Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: f65BtbJb1NpwHpuXiolSIZ0k2eg5AMy+/Tt7Jvo193c=
Subject key identifier: 39:C8:CB:C9:E9:3A:48:42:C4:3A:0E:CC:C4:19:06:8C:CE:AF:67:FA
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 0199C29F6BE1F8F127E2C9F9E0A426FA644F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 0C5E
Signing time: Wed 08 Oct 2025 07:00:51 +0000
Manifest this update: Wed 08 Oct 2025 07:00:51 +0000
Manifest next update: Thu 09 Oct 2025 07:00:51 +0000
Files and hashes: 1: 6y2PxXoNf17k752-h-Vh6181ybg.roa (hash: /D4LWQIJRMeiTsLLzqJFb6QygqeaBkt1FMx26cAAcmk=)
2: Uxq2zaQ3C0F2KaVo_-rxCUMMpzU.roa (hash: VbEHRBQ6CnI3V57/ypd9YP2tAsM8cgW+F1+a7XG3s5Q=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: 995kGe32SlOrcqtQ3D4UC3n4LXfE1PFIaGqwpViQc/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:9f:6b:e1:f8:f1:27:e2:c9:f9:e0:a4:26:fa:64:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Oct 8 07:00:51 2025 GMT
Not After : Oct 9 07:00:51 2025 GMT
Subject: CN=39c8cbc9e93a4842c43a0eccc419068cceaf67fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:ed:7b:f3:32:1f:66:54:8c:63:96:c5:89:
fd:e2:20:ec:fc:37:19:fb:df:ae:85:10:08:00:9f:
9f:f7:be:82:89:b6:7d:1b:ee:67:5c:05:a7:ab:7a:
b5:5a:a8:d7:72:28:06:36:60:57:f3:a6:af:4c:b9:
87:0b:4a:be:de:da:a8:b2:d1:87:19:c8:2c:e2:40:
ec:f2:f8:f3:68:49:8d:fe:04:68:ec:bb:88:31:66:
77:22:76:c7:67:8b:f0:00:1c:7a:d8:e5:93:2a:8a:
05:5d:b5:30:21:23:02:0c:09:08:7f:07:1b:cb:a5:
5a:38:47:31:48:12:81:6e:4d:9c:86:12:8e:25:41:
b5:81:8d:cb:da:a8:f8:f1:72:c6:d2:77:95:b4:f2:
4c:68:45:47:73:f0:d6:74:b8:6d:6b:92:82:28:95:
65:b7:37:3a:1f:40:e7:fb:f7:87:94:7f:90:32:1f:
64:78:cf:d2:cb:26:dc:46:70:5a:2c:0b:eb:5d:eb:
7c:75:63:02:46:75:61:c5:59:47:1f:42:62:13:fc:
ad:e6:49:9f:da:80:88:eb:2b:31:d8:16:60:48:9e:
a9:a9:24:57:1c:e0:e4:7c:03:ff:d6:e7:2e:27:cf:
8b:e4:51:4f:ee:d9:52:6b:67:ce:3f:fb:90:ae:65:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:CB:C9:E9:3A:48:42:C4:3A:0E:CC:C4:19:06:8C:CE:AF:67:FA
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:59:c8:be:d3:55:c8:2b:ec:7d:89:8f:86:d3:bf:29:11:b1:
ac:74:66:d7:96:d7:94:f7:85:33:a5:eb:e0:15:6d:ab:ad:78:
b9:59:35:6a:b1:3f:78:75:ef:f8:e4:fb:4c:42:48:dc:03:7b:
56:a1:7a:2c:e6:7f:c5:39:f5:a4:82:ef:31:71:9f:21:e0:0b:
19:c8:c5:ea:f1:23:e3:0a:32:39:cf:06:db:1c:bb:2b:63:a1:
41:a8:8f:4b:c3:01:c6:36:fe:55:bf:da:4f:f7:44:c0:12:88:
f3:30:f4:75:7e:c3:4d:c6:e4:a9:8a:d7:cf:82:2e:fa:ba:23:
30:49:6c:a7:96:21:5a:5d:58:63:f7:b6:49:d3:68:82:8b:d6:
51:5c:7b:f2:7c:fe:0a:14:25:28:bf:af:90:4a:4c:de:87:05:
3a:b4:5a:98:9e:24:96:70:fd:63:91:68:4c:e6:32:73:ca:f3:
68:08:4e:42:47:57:45:f1:51:e1:dd:bc:5c:10:57:61:5f:d4:
6d:2d:8b:55:c1:3f:e1:d6:fa:21:ff:4f:43:78:f2:ba:6e:65:
d4:c9:9d:82:f0:08:0c:5b:05:79:cd:c1:ed:66:46:f3:08:33:
2b:88:c7:f3:8f:86:3b:eb:25:cc:ae:4e:98:6f:5f:25:84:04:
ad:bd:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:25 2025 by rpki-client