Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File: pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier: hGtxcNwNQvy1HZPE2Tg13kiTVre+i8zqpqyTU7eQIuM=
Subject key identifier: 28:87:9A:26:FD:33:6D:E7:EE:52:46:2F:D8:5D:93:53:5A:6D:89:F2
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 019A4D73D8221EB1DF8DD769029BBFAB8675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number: 07CF
Signing time: Tue 04 Nov 2025 06:00:28 +0000
Manifest this update: Tue 04 Nov 2025 06:00:28 +0000
Manifest next update: Wed 05 Nov 2025 06:00:28 +0000
Files and hashes: 1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=)
2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=)
3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=)
4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=)
5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: uiEx7PtR93EbU0PdOgq5q3vdocMdvX67ywBA25LEd6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d8:22:1e:b1:df:8d:d7:69:02:9b:bf:ab:86:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Nov 4 06:00:28 2025 GMT
Not After : Nov 5 06:00:28 2025 GMT
Subject: CN=28879a26fd336de7ee52462fd85d93535a6d89f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:e2:13:25:31:e0:60:57:62:30:17:2e:14:
f9:2f:88:5b:2c:3b:a0:f5:0a:b6:cd:b2:98:5b:fc:
98:52:36:01:40:92:c9:67:06:5f:bb:e3:da:bd:38:
15:42:96:be:99:3e:e8:b1:6d:0d:85:1f:ee:74:5f:
85:8c:b9:9b:4c:8e:37:76:8f:4c:f9:8d:3a:78:44:
aa:02:48:01:ae:33:dc:0e:00:2e:9f:e5:49:ac:31:
83:87:dc:ed:ac:27:a2:29:55:7f:16:ac:6d:c5:71:
d4:c4:ae:a7:92:62:31:e7:1c:a6:2b:ac:0d:0a:2f:
05:ec:87:c8:33:b1:a4:01:39:ec:f0:73:ba:52:00:
57:68:93:25:1a:1b:2c:89:0c:9b:ca:50:d8:9e:04:
61:62:fe:65:fe:77:fc:ce:52:be:17:3a:c8:83:5e:
29:b5:c0:74:15:c8:ab:87:4a:02:74:9d:c2:f1:a9:
f2:4c:57:59:57:d8:7b:06:26:8f:6a:da:e6:2a:5c:
e3:25:a0:cf:79:63:6a:44:70:9f:91:0a:31:cc:94:
17:27:42:c1:25:da:ed:27:a1:fc:3e:02:f6:ac:67:
36:86:6a:f7:0d:76:52:a1:49:f2:83:d2:07:6e:93:
a7:d8:77:78:d1:e0:f7:0c:de:cc:66:16:4a:14:21:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:87:9A:26:FD:33:6D:E7:EE:52:46:2F:D8:5D:93:53:5A:6D:89:F2
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:60:00:3e:a9:a5:80:f0:b8:55:81:86:50:14:f2:fe:77:26:
75:ec:88:fe:76:e3:6d:2d:3f:9e:5c:c0:4a:5c:12:6c:f8:8d:
ad:68:5e:61:b0:ae:b6:ea:f6:e7:e2:fe:0b:28:a6:33:30:0e:
e6:f5:2d:fa:eb:a8:1e:bf:18:44:82:60:80:bf:00:73:43:87:
35:89:14:7f:b1:a7:7a:d1:27:c5:c1:3f:17:33:ff:c1:2d:f7:
c0:2c:c1:6b:5b:f4:a1:b0:aa:54:df:72:30:33:34:fe:89:51:
d5:bf:97:76:ee:50:6f:f5:52:e8:ae:a9:bc:e7:9b:42:df:0f:
85:e4:fc:cd:4d:4a:51:6e:4e:d2:47:3e:0e:3d:da:c4:13:0f:
3c:72:05:5a:5d:b2:18:14:b4:67:00:1d:62:7f:fe:ed:b6:aa:
2b:8e:02:96:19:33:94:d2:d8:18:74:39:31:e2:af:87:ef:45:
25:b2:23:3a:f4:c7:8a:0f:8c:a5:94:4f:c8:cd:78:35:8c:89:
c3:6d:f0:77:6f:3a:33:df:60:00:98:68:25:9c:11:fe:17:a8:
32:dd:bf:a9:71:5d:a6:c9:9c:22:a6:71:20:7a:10:4d:28:5b:
f0:92:43:02:0e:72:40:18:45:e5:f7:4b:7b:a9:e8:15:8a:0b:
17:3d:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:43:56 2025 by rpki-client