Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json)
Hash identifier: BCKmn7s0RkV9vL34uQ0O1KQziEUAp1LrE0ZcY2OWWZA=
Subject key identifier: BE:69:64:A6:81:A0:BD:1F:93:59:2C:E4:BF:B4:8F:8D:9F:4D:61:98
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial: 019923317E77766CA8A951BC53BBC463F356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
Manifest number: 035A
Signing time: Sun 07 Sep 2025 08:01:09 +0000
Manifest this update: Sun 07 Sep 2025 08:01:09 +0000
Manifest next update: Mon 08 Sep 2025 08:01:09 +0000
Files and hashes: 1: T73zcHs6Ep_CKwJnLjzUI2Lqk64.roa (hash: Q3Y+VkwX2oMhKJhHjrJ53ij+knYpPf4svYxgdosIZGQ=)
2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: 8zGdHRQH7NCRS6RuTbIfsJvG2RPVHbaoD9GmZ0yC0JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:7e:77:76:6c:a8:a9:51:bc:53:bb:c4:63:f3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Validity
Not Before: Sep 7 08:01:09 2025 GMT
Not After : Sep 8 08:01:09 2025 GMT
Subject: CN=be6964a681a0bd1f93592ce4bfb48f8d9f4d6198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:fe:76:d5:1c:4a:8d:bd:f0:5f:bc:7f:24:
ce:84:f2:9c:ec:4e:cd:d1:72:57:ec:cb:c8:76:3e:
25:bf:9a:c4:10:00:77:2a:19:4e:2b:23:4c:e5:45:
04:ca:94:52:ba:43:07:0b:5f:89:f8:50:69:1c:c2:
74:60:5e:d8:d3:5a:cf:76:05:f5:f9:15:b3:32:c2:
e2:0a:3f:62:aa:8d:b4:a3:5c:1d:f2:a9:8d:a1:9d:
d2:ce:c1:b7:aa:40:39:4b:69:75:2a:0c:f9:7d:21:
16:d4:b9:29:5e:d1:26:b6:93:ad:94:64:9d:59:4b:
85:68:00:8e:33:b1:4a:42:fc:ee:4c:69:a8:35:64:
10:7d:d0:63:b6:d5:3d:5f:0c:a3:f0:15:fa:93:57:
5f:a8:f0:67:38:67:10:25:6f:0c:90:f5:1c:f5:3f:
24:1a:82:21:d7:e7:64:93:08:4e:2d:e6:dc:fb:e6:
55:08:58:71:a5:fe:2b:64:57:ee:11:48:f7:aa:85:
16:3f:06:6f:31:f7:98:be:d2:87:92:d7:87:b6:83:
84:a4:65:fc:9b:0c:2f:c5:b0:a8:70:f2:fb:c4:48:
e8:44:d9:6d:7f:cc:bf:7c:6c:1c:4d:c4:de:62:69:
dd:5b:92:e0:9e:d1:de:40:2e:4e:2b:66:7d:ad:25:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:69:64:A6:81:A0:BD:1F:93:59:2C:E4:BF:B4:8F:8D:9F:4D:61:98
X509v3 Authority Key Identifier:
keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c5:d5:e3:0d:1e:76:19:6b:db:fd:91:b2:5f:25:47:e8:3c:
79:0a:c0:b3:52:2e:3e:00:0d:12:cb:52:c2:a1:2d:6f:e9:15:
f6:c6:4e:79:2b:87:ef:75:8d:19:31:c6:6a:7c:37:b8:7a:3c:
aa:29:3c:b6:1f:40:10:38:26:08:37:cd:a2:20:5f:db:6f:d6:
6a:1c:60:63:69:22:3b:a4:60:c2:81:ef:80:85:72:6c:03:e2:
96:8e:cc:5c:a9:ae:08:2a:42:a9:85:77:67:5f:4d:22:63:83:
14:ea:9f:bb:a7:5d:42:b0:9c:b0:2f:a2:d0:26:5d:5d:28:8a:
50:4e:4c:d2:03:af:47:c6:28:a9:06:eb:38:23:75:49:94:97:
47:d6:92:2a:c7:69:d9:31:82:28:f5:7f:8c:79:d1:1d:a4:5a:
3a:6a:1a:16:0e:a7:e9:dd:50:40:b2:ff:21:34:0a:0e:d0:b7:
3f:f9:59:22:fd:2a:7b:82:77:ef:5a:de:5b:15:42:df:ea:fc:
ea:3d:1b:96:d0:0f:8e:88:2b:ec:ab:23:cd:b5:6a:13:4e:99:
f5:c7:b9:15:06:ca:46:05:e7:2e:e0:f1:42:9b:ad:d5:3d:19:
5b:26:f4:a0:a4:ba:dd:3e:84:a5:d2:58:34:76:f3:bc:8f:39:
a1:ac:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:49 2025 by rpki-client