Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json)
Hash identifier: NBh539BP0ZQ5mqABUaeJ7bzkIXTePrndeZNHMWuvP4Q=
Subject key identifier: 26:94:FD:79:92:E0:07:FC:7B:35:16:CF:CB:22:5C:D7:2B:31:E5:70
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial: 019A714A43E515DE9B19301340DD90BFD754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
Manifest number: 17
Signing time: Tue 11 Nov 2025 05:01:23 +0000
Manifest this update: Tue 11 Nov 2025 05:01:23 +0000
Manifest next update: Wed 12 Nov 2025 05:01:23 +0000
Files and hashes: 1: FCK5h5gubPMhZ3Rsrd7Tj4OARZE.roa (hash: 7f8n8xrs8z+GOmfg9rEL/AINEMlWtSmtFpMtGEwaqcw=)
2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: bys6PhTGxk+idOMivriAtgT15b0VwnBuPE8OrFpelrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:43:e5:15:de:9b:19:30:13:40:dd:90:bf:d7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Validity
Not Before: Nov 11 05:01:23 2025 GMT
Not After : Nov 12 05:01:23 2025 GMT
Subject: CN=2694fd7992e007fc7b3516cfcb225cd72b31e570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:2c:d0:7b:a5:57:22:3b:ed:d5:21:19:7e:
b6:e4:98:ca:e7:c5:95:17:93:28:08:d4:5c:f5:6e:
2f:54:94:5d:99:af:27:b9:da:1f:67:74:1c:42:a7:
b0:bb:48:46:d1:d3:87:e0:de:96:ec:ff:90:be:1e:
29:b8:53:f0:d7:a0:7b:f5:e8:27:0f:61:d9:70:33:
d0:db:00:fa:5b:7f:f6:d0:e9:9d:33:bb:40:79:69:
1c:32:c6:96:fa:6d:c3:d5:39:e2:58:7a:54:a6:af:
41:43:1b:40:93:ae:73:74:22:49:28:89:ec:2a:99:
56:39:14:0e:28:c7:27:32:79:37:3a:3f:51:9c:b0:
ed:86:a3:7b:93:8f:ab:22:0d:75:9f:f3:07:ca:80:
02:bf:f3:6b:80:5a:9f:04:ce:40:6c:29:1e:6d:30:
eb:e5:b8:e7:5b:ad:60:20:f5:da:64:b9:83:fa:7f:
2d:45:1d:1f:85:09:16:45:df:d9:38:2e:6d:98:c4:
b5:90:d6:58:8b:6a:af:5f:8a:82:14:cf:0c:ee:b8:
22:46:0b:94:43:7e:c9:34:50:76:d7:b6:9d:8b:56:
9d:c4:15:a3:61:a9:b8:fc:6c:37:4b:8f:65:2a:d4:
b9:b5:15:0b:6f:09:e4:bb:01:1d:72:b5:22:5b:e1:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:94:FD:79:92:E0:07:FC:7B:35:16:CF:CB:22:5C:D7:2B:31:E5:70
X509v3 Authority Key Identifier:
keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:f5:04:04:3e:ef:bb:87:3e:a5:ce:7a:62:1a:7f:1e:3b:82:
9e:8e:4e:b6:7e:1d:db:c4:ff:21:79:5a:a1:6a:c0:71:7d:f5:
88:7d:8a:3e:4b:a6:12:14:ac:77:4b:27:e4:3f:1a:21:47:bb:
bf:a2:59:f6:6d:c2:0e:b4:26:71:db:17:ab:21:d9:3a:ea:5b:
9f:db:44:5b:1c:2b:1c:e1:1d:20:7a:dc:90:38:49:95:56:d7:
0d:2f:ea:de:4b:3b:c9:11:f9:df:c7:49:f0:ca:8a:46:02:2b:
eb:ae:81:86:05:6f:9a:b4:7c:fa:e0:b6:25:77:ba:67:b8:e2:
f2:11:56:2c:3b:24:71:a2:ab:86:7e:4e:a1:fc:c9:5d:27:3f:
aa:62:3b:1f:5a:5a:b5:82:78:b3:28:84:b1:9b:78:33:ce:fb:
70:bd:de:44:7a:c5:aa:07:06:c5:3b:22:13:18:3b:6e:40:62:
38:33:23:59:a6:63:23:6e:97:17:68:7e:a4:e4:b7:46:8d:eb:
c0:c4:71:18:12:ea:d8:e2:2e:8d:81:4e:f6:b8:ad:69:13:ff:
a3:29:cf:bd:88:84:55:2d:5f:26:58:4e:cd:25:6f:5a:73:59:
4b:fc:2c:77:c6:e8:9d:43:9c:ca:83:17:35:a9:b7:8b:4d:0e:
ad:3c:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:45 2025 by rpki-client