Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: h8sa2wh0Je0r+Lzuc0CC1CfE3D6DKQFeys39NrKDhYQ=
Subject key identifier: 65:64:7C:0A:E4:38:A5:FB:CE:A8:A9:CF:BA:1A:9A:50:CF:E1:FD:92
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019930EC8048A9C933DF616549AAD4B1D3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 12
Signing time: Wed 10 Sep 2025 00:00:29 +0000
Manifest this update: Wed 10 Sep 2025 00:00:29 +0000
Manifest next update: Thu 11 Sep 2025 00:00:29 +0000
Files and hashes: 1: NTeWwEDeDNQ8ivCGH_nj2iuXw7Y.roa (hash: XwWQK6Ul5GFpqyS9S7VFbZnH3vrognGqpWS5B/g4vtM=)
2: nDjykDgCRY5PJeZrLhezjP3d1sg.roa (hash: f6z3v4pV6tnSGxv48rgOnvHwC9qgyyjVMA6AIzAEA7k=)
3: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: gKgLFe0Sn9N105z8WD5AVmCW8EEW1KyM1DbIf7OQUQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:ec:80:48:a9:c9:33:df:61:65:49:aa:d4:b1:d3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Sep 10 00:00:29 2025 GMT
Not After : Sep 11 00:00:29 2025 GMT
Subject: CN=65647c0ae438a5fbcea8a9cfba1a9a50cfe1fd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:43:15:19:9e:9c:5b:7d:31:50:02:60:b7:
dd:98:22:6a:02:33:f0:00:18:fc:64:4e:a7:5a:5a:
b4:95:7c:5b:99:a6:bd:70:ab:c4:e0:29:5a:aa:1a:
91:cb:27:9d:65:e0:4c:29:ef:49:a6:d0:1b:f5:78:
84:24:55:b2:18:3f:b4:ef:34:f3:72:6e:e3:0f:6f:
f6:7b:02:7f:09:59:d7:1f:2e:a0:ff:12:d2:6d:81:
57:07:3b:96:21:57:ec:ec:bb:05:49:97:2a:dc:79:
01:ca:d9:08:72:e5:94:7f:eb:25:c5:e8:52:9a:26:
21:b9:45:26:e2:36:e5:86:48:4c:05:fc:5f:f3:1a:
80:1e:c4:db:50:b3:ba:8d:ea:43:b5:c5:61:7e:14:
af:5d:ee:31:5e:f3:d9:10:68:29:b8:ab:0d:0c:b8:
b2:bc:3a:7d:61:6a:ac:f6:82:49:e7:30:17:a5:56:
7f:c4:f8:ea:1e:58:88:de:4e:22:ce:e8:a0:bc:a2:
56:4f:51:93:4e:4e:b7:f9:55:40:2a:fb:34:5e:41:
9d:24:59:37:d0:33:bd:6f:e5:50:b6:01:9e:c9:fc:
97:76:7a:98:2d:b0:e6:5f:a1:f9:27:75:7d:c5:de:
ae:e0:da:f3:d4:63:bd:58:99:c3:f6:dc:d4:23:22:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:64:7C:0A:E4:38:A5:FB:CE:A8:A9:CF:BA:1A:9A:50:CF:E1:FD:92
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8d:ed:90:c6:7b:7c:e8:b9:ad:e6:8f:5d:c7:34:fb:d1:06:
8d:44:7f:b8:77:09:d4:08:a5:1b:23:61:8e:c0:e1:a8:c5:80:
ab:53:12:54:f4:94:54:a0:c8:6f:01:3c:7c:4c:8e:8b:45:cc:
2e:64:91:fa:4f:03:8c:f4:96:1e:cb:02:50:8f:b3:a5:aa:3d:
8a:5f:ba:0d:f6:67:14:d5:30:db:64:56:e9:35:a0:cc:7a:00:
57:26:6c:aa:14:77:68:0a:9b:e8:5e:d2:d3:8a:f7:f1:51:95:
b1:95:3f:e0:91:61:5e:c3:43:db:a9:97:c8:cb:e3:de:c4:81:
30:b2:2c:37:de:58:f7:fa:b5:af:c5:ed:24:a8:d2:e5:b1:5c:
6e:84:30:5b:96:70:e2:d7:49:34:42:db:ec:26:47:8e:3f:69:
f7:1a:ab:eb:20:78:42:64:0e:35:0a:c0:ab:16:ab:e7:32:4f:
a6:d8:c6:a0:02:65:2c:ea:04:01:11:91:41:a8:b1:7a:59:da:
72:1b:52:55:70:aa:b3:a8:54:a3:22:64:df:d2:a2:95:33:54:
a8:5e:c2:a6:ad:d1:cb:24:e9:4f:d6:b4:70:a0:42:1c:4f:96:
42:6f:b1:09:8c:d9:72:33:f2:26:80:e0:8b:95:ef:76:d9:67:
15:1f:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:52:36 2025 by rpki-client