Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: E7U33XVkNjR2eWY1IexVk4dK4oGmKstgQogUjuWr+l4=
Subject key identifier: 80:67:0A:84:48:AF:8D:D4:BE:A3:79:8F:A3:4A:CC:9F:C9:6E:7D:CD
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 019A115EE44563AD78EDBCA784E9EBC53C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0D82
Signing time: Thu 23 Oct 2025 14:00:22 +0000
Manifest this update: Thu 23 Oct 2025 14:00:22 +0000
Manifest next update: Fri 24 Oct 2025 14:00:22 +0000
Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: 60uJUBEjiXYI2zrq0NvUnwchEwGpciBZQC7/IQgI16o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:5e:e4:45:63:ad:78:ed:bc:a7:84:e9:eb:c5:3c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Oct 23 14:00:22 2025 GMT
Not After : Oct 24 14:00:22 2025 GMT
Subject: CN=80670a8448af8dd4bea3798fa34acc9fc96e7dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:fa:0b:6c:31:c9:f6:c1:aa:3d:17:fc:93:
ab:43:1d:f2:26:0b:87:ca:da:14:55:3f:44:32:aa:
10:30:30:e0:be:50:84:35:85:38:8f:49:e2:06:25:
e8:2c:72:c6:4c:bf:4b:50:b6:0b:95:f4:c4:df:27:
d6:32:b2:3a:f1:2b:bb:14:f4:f5:f4:3b:06:28:f3:
d3:bb:c0:a1:25:e5:e9:ea:8c:ca:11:25:eb:44:a8:
5b:ae:9b:23:79:d5:36:ab:60:7c:af:db:60:0a:0b:
04:bc:96:f0:84:c3:30:ad:3e:15:cf:10:2c:5d:cf:
c2:f9:79:b6:d3:e2:cb:a2:3b:a0:02:62:28:25:aa:
35:2b:85:fa:f6:3c:5a:63:23:45:7a:76:fc:8c:56:
e1:b1:6a:bb:4a:19:c4:3e:39:65:e3:4d:eb:53:95:
bd:07:d7:5d:72:8f:83:e9:49:f6:46:ef:38:1b:66:
44:28:94:3e:00:0d:64:0e:43:bf:e7:fd:bf:76:e1:
ba:b1:c5:b6:7d:8a:92:89:0b:b2:44:12:e7:de:8e:
84:9c:50:9b:07:3a:84:45:91:28:4c:f5:b9:c2:9f:
40:3f:3f:22:00:e7:2c:18:a7:b4:3b:ff:b3:98:58:
e2:3c:63:6a:66:9f:b2:45:00:79:2c:e3:14:67:d4:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:67:0A:84:48:AF:8D:D4:BE:A3:79:8F:A3:4A:CC:9F:C9:6E:7D:CD
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:57:4d:d5:c3:5f:da:58:1e:1e:5f:fe:65:98:e5:2b:2f:28:
9b:df:ef:24:6c:f6:7e:1d:4f:d9:e5:01:d9:a4:ab:23:9b:36:
cb:98:f9:82:e2:b1:86:0f:65:74:0e:72:e3:da:3d:19:ab:ef:
2d:ce:6d:ed:f3:96:c5:45:96:26:87:cc:ed:e7:9f:45:37:35:
5f:b5:ad:cd:e2:bc:be:2b:c8:52:1d:a9:62:70:09:0b:54:c4:
70:e6:ed:37:13:18:9f:be:fd:30:29:1f:a4:1f:0c:e3:40:27:
88:db:9d:b8:a2:08:8d:3d:6c:7e:6a:3d:42:eb:2c:b5:1b:0d:
84:5e:b5:8c:89:3d:9e:72:f3:3e:f3:80:c4:1e:1a:a2:4d:e3:
b7:5c:aa:3e:68:27:52:5d:f9:29:c6:95:b7:ea:8d:da:5e:11:
1e:b7:e1:27:f8:a7:41:e8:c4:94:f2:7a:3f:89:bb:0c:4a:db:
90:fb:09:d3:05:10:ac:62:94:c1:78:05:eb:1e:b6:7e:9b:1b:
74:1a:d0:0e:c5:9a:04:89:f1:8a:86:c5:74:fc:c6:fb:13:bc:
c0:77:12:fb:3d:d0:b4:cf:62:a1:95:e2:c3:d4:e3:92:a4:4f:
5b:97:87:71:b1:70:f6:b0:a9:9c:c0:22:d3:a4:2d:3e:93:08:
4e:e1:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:54:51 2025 by rpki-client