Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: NpKUmhCKyPhbzyAChxx53nzjEveNITUFf0zIpNtAvME=
Subject key identifier: 66:F9:6C:3A:32:29:91:29:E9:CF:AE:3F:CA:CF:2F:70:9C:76:4D:60
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 019A7293550F4DD6834F9F3188D1E74954A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 13C1
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: +E92NkCULVWDoIXrwh3qEZHIPBaf5kiuc5BVes8FAgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:55:0f:4d:d6:83:4f:9f:31:88:d1:e7:49:54:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=66f96c3a32299129e9cfae3fcacf2f709c764d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e9:a9:3f:bc:18:ed:af:33:24:50:3e:dc:76:
3d:0e:5f:2d:6d:75:88:88:f8:1d:0a:62:72:8f:43:
b5:d8:ec:d3:02:cf:63:89:c0:92:17:a5:23:1f:25:
7c:79:94:7a:c0:08:fa:59:a1:5f:58:43:cb:72:9b:
64:9b:0d:ea:6f:2e:36:95:e3:ef:84:c0:53:a3:54:
f4:55:93:3d:00:7f:28:e7:17:37:42:f8:07:87:6a:
4c:0d:3a:04:27:e4:8b:f6:da:b3:a2:a4:71:ed:72:
41:ea:d2:0c:b5:49:b9:0b:3b:6d:11:56:7a:0b:9a:
f5:45:32:a0:c3:50:3e:5e:bb:5e:ad:62:ea:e6:d5:
1e:49:84:44:46:55:c9:ce:9b:36:69:c9:5b:6c:80:
36:4e:14:b5:62:5a:92:7f:14:72:e4:10:95:7d:b2:
e0:a7:e6:8a:fa:9e:7a:47:a9:49:1b:63:45:88:ff:
e9:e7:e7:77:48:01:67:05:6f:31:a8:f3:96:db:26:
08:4d:8c:d6:92:73:8f:7f:05:4c:f5:37:e9:e5:5c:
e8:d8:29:26:f8:00:2e:00:37:d3:9a:b8:00:e6:a5:
6d:09:b5:89:e7:6c:8c:0c:e2:59:e3:31:e6:d0:0b:
8c:4b:6b:3f:83:55:64:b2:e1:ae:3b:95:04:8d:1c:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F9:6C:3A:32:29:91:29:E9:CF:AE:3F:CA:CF:2F:70:9C:76:4D:60
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:25:88:70:63:e2:f3:a1:f0:b7:fc:7e:27:d8:6b:7e:a3:ea:
ca:b5:84:28:42:03:61:46:b3:0e:f3:96:60:ea:ca:65:e3:68:
91:dd:3b:50:4b:e4:49:5d:0d:53:6c:71:07:eb:bf:50:db:3b:
86:0d:a0:08:de:75:31:b6:e1:ac:4b:9c:fc:18:bb:49:6a:72:
83:75:f8:2c:06:e9:56:fa:03:b6:c9:2c:02:6d:01:60:ab:43:
ff:6e:20:f8:b2:31:d4:0a:ca:d2:0e:80:b3:0d:ff:4b:58:ee:
b5:24:52:6d:0c:2e:83:a8:91:84:63:89:43:0d:35:b4:09:17:
08:31:ed:4d:43:61:c8:fc:44:da:97:b6:cf:f4:e6:70:0f:20:
4b:d6:4c:3a:98:9e:e2:ff:92:21:08:79:56:fb:03:7b:b0:f5:
13:46:62:71:90:7e:01:d5:21:58:a1:e6:33:f9:93:61:a0:83:
b7:50:ce:68:9c:61:ce:6c:be:34:02:f9:25:77:a9:ef:34:a9:
37:86:4b:6d:92:e2:ae:20:5b:fc:ec:d2:44:cf:dc:9f:fe:d1:
ed:71:f6:8c:73:55:53:d5:2b:09:3e:84:52:47:ee:b2:ab:1d:
5f:6c:49:2c:e2:93:41:09:20:4b:c6:7f:86:70:5d:bf:e0:e4:
ee:19:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:51 2025 by rpki-client