Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: y32q/LSOitHtTqdicrOuE4zy0arjaK5gmCJmEEM6iao=
Subject key identifier: 37:93:39:47:F1:2E:18:37:F1:A6:4A:A6:36:7B:64:F5:2F:BF:B6:E6
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 019A0D4B30414316C92E8C96841A9BAFCF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 16F2
Signing time: Wed 22 Oct 2025 19:00:22 +0000
Manifest this update: Wed 22 Oct 2025 19:00:22 +0000
Manifest next update: Thu 23 Oct 2025 19:00:22 +0000
Files and hashes: 1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: N+XVpGOyHmEb9mPflHfOs5PY/9nQUSNKCUSFM15s00Q=)
3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:30:41:43:16:c9:2e:8c:96:84:1a:9b:af:cf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Oct 22 19:00:22 2025 GMT
Not After : Oct 23 19:00:22 2025 GMT
Subject: CN=37933947f12e1837f1a64aa6367b64f52fbfb6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:2f:5e:5c:73:4a:03:26:a3:1a:27:71:77:
7e:7f:2a:a8:7f:0e:4e:1c:74:dc:bd:b8:2c:72:8c:
84:04:7d:75:c5:4e:a6:d4:41:c5:e3:ee:02:a7:2e:
08:33:f8:b4:10:d9:7a:19:f5:55:46:05:2d:9f:da:
8f:b2:86:50:ae:48:ae:6a:8e:cd:c6:9e:c6:00:77:
99:00:88:7b:f9:37:6c:d9:82:3c:ca:13:8b:40:b1:
fe:37:0c:f7:e4:7e:f3:d7:e1:af:45:18:6c:bd:03:
77:0e:ca:0e:1f:36:f7:52:71:bd:92:dd:ca:26:de:
fc:f0:27:4b:db:42:8e:22:19:fb:25:f3:66:ec:6e:
66:04:55:8c:ae:d4:a4:f1:2d:10:cf:45:6a:2c:4f:
59:d4:c2:9b:41:43:92:63:b2:d3:8f:ee:e2:3b:59:
ad:8f:ce:13:84:2c:fd:c7:7f:4e:28:cd:98:5c:d9:
7e:51:1f:86:ef:00:38:6c:e9:e3:0c:23:b7:eb:d8:
9f:08:5b:47:85:f1:a8:65:0a:a0:ca:22:c2:e7:20:
7a:d5:cf:64:c4:1f:cd:cc:f3:86:fe:ae:2a:71:b0:
d5:0f:b9:f8:96:a1:0c:27:d5:2e:68:fb:fc:6d:a3:
ac:50:63:b6:35:f8:f2:82:d8:2f:71:52:84:ce:0e:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:39:47:F1:2E:18:37:F1:A6:4A:A6:36:7B:64:F5:2F:BF:B6:E6
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e6:20:13:b7:f3:cc:e9:fd:7a:85:ac:9f:0f:7a:0c:23:76:
0b:d6:b7:7e:8c:40:18:9a:8a:29:55:ad:6a:77:7a:fc:28:73:
55:eb:93:e9:eb:48:1b:fd:a5:74:a4:e1:9b:57:cb:98:b3:69:
71:2a:8e:9a:a6:7e:7d:5d:31:12:09:de:a5:00:1f:bc:2f:94:
e7:b0:d4:36:9f:92:87:4e:ec:be:4a:49:ec:81:f7:52:80:35:
93:65:48:4f:5a:6a:6e:19:87:c6:05:7a:81:b9:dd:80:54:46:
4f:7c:02:96:52:bb:07:34:e2:6a:1f:ba:6d:71:52:1d:70:cf:
8c:60:f9:2d:85:e6:96:8f:2e:de:d4:a2:ed:1c:41:7f:9d:b7:
2d:b3:3a:99:98:a1:ea:14:d8:11:4a:b3:b0:81:51:eb:0e:f3:
ec:3f:a4:39:c3:86:68:ae:c9:fc:37:84:3b:7c:a2:2a:ce:77:
7b:0f:76:35:de:0d:89:43:f8:ed:f7:bc:9a:15:74:0b:66:66:
7f:35:f0:a1:d1:40:d3:b0:d4:c5:9a:96:dd:fb:d2:d4:33:97:
4b:c9:e1:02:4e:b3:09:c4:65:9a:9d:56:bc:78:ac:f9:c9:ae:
a0:92:88:36:45:f6:38:e6:5b:ad:c1:f8:71:b2:0d:af:88:52:
5a:ef:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:18:37 2025 by rpki-client