10:00:44 2025 GMT
Subject: CN=e2fc2bfb2ac2955ece2e64eacef2a9c40a9c6483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:ac:eb:32:1e:47:8e:82:d0:56:fc:c1:b7:
0a:a2:aa:49:5c:e0:fc:e4:f0:6a:82:72:e7:39:10:
b3:08:b5:31:97:60:bf:6a:f7:ee:d3:8a:33:6e:07:
57:a9:dd:e5:26:52:20:3f:8e:f7:9e:56:22:fd:01:
7f:9b:b4:0f:37:8d:51:02:bc:f0:ad:87:dd:42:72:
d9:ad:a0:de:17:d0:ef:d3:fd:70:fc:91:41:da:f5:
0b:be:2e:3d:cd:00:ad:c0:fa:7e:9e:2d:63:27:28:
d3:aa:ac:ae:28:51:21:71:c1:10:ea:22:4e:40:be:
c4:80:9a:8c:0b:36:69:c1:03:98:8f:7c:24:8a:71:
a9:f7:77:79:7b:91:1f:06:b5:c2:bf:15:eb:80:85:
ac:ec:b6:46:b2:1e:a7:53:27:54:35:51:c3:b1:ef:
8a:dd:f4:af:95:08:a4:75:f8:6c:5b:93:d5:f5:a6:
a2:c4:f0:ee:bc:e1:41:dc:f7:a1:e5:c2:df:20:e9:
2b:ba:c5:13:ef:75:ae:af:44:e5:aa:fc:e7:af:60:
2a:26:5d:fa:9f:50:ab:7c:32:6e:af:7b:95:1e:58:
9f:38:9d:60:40:35:79:90:c4:8e:9b:71:f0:e9:b7:
e8:80:48:dd:f2:e8:9a:f0:4c:c7:56:9c:f8:75:e1:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FC:2B:FB:2A:C2:95:5E:CE:2E:64:EA:CE:F2:A9:C4:0A:9C:64:83
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:43:e2:33:e9:41:72:3d:4b:21:a6:d5:c5:67:e7:71:fa:4c:
4f:7c:cc:56:18:b5:67:1e:7d:98:e0:b9:45:0a:af:34:5c:f3:
38:58:7f:12:a2:ce:dd:63:21:84:d2:18:ae:38:f2:82:8a:6c:
83:dd:23:84:cf:fd:67:be:57:f8:bf:9f:4e:35:2a:c7:3f:5c:
eb:68:74:fe:67:1f:de:4e:40:63:2c:93:4f:d2:95:6f:1e:70:
4e:d6:0e:b1:8f:9a:6c:c3:28:32:2b:62:3e:7b:f3:42:29:8c:
ce:b0:48:08:b3:16:57:f8:9c:71:f9:26:7f:39:48:06:59:18:
30:bd:91:9b:ee:b8:d7:23:2b:a5:85:68:41:51:7d:02:75:9f:
4d:b9:9e:2f:d6:12:4c:6a:10:e2:fb:59:d5:67:d4:41:35:71:
e7:95:57:86:10:a9:73:bf:f8:73:88:f9:92:ea:ae:9b:89:a9:
58:2e:87:38:b4:62:b5:17:89:43:ec:bf:f5:00:b0:a8:e5:24:
34:3c:db:bf:c9:50:4b:2e:52:80:3f:ac:69:01:24:29:f0:6c:
0c:66:be:df:65:0b:2f:e8:6c:90:34:2e:a9:bb:99:71:c3:c3:
9b:b9:06:91:96:f4:da:a2:00:c6:47:62:f6:90:53:84:5e:94:
9c:95:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:37 2025 by rpki-client