Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier: QTJIcfAv3SSM+NhbHeXkmGklwwNbH6jF1weGoRZJaL8=
Subject key identifier: DC:57:67:1D:F4:9D:40:9A:AD:25:8D:E0:4A:2E:86:F0:5F:7E:29:52
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 019A157319CB3E405C14568482EE21C138CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number: 1004
Signing time: Fri 24 Oct 2025 09:00:55 +0000
Manifest this update: Fri 24 Oct 2025 09:00:55 +0000
Manifest next update: Sat 25 Oct 2025 09:00:55 +0000
Files and hashes: 1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=)
2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: YybLSPmTX3bNdZP5eSav1dkLwLoWWRT0XBBeJ+cw+V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:73:19:cb:3e:40:5c:14:56:84:82:ee:21:c1:38:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: Oct 24 09:00:55 2025 GMT
Not After : Oct 25 09:00:55 2025 GMT
Subject: CN=dc57671df49d409aad258de04a2e86f05f7e2952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:cf:da:13:d0:db:be:b4:33:dc:9e:c4:d6:
9e:a1:66:9e:67:5d:9f:b4:36:a8:e7:16:92:4e:4b:
e3:b8:d5:e0:ef:db:0a:87:27:5f:5d:fd:9c:d9:f2:
25:b3:83:b7:1d:cb:8b:b4:0e:d9:39:c9:10:df:77:
c8:c4:10:f9:d6:94:69:ac:e2:ca:ee:02:3e:ea:fe:
34:b1:75:3f:de:7a:8a:10:eb:97:da:e8:11:d7:f1:
dd:f8:dc:dc:8c:f8:99:85:f6:5c:2f:59:2d:35:34:
3b:08:59:6f:3d:5b:87:57:fe:97:be:84:f5:9f:e7:
9c:9a:21:f0:26:72:0f:e9:84:be:1f:cf:07:5e:64:
76:22:54:ef:fd:12:c4:1e:14:68:69:78:04:d7:28:
c0:5f:3a:af:81:b6:5b:57:73:3f:65:13:98:41:e1:
30:94:ac:d9:90:56:7c:70:c8:a4:34:33:e0:9a:59:
d8:d9:b8:e4:90:6f:a4:31:3c:ae:dc:51:55:e2:a8:
ee:1e:27:5f:75:2e:2a:93:88:d7:ea:af:e9:28:c7:
fc:df:31:a7:38:a1:49:ac:ce:a8:9d:18:1b:a9:aa:
b7:1e:81:8d:95:a7:28:8f:f0:72:06:70:21:ba:16:
42:82:78:16:34:c0:da:41:f2:ef:fa:a0:4f:71:bc:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:57:67:1D:F4:9D:40:9A:AD:25:8D:E0:4A:2E:86:F0:5F:7E:29:52
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5b:6a:a1:fa:e7:9a:b9:c4:dc:84:09:c8:4d:f9:56:45:16:
81:c4:79:71:46:37:4f:99:1a:bc:11:60:a6:2f:62:ed:8a:1e:
bf:93:fd:e6:9f:ae:2f:cf:0f:f0:bd:6f:2f:3b:1e:cc:85:a7:
14:2b:ad:f2:2d:66:74:8b:8c:3f:3b:45:a0:09:58:85:f9:0c:
92:a8:78:ea:70:48:79:b6:57:99:b8:23:9b:96:33:73:62:27:
42:d6:63:00:0b:b5:d6:52:91:f4:ee:d6:49:87:b2:86:20:9c:
f5:ae:12:f5:30:5e:3d:3b:af:e8:98:ef:bd:58:4c:84:9d:96:
bb:6b:fb:56:c2:06:2e:ad:91:e1:4a:a0:74:1e:32:c3:d1:6a:
e5:1e:d4:bb:2f:af:74:74:4c:6a:9d:b1:85:f5:96:82:af:0f:
d7:41:90:06:4e:4d:77:07:06:91:e7:4b:36:8b:d3:9f:63:3a:
8f:80:93:e5:12:d5:c7:f4:65:33:67:64:53:a9:62:ad:97:0d:
bf:93:d5:dc:58:da:5d:bd:09:fd:d7:3b:50:c2:50:b9:5f:96:
9a:0b:71:5b:05:fc:46:85:ea:16:30:9e:1a:36:03:f1:8d:de:
82:5e:9f:1d:d7:64:d1:4d:1d:cd:a2:ec:69:a9:dd:de:f7:53:
10:c4:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:52:24 2025 by rpki-client