Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File: pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier: s6YKbwSW92wgGIHakfDhjfjqHm9ouPw/ZIIkNsT9+sI=
Subject key identifier: 64:68:99:1B:FD:9F:6A:0A:CA:E1:93:A3:52:02:81:8A:BB:5B:10:CA
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial: 019A71135CC193B5CA0E65BACD466D0C6918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: C68Jy4vS9ZhrosrQ0hLHm1uIuZY.roa (hash: KriDQtKp0/6qr4HNTZ8vH7ju161mMdjIkNUJn2wDbds=)
2: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (hash: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=)
3: aLyfJT6We20ULVg1UbujnE5UVaI.roa (hash: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=)
4: lixJMjo5-_bNmfYtadlmrrGpsCg.roa (hash: OW5E61Tvo1LN0X4Q2KSxHXhfLjcuHjhFHfnXTwr/DjA=)
5: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: ff/8XY7yj4pWoqf2KBvPx7o3q9SRErfccTFgkHYUVjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5c:c1:93:b5:ca:0e:65:ba:cd:46:6d:0c:69:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=6468991bfd9f6a0acae193a35202818abb5b10ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:7a:a2:d6:20:f4:d4:0e:52:da:5a:2c:9b:
cd:fa:6e:e6:b3:7b:cf:94:c8:c7:d6:2b:aa:15:30:
52:52:5e:ff:f9:92:aa:02:8c:b7:18:d2:10:bc:23:
63:e3:11:fb:ae:2a:31:09:ae:5e:2c:a7:c5:b2:c7:
ca:67:a7:d6:3c:e9:a2:46:8d:0b:7b:95:ba:75:82:
71:76:69:2d:e8:c3:05:04:3f:b3:08:d7:6b:c3:e5:
be:f6:6d:be:bb:60:2e:2d:6c:60:35:f8:af:44:8f:
45:12:48:e0:ab:44:c1:3b:81:c7:e6:12:15:c4:1e:
67:fd:cb:bd:27:1f:8e:91:74:1e:5a:6a:2b:d8:c0:
5e:10:57:0c:32:b8:31:70:4e:57:90:c8:56:b6:be:
71:06:eb:94:c0:9d:11:c4:bc:a3:a6:e1:f7:95:0a:
3a:e4:47:77:e3:1f:03:51:40:5b:50:ee:94:c4:aa:
7b:d8:4b:9f:20:62:dd:a8:0b:7a:c8:b3:88:ee:48:
64:1a:4b:90:38:21:f5:57:0c:d0:ba:df:06:60:c3:
73:cc:f9:90:d1:dc:90:1d:a7:00:37:fa:2f:43:1d:
b1:45:7b:85:7a:59:e0:a0:31:a3:bd:d3:a7:09:6e:
2b:86:64:f9:73:1d:ac:48:5f:9d:ee:49:30:65:93:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:99:1B:FD:9F:6A:0A:CA:E1:93:A3:52:02:81:8A:BB:5B:10:CA
X509v3 Authority Key Identifier:
keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:64:a1:c4:b5:64:3d:e5:2f:ab:36:07:33:43:5d:36:03:fa:
02:b9:ef:eb:d7:3b:06:aa:63:1d:eb:fc:ad:62:5b:f1:f2:d1:
d0:7a:24:2e:47:c0:89:35:88:57:5a:2c:d4:20:16:a8:07:05:
98:6f:22:e3:84:3c:f1:e4:e4:d4:21:38:f9:23:fb:46:d5:40:
7b:cb:84:1c:54:0a:e2:c3:31:06:b6:ed:a3:97:2a:4a:d7:78:
7d:ba:4f:ea:94:23:78:ac:78:7d:1d:2a:bb:4e:fc:94:cb:e7:
2e:8d:02:c2:d2:0f:d8:aa:25:ba:7d:4e:f5:e6:da:2c:bb:ac:
d2:c4:d0:b8:c4:b5:5d:2a:b7:ca:20:4c:00:0d:e7:a5:3c:b9:
6d:6b:0e:c8:18:e2:fe:17:cb:5e:e6:23:10:13:f8:7f:7c:0f:
91:f4:c9:01:79:4d:54:11:03:99:92:d8:03:d3:39:0e:7c:9c:
07:ac:ce:1b:29:ad:99:17:42:6a:a4:fb:95:fd:3d:8f:48:68:
c9:08:98:bf:51:7b:80:5d:c8:f9:22:12:d7:aa:97:b4:51:92:
54:95:8b:b3:ec:6e:d7:29:a7:dc:9d:81:76:f1:5f:46:a5:a2:
b4:53:c9:fc:e2:88:33:27:bb:68:9d:25:f2:4f:4c:0a:07:ca:
07:cd:86:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:02 2025 by rpki-client