Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft (raw, json)
Hash identifier: Iv6xh2ANxA8SSKzIcFe+IQZ0uTcVDKVm1TRBYNP3XwE=
Subject key identifier: 16:46:7A:95:74:EA:F3:7A:5F:51:3A:7E:47:B5:8F:CD:75:67:84:24
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 019A71499112A893C9A9402ECFC8855A9950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
Manifest number: 94
Signing time: Tue 11 Nov 2025 05:00:37 +0000
Manifest this update: Tue 11 Nov 2025 05:00:37 +0000
Manifest next update: Wed 12 Nov 2025 05:00:37 +0000
Files and hashes: 1: iLByoUx0bSCHlK7naUf7Pjeg10s.roa (hash: p3s+AOmmmdMwW9p+y2A48IFtADeAkvA1dJFhumD2cdE=)
2: pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl (hash: hy4dJDs4DHdlh65MSqovrWgO7DEI8kB43oa28M9TKWY=)
3: r_gNy_NosPTOUZDPM9v1Nr4pMtI.roa (hash: rrscO3NmKjsybDb1fyB6oQll5WC+7i7OHcmPMCVOfDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:91:12:a8:93:c9:a9:40:2e:cf:c8:85:5a:99:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Nov 11 05:00:37 2025 GMT
Not After : Nov 12 05:00:37 2025 GMT
Subject: CN=16467a9574eaf37a5f513a7e47b58fcd75678424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:3c:8c:67:b2:87:da:21:31:d0:48:8e:5d:
e3:10:d3:fc:ed:23:23:65:82:bb:ee:60:06:c4:b0:
e1:a9:fc:d3:68:62:91:0d:7b:b8:6c:05:7e:06:09:
47:1f:2b:68:32:95:d9:2e:cc:db:62:60:03:4a:2f:
d3:d2:24:53:13:ec:cf:7c:f3:e1:e0:f3:76:8a:a9:
76:a3:d2:be:38:3b:ed:42:13:66:e4:18:82:7d:a5:
a4:8a:34:80:0b:ff:f3:34:17:5f:8d:bf:ad:3a:1c:
33:ec:a7:09:c0:0b:e5:90:e9:6d:cf:e0:34:fa:aa:
1c:27:59:9d:7c:87:fc:e4:b4:f3:22:0a:38:92:b3:
e7:e5:3a:13:07:6f:35:2a:f1:cf:83:b0:2f:de:99:
13:4a:db:a0:1a:5a:c7:a1:eb:43:f3:6e:54:4f:9c:
29:14:f0:9c:c4:07:0e:38:69:30:e4:30:a1:d3:a7:
53:e4:40:48:92:c6:92:59:41:e9:ec:09:a7:39:34:
8c:70:82:90:a0:04:48:63:27:e7:47:c3:7e:12:85:
23:0b:4d:24:92:72:79:ef:17:e8:7f:ef:d6:23:c4:
b0:09:38:f0:09:50:a7:dc:43:ca:b9:56:58:6c:11:
bf:c2:9e:a4:50:91:d1:f9:79:23:b7:85:a1:23:c3:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:7A:95:74:EA:F3:7A:5F:51:3A:7E:47:B5:8F:CD:75:67:84:24
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cc:e0:ba:1b:14:5b:28:c4:c9:82:2f:a4:5c:9d:69:55:7f:
e1:04:c2:87:57:01:4e:99:1b:88:48:c9:49:91:c6:79:c8:e0:
12:8b:69:c3:35:f1:e1:db:03:af:57:96:da:50:a0:16:49:83:
03:3a:7e:a7:8b:5c:fc:01:cd:a8:43:1b:05:25:cf:3d:3b:63:
43:2c:e5:02:1c:4e:be:50:11:0e:1e:8e:f2:1a:1b:39:d1:79:
2d:64:61:93:71:47:d7:37:79:a4:cd:90:ff:86:99:90:d0:fb:
84:9e:67:5b:c6:d5:73:83:f1:f7:60:89:8d:c4:de:ba:ff:08:
fd:4d:0d:73:c6:c0:78:3a:28:c4:f0:18:a0:68:a4:cb:92:75:
1c:bb:2d:5d:c8:a9:a2:e0:ec:aa:68:ab:ff:6d:9d:4d:ed:88:
a3:e5:21:c8:95:06:ca:64:00:a5:b4:5e:bb:2f:48:5f:84:28:
34:f9:b8:45:a4:5f:f6:02:df:e2:0f:62:d7:3e:99:1d:cc:e9:
8a:0f:c6:a7:b6:96:7a:91:10:a4:ff:c1:96:90:0b:16:00:da:
e8:5c:b3:89:ad:95:1e:ee:c8:a5:ed:11:1e:9d:59:32:0f:0a:
f8:eb:8b:65:ea:9f:0c:e9:ea:6a:e3:65:5e:52:8e:e1:5a:bb:
18:b3:4d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:03 2025 by rpki-client