Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
File: pMqKz4g4TsU94Z4om10mQqEf9_0.mft (raw, json)
Hash identifier: yXKhE4+uOIDa6dN/M4Fdn1FgzMOYnCkJjyS+28hSLf4=
Subject key identifier: BB:E9:66:A3:AD:53:13:05:91:BF:56:67:C7:89:26:37:85:84:AD:8E
Authority key identifier: A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
Certificate issuer: /CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Certificate serial: 019A70A4D45ABE9E67026AA3AF1A6CEAFF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
Manifest number: 04F0
Signing time: Tue 11 Nov 2025 02:00:41 +0000
Manifest this update: Tue 11 Nov 2025 02:00:41 +0000
Manifest next update: Wed 12 Nov 2025 02:00:41 +0000
Files and hashes: 1: pMqKz4g4TsU94Z4om10mQqEf9_0.crl (hash: ah7Vz1fwA7SCuqfDkW/VZR2I4iRYOYmbgTlJ3vAEAi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d4:5a:be:9e:67:02:6a:a3:af:1a:6c:ea:ff:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Validity
Not Before: Nov 11 02:00:41 2025 GMT
Not After : Nov 12 02:00:41 2025 GMT
Subject: CN=bbe966a3ad53130591bf5667c78926378584ad8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:f2:38:95:be:13:cd:b4:c6:75:43:eb:d1:
7b:b3:9e:1e:ee:08:35:a9:eb:c7:e1:ec:e4:86:b2:
2a:eb:a2:b2:55:25:2f:a4:37:12:7e:b0:a9:29:fb:
9a:bc:f9:c2:5b:ca:90:48:1d:75:be:e6:ff:2f:02:
89:f2:cb:fa:c4:18:3c:36:ab:c2:15:1d:c3:e7:57:
3d:56:8e:b0:f3:ef:a3:73:98:bf:76:0c:7c:a5:86:
0e:aa:e5:78:2f:79:e6:56:68:3e:df:a4:1c:39:5c:
86:d1:75:98:92:05:56:4a:0f:64:e4:29:50:9a:55:
23:98:46:d2:02:9a:ba:44:bf:69:18:0b:19:dd:f1:
16:8d:94:fe:4c:c3:05:f1:76:fc:db:5d:5d:3f:57:
01:ae:5e:e4:57:80:4c:fd:a9:18:d3:de:02:ef:d7:
08:cc:a8:14:04:bc:51:57:93:bf:b3:ad:f7:9f:98:
b7:96:1c:e7:0b:ec:6c:3b:e9:49:8b:c9:b0:71:00:
af:8b:65:67:cc:e7:8b:88:5e:30:3d:e1:e5:91:24:
92:1f:fb:c5:c2:6b:da:51:c2:c6:a9:f9:6a:79:3d:
9f:d7:fa:e3:3e:e6:e2:f9:83:1a:13:ae:9e:74:51:
b6:85:46:61:78:cd:6c:67:f6:fb:2f:6b:7a:95:cc:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E9:66:A3:AD:53:13:05:91:BF:56:67:C7:89:26:37:85:84:AD:8E
X509v3 Authority Key Identifier:
keyid:A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9d:80:e9:54:4c:4d:1f:62:6e:73:00:83:dc:c7:74:f7:d1:
e6:fc:68:f3:33:f0:32:72:77:1a:82:9d:29:17:95:b2:f0:f7:
31:02:28:97:92:00:09:ac:48:ab:7f:66:59:5f:f4:70:b6:75:
42:30:ba:00:a4:be:8c:97:bf:d4:c5:7f:3d:cc:ca:f4:9c:a1:
1d:42:da:7e:3f:c4:70:cc:ec:0b:2b:88:e5:ee:81:c3:69:6a:
e9:c0:44:bc:89:12:d0:2e:fb:f4:9e:d3:f9:90:a4:ae:1b:55:
48:2b:e5:dd:00:62:10:2a:8b:5f:85:f9:c2:24:44:98:18:46:
f3:85:e6:55:d2:f2:3c:47:6d:df:13:90:ea:e1:1f:57:95:8f:
d3:4f:25:30:f6:b3:c4:dc:66:c9:53:b4:06:10:f4:67:6e:85:
08:46:d9:2c:de:96:91:51:d0:e7:6b:8e:25:4e:ee:5e:ca:c9:
af:cc:31:bd:d5:78:9a:6f:90:ac:d3:f7:28:d1:61:e4:04:84:
ee:d0:5c:62:69:ce:f2:68:bb:83:a8:60:7e:2b:88:b9:dc:b2:
d3:66:9b:23:53:38:28:66:e2:42:14:7e:b7:46:55:25:f7:1f:
4f:70:37:ca:7a:60:f4:7d:68:68:be:ff:37:d2:0b:cb:bc:fa:
96:d9:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:55 2025 by rpki-client