Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
File: PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json)
Hash identifier: H/KfkwbPtAXfyttT8vy7cvHUu+g7dzE3rfoH4GV5o4Q=
Subject key identifier: 49:2F:37:24:A6:40:DC:C1:E9:18:4B:2E:EF:0A:23:AB:65:8D:24:4C
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial: 019A19864D654A4D2CAFEF292DB6ED77CDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
Manifest number: 1651
Signing time: Sat 25 Oct 2025 04:00:23 +0000
Manifest this update: Sat 25 Oct 2025 04:00:23 +0000
Manifest next update: Sun 26 Oct 2025 04:00:23 +0000
Files and hashes: 1: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: dqzdI7QbPKOhzRPy16Wxyt/N3QeJ2GbF2n7q5pzreAQ=)
2: wgfEWoteV0ugJhJFFY5StCpYga4.roa (hash: Bu0QgGIHWGxscJbgnF2zr/rd8qdTFWvwHrlBzc8O9aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:4d:65:4a:4d:2c:af:ef:29:2d:b6:ed:77:cd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Validity
Not Before: Oct 25 04:00:23 2025 GMT
Not After : Oct 26 04:00:23 2025 GMT
Subject: CN=492f3724a640dcc1e9184b2eef0a23ab658d244c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:57:84:9e:b4:de:ef:49:3c:37:21:a6:f4:
9a:0f:2f:00:3f:d5:09:57:d1:40:3a:5c:08:35:d9:
8f:29:16:74:34:04:bb:d5:b2:7c:55:08:91:f1:41:
73:e5:bc:82:e1:96:3c:6a:8e:58:27:ec:52:2c:e8:
0f:96:49:2f:b9:24:91:ab:da:66:eb:2b:ae:75:ef:
14:81:b6:9d:d4:3f:21:c2:e0:c0:a8:e3:e1:83:53:
a0:ad:b6:38:16:17:51:0e:80:14:21:a9:a7:a2:12:
cc:c5:1e:9f:88:44:e7:fd:c7:bc:9a:7c:d9:79:4e:
c6:02:a4:2d:f9:aa:40:25:f9:f3:b5:dd:71:7f:53:
66:f4:f0:b7:df:1c:bd:5d:f8:80:62:dd:1b:cf:60:
41:76:e3:6d:2d:9d:21:d2:5e:a6:32:60:22:18:28:
b7:c1:ba:5f:f3:f5:39:b7:ca:50:af:ec:93:be:67:
b6:3c:ed:90:43:13:bf:38:06:13:1e:0a:a2:71:e0:
b3:77:65:c3:13:b0:32:1e:7d:34:eb:89:5e:40:4a:
bf:2d:4e:ab:b0:48:dc:1d:7b:80:1f:14:63:5f:39:
67:35:e5:90:0c:d5:0f:c0:26:c9:1a:63:c0:c4:cf:
05:7e:7e:64:b0:4f:73:8c:92:51:8f:51:87:3e:71:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2F:37:24:A6:40:DC:C1:E9:18:4B:2E:EF:0A:23:AB:65:8D:24:4C
X509v3 Authority Key Identifier:
keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b4:7f:aa:c9:08:3a:f9:28:e0:b0:1c:c3:b0:65:d6:b3:21:
41:3c:a2:1e:00:cf:f8:1e:3d:09:be:70:32:86:e6:a5:63:a5:
ad:b8:05:21:87:f6:26:5b:f0:9c:bb:43:cf:2d:7d:f6:0e:78:
38:1f:09:3f:a1:d3:ca:8c:ab:04:8b:d1:51:e4:32:10:7b:9d:
f7:96:99:73:ed:b8:4c:0b:e9:9d:17:ed:73:a1:a7:a5:ca:be:
ad:35:f4:18:a8:1f:28:ce:dd:5d:34:6e:42:98:1a:c5:eb:99:
d4:41:b5:06:17:ad:3b:6b:9a:c6:78:e4:04:e3:6a:22:6f:4b:
48:13:1d:dc:35:9e:0a:c8:43:b1:70:19:cb:ba:55:1c:0f:16:
20:ae:7c:a5:69:87:bf:36:74:55:3a:cb:83:b2:cc:25:f5:c7:
74:0a:15:a3:6a:36:3c:cf:9e:35:9c:9e:29:e4:05:7b:05:3a:
ec:ef:c1:51:23:63:31:3f:87:3d:6a:eb:0a:bb:36:87:68:99:
ae:e6:44:a6:00:e7:b0:fb:e5:33:ae:04:a8:78:47:fd:99:8f:
47:6d:d2:d0:73:4c:62:87:a1:66:d3:44:c6:b9:f8:68:17:34:
cd:e1:42:4e:73:c2:3c:97:c1:df:56:ad:00:9c:c7:6f:8d:4b:
be:ec:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:20:23 2025 by rpki-client