Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: 5yEI1LPez6ScUhWdnY8Kq3o+5am6XIEuvbG/sF4hTr0=
Subject key identifier: 39:50:60:F5:16:BD:7D:9A:F2:E5:78:DF:A2:C5:35:18:51:B1:71:24
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 019A71B8F23BD38CB2F5ADDA43CA93D81E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=)
2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: toR92Q0pZ9TWXMFBz5oZ4faOsQ8fHRscGe3ffdldUY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f2:3b:d3:8c:b2:f5:ad:da:43:ca:93:d8:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=395060f516bd7d9af2e578dfa2c5351851b17124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:02:18:70:fa:7b:35:ba:89:fc:3f:8f:7f:
53:24:1f:99:eb:8e:cf:54:85:e9:a6:3b:65:1a:42:
0e:85:80:cc:81:9b:2f:3d:74:37:a8:c0:b9:e7:30:
db:4d:1c:f3:ba:10:7d:c0:79:e7:a1:f1:ea:f7:2d:
6b:cc:78:47:f8:f8:5a:45:e5:f3:f2:fd:98:6a:04:
f1:08:95:48:16:41:98:78:21:27:70:06:bb:37:e2:
5e:66:92:a3:23:02:ef:ba:50:39:3d:09:37:47:a0:
c5:77:6f:52:fe:66:1e:72:39:62:58:f2:b1:6f:ac:
ca:7b:2a:c6:26:87:52:50:10:22:90:c1:40:d8:15:
fc:18:ad:c9:b3:96:5e:0b:e4:62:bd:4c:65:83:8f:
14:90:9d:8f:ee:35:14:5c:c6:0e:5e:bc:b0:5e:e0:
20:b2:c3:a5:6e:8d:43:4f:62:81:e8:ef:1c:24:8b:
0f:0b:56:b4:30:7e:81:96:88:b2:af:e1:74:59:44:
6b:43:30:70:9c:25:1a:9c:dd:86:b8:9d:d3:85:70:
8d:7b:70:ad:9b:7e:a5:c6:ac:1b:48:01:5a:06:06:
a5:68:1b:52:c2:d3:79:4a:cf:98:cf:67:ce:f2:57:
9c:a8:af:ab:28:c7:b8:49:a0:d2:98:ce:39:bf:2a:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:50:60:F5:16:BD:7D:9A:F2:E5:78:DF:A2:C5:35:18:51:B1:71:24
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:05:b2:65:27:a2:f9:c2:f2:e4:ed:6f:a4:34:6e:0f:4c:44:
84:3d:ec:78:07:17:ec:69:01:15:ce:ee:46:40:d0:99:74:b6:
2c:63:c9:05:6c:c9:8b:0c:16:b1:a8:06:96:2f:ce:eb:5a:5e:
66:d5:2a:02:86:57:b7:c5:21:63:b9:ca:d8:10:cb:e1:ed:91:
b9:91:2f:87:fc:c8:0a:5d:63:ea:b3:77:0e:f2:09:52:f6:b4:
c6:b4:2b:42:04:ce:0e:e6:f8:fa:d8:fe:b2:a6:67:0f:e8:e9:
23:e6:e2:e9:67:d1:cc:c3:07:31:d1:09:a8:10:4b:31:3c:e3:
4a:70:a8:be:d9:bd:7f:69:b3:fc:07:32:c1:f8:18:16:f3:6c:
fb:a9:76:7f:cb:41:b8:d1:75:75:15:6e:b2:41:ec:55:49:e8:
15:3d:c8:ac:f6:c6:22:2f:09:65:46:06:85:db:8a:8b:41:c6:
f4:c4:fd:e5:c3:2e:95:1e:8c:4f:b4:85:77:0f:ad:68:73:36:
57:b0:92:d6:82:33:c4:9c:e2:17:d4:bb:eb:fa:3e:8c:b1:40:
57:bc:24:c3:3e:3e:88:0e:77:cd:79:c5:bf:b2:c2:6b:e5:6b:
26:43:d7:04:30:84:db:7c:7a:45:86:8e:fc:bf:9c:89:1c:a0:
2d:b7:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:56 2025 by rpki-client