Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
File: pVB1uOQuRRTvSdP-ovGHJk50-y4.mft (raw, json)
Hash identifier: doYEIOqc5H5NVH2xnPlWa6TIruf5Qos1nlWMqO+odEs=
Subject key identifier: 5A:A7:8C:F1:7A:62:EB:AD:70:D0:20:DA:47:BD:00:4E:A2:77:22:51
Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
Certificate issuer: /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Certificate serial: 019A1B74FF1F25E01EDDD59A15688EBB16BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
Manifest number: 038D
Signing time: Sat 25 Oct 2025 13:00:43 +0000
Manifest this update: Sat 25 Oct 2025 13:00:43 +0000
Manifest next update: Sun 26 Oct 2025 13:00:43 +0000
Files and hashes: 1: AHyerdr5uxL6xuyGfsHFNBv_XjU.roa (hash: /uUPID3475V6+DCQHcFaqhePNwogod/B8RgCIUOzHrI=)
2: pVB1uOQuRRTvSdP-ovGHJk50-y4.crl (hash: qwl0w5zYURBsiGJkpOIcsqFGYRYegZnMRVDnBf+XZk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:74:ff:1f:25:e0:1e:dd:d5:9a:15:68:8e:bb:16:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Validity
Not Before: Oct 25 13:00:43 2025 GMT
Not After : Oct 26 13:00:43 2025 GMT
Subject: CN=5aa78cf17a62ebad70d020da47bd004ea2772251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:22:44:e6:72:98:0f:ca:ab:8d:54:3a:58:
7d:05:01:fa:4a:0d:14:ed:8a:21:3b:19:60:cb:8c:
22:fa:a8:02:8c:18:d2:4a:7e:24:0f:80:58:a4:4f:
f9:b4:78:7d:52:c6:73:a4:7c:14:2a:47:aa:79:c3:
9c:d3:a4:84:72:79:82:42:56:23:af:62:25:f4:31:
1d:c9:c7:67:d7:bb:59:85:a8:d2:43:18:dc:d0:17:
ed:df:13:8d:ce:f6:85:98:d6:fe:2d:dc:a0:b9:87:
a5:45:51:8f:6b:f6:9e:ea:a4:b2:65:52:e9:d3:99:
fe:21:5b:d8:95:67:46:cb:57:d3:bb:9f:52:68:63:
5c:c7:35:ca:cf:97:64:b4:f1:8c:96:f7:30:03:63:
a0:17:fd:fc:b1:a1:15:31:f0:a1:9d:49:95:ae:6d:
23:61:6c:96:45:a6:f1:92:86:96:cc:aa:4a:71:fe:
b3:7d:9a:61:d7:d5:37:a5:32:64:dd:9f:0d:1c:f4:
80:0b:72:53:e1:67:9d:7a:e2:8d:88:57:6e:fb:3d:
9e:83:ae:aa:76:80:9b:35:77:c5:1f:15:c2:d3:dc:
e4:8f:49:67:02:8c:96:5a:e9:13:4e:9b:31:7a:ce:
06:38:30:15:26:82:5e:13:94:5d:1e:ef:54:0d:77:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A7:8C:F1:7A:62:EB:AD:70:D0:20:DA:47:BD:00:4E:A2:77:22:51
X509v3 Authority Key Identifier:
keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8b:87:44:0a:32:f6:89:57:4e:8f:97:69:be:1d:29:76:f3:
eb:f9:1c:6f:f2:75:5a:cc:1d:4f:95:7c:fa:44:b3:fa:9d:d0:
fa:b9:10:6c:82:a7:89:69:f2:51:b6:a9:b0:6d:60:30:e1:79:
c8:62:ce:fe:f8:da:2a:75:93:ef:7c:c0:d8:a1:25:c8:83:2e:
6a:2e:0e:cc:03:73:7e:3f:9a:9d:e2:76:e2:b6:32:b4:8a:4a:
14:bc:51:d7:12:31:0e:29:1a:87:aa:d0:4e:3b:e4:2e:20:c6:
13:8c:f0:90:ba:b5:39:ac:76:a7:f9:7b:78:27:7d:c1:67:00:
25:56:af:34:e4:15:55:62:df:dc:d5:a3:4f:aa:8d:45:5c:35:
b2:01:d6:ee:5b:7a:2d:a2:09:bd:6e:ba:03:06:a8:6d:60:47:
77:8b:12:f3:46:02:ed:22:fd:71:ed:f9:05:b3:6b:44:e7:4f:
f1:50:46:66:45:a2:e0:e5:4f:9f:72:8c:68:d4:16:86:62:31:
ef:87:06:86:34:75:e1:aa:fc:30:17:eb:7a:cd:75:fc:93:6b:
0a:08:8a:5f:ca:7c:cd:e2:72:08:4d:78:26:df:6f:d4:4f:a4:
90:13:9f:4e:da:18:bd:35:ea:d8:e7:1e:93:ce:03:92:bf:23:
0c:4e:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 15:18:17 2025 by rpki-client