Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File: pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier: SnLHYLLS74fgTobhIxjz9cKdHit6KhH6ty0dICqdlws=
Subject key identifier: 09:13:49:6A:D4:9C:F1:68:DD:22:FE:25:17:F2:6D:DF:F2:5D:0B:79
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial: 019A7149D1E91A7A69E26687FE4BDAB3352E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: b7xzt+t+sbtYdrj+jW8mlktxMDJkkorhEV7YCQ1xxwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d1:e9:1a:7a:69:e2:66:87:fe:4b:da:b3:35:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=0913496ad49cf168dd22fe2517f26ddff25d0b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:f0:c4:15:4c:e8:8e:23:6b:cc:39:9b:ef:
d1:36:ab:e9:c5:42:de:a5:06:c7:17:8f:9f:83:a6:
08:63:21:03:87:ab:c7:69:ab:6e:22:df:03:3b:33:
16:da:71:7c:ce:f5:15:08:f5:e3:e0:96:19:fe:0b:
ac:f4:15:ca:4f:33:c5:5b:73:64:97:16:f2:2b:97:
8e:ff:38:56:09:2a:6f:3e:77:02:a7:7d:ee:dd:cc:
a8:b5:65:ac:47:9d:96:f8:1a:d0:13:ae:f2:f8:b6:
8f:5a:3f:48:06:66:4c:28:9c:4e:2f:fc:9d:95:cb:
52:04:b2:5a:b5:ff:f1:9e:d5:56:6c:d4:fd:1b:71:
3f:9e:cd:91:05:fb:89:28:d7:70:bc:38:8a:09:02:
aa:57:5c:ac:33:e1:52:87:8d:31:d3:8a:d2:f0:9d:
6d:35:63:17:73:60:ca:21:60:c0:c1:ad:2a:ef:42:
13:8e:af:e1:8b:6e:a6:13:3b:a3:7e:35:ef:32:6d:
d9:87:53:7a:5a:cf:5c:71:7f:4f:25:b5:f0:68:7d:
13:af:84:d0:f3:e8:93:0a:72:12:1d:69:29:af:f0:
d0:3c:f8:f2:f7:5e:ac:87:cd:03:cf:67:53:87:54:
03:61:ab:5b:0f:96:34:10:e7:c3:48:5c:fe:10:6e:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:13:49:6A:D4:9C:F1:68:DD:22:FE:25:17:F2:6D:DF:F2:5D:0B:79
X509v3 Authority Key Identifier:
keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:35:47:0e:4b:0d:e3:dd:fc:ca:4b:39:49:65:ae:64:82:5f:
07:b8:65:f4:70:5c:50:29:43:49:34:8b:50:67:39:4b:39:e3:
59:be:28:5a:0a:e7:33:38:4d:ba:f6:76:1c:be:75:1c:3d:6e:
df:9a:18:9e:ff:72:b8:71:07:ff:28:5c:74:f6:06:fe:9c:be:
f1:9e:0c:ae:62:2f:e1:a5:0a:b0:e5:6d:c7:c0:0b:77:80:4d:
e2:38:40:92:33:3d:43:b2:0d:af:55:ab:4a:89:03:d1:a5:f6:
d7:14:e3:bd:24:92:47:1e:75:4b:3e:f7:40:65:69:40:fc:92:
76:35:12:fa:7a:4f:f9:2a:77:d1:fe:a3:b9:81:1d:c7:2c:27:
3b:34:7b:26:56:14:f2:52:00:63:d0:16:6b:60:87:b0:a7:ae:
45:a5:c5:72:0b:57:98:61:72:21:b4:3c:56:5f:24:95:78:a1:
39:8a:ad:0c:f6:a8:ab:7a:ff:24:fe:85:92:6c:51:95:90:1e:
06:4c:ff:36:40:9a:df:1f:ca:2e:23:0b:0f:28:b2:23:e0:a6:
40:17:6b:e4:f9:c2:e6:65:7e:71:5e:6b:d5:2b:d3:ad:39:f4:
68:5e:95:ac:fe:43:c9:02:a9:e8:6e:da:bf:87:05:61:df:c0:
2d:e7:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:19 2025 by rpki-client