Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
File: pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft (raw, json)
Hash identifier: 8kzkFOUg6nvppBZH3Oyk4jzXaA2wuxleYMCJXGuUUlg=
Subject key identifier: 4F:8F:DB:C5:EE:98:A7:53:7A:1B:16:59:CE:E7:9F:46:D1:5B:16:E2
Authority key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
Certificate issuer: /CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Certificate serial: 019A7226686E92E99172342D989E79423DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
Manifest number: 1553
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl (hash: FcwteKHlPmbrospmN0AtunZ5+rDWDcFzJRa/L7mhtB4=)
2: vzmyNrlx12Of6nkhjpCUrNuMnE0.roa (hash: GZnGfQJ22BwvGawBRyPMAw4FcsQFgdQkm7oclrkMSK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:68:6e:92:e9:91:72:34:2d:98:9e:79:42:3d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=4f8fdbc5ee98a7537a1b1659cee79f46d15b16e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:43:bd:5d:c7:52:87:18:b8:e2:19:fd:a2:e6:
4c:c3:92:b8:28:32:c0:0d:78:71:71:8e:bb:42:fd:
95:eb:f2:e5:2d:f4:f2:1a:11:2a:fe:76:3f:a5:ae:
c0:30:77:09:2e:6e:31:5e:a0:d3:2f:1c:17:29:41:
55:bd:70:e0:4e:c4:46:6a:ee:ce:67:74:7f:5e:70:
b2:2e:e3:01:f1:c4:25:53:b9:43:6c:74:5f:50:f1:
8e:02:6c:05:06:59:ab:d0:f3:34:78:ad:e5:8d:1e:
99:4e:3a:07:3f:69:08:76:c3:e5:f6:90:d0:1e:93:
fe:cf:82:d9:40:29:76:92:6a:d8:7c:84:67:22:24:
21:49:0a:0f:70:b9:a2:f7:6d:08:e7:66:d9:d7:e7:
fc:3f:c4:bb:e3:1f:14:61:54:82:6d:2f:0b:53:52:
d9:3f:ff:b7:78:f2:75:9c:12:ea:f9:bf:d5:ee:45:
85:be:b5:5c:1f:46:f6:ed:d0:3d:84:f3:17:99:80:
e2:01:fb:91:3b:60:0f:d7:30:d8:c0:ca:58:66:29:
7f:8c:29:67:99:c4:28:5d:54:3a:a8:03:cb:12:8a:
40:d0:6a:d6:50:26:e6:b6:f3:d3:1e:0c:19:7d:c2:
85:8b:e7:9b:73:b9:25:75:53:c4:7f:74:d5:e2:d7:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8F:DB:C5:EE:98:A7:53:7A:1B:16:59:CE:E7:9F:46:D1:5B:16:E2
X509v3 Authority Key Identifier:
keyid:A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b4:d2:9a:1d:9f:c4:94:cc:f4:88:b4:f1:75:16:a6:06:cd:
4d:5d:bd:fb:7b:79:69:5b:89:a7:d6:84:93:15:2a:0d:b1:9f:
98:32:b1:d6:a0:06:bb:46:8e:41:08:17:a8:2a:28:26:de:3e:
76:41:d0:4a:b3:d2:9a:18:81:5f:2b:71:3d:92:25:95:dd:2f:
68:13:cb:e4:ba:0b:4d:89:e7:e3:57:05:d5:15:53:db:d4:40:
80:00:b1:46:1b:f2:54:65:51:d2:8b:de:6e:bc:b1:e4:a2:f5:
bd:32:04:82:19:03:47:c6:51:9e:08:34:67:ca:b0:f7:53:b1:
c6:22:92:50:ef:78:be:f1:8a:41:7b:1b:40:80:89:b6:ee:b7:
15:26:82:ae:23:78:6d:cc:d1:a0:65:58:74:13:42:94:44:ed:
41:d6:35:bd:99:6a:0b:65:60:05:a1:83:a1:a3:e6:9b:59:38:
8d:46:cc:7a:2b:65:21:b3:0e:31:55:21:c5:35:52:f6:ed:10:
4d:e7:ae:75:35:db:0a:48:b9:b8:90:04:34:e8:ff:3c:91:fe:
8a:3c:1b:96:d8:09:9f:7c:20:af:ab:b3:42:f8:29:25:ee:d4:
26:7e:57:06:49:80:9d:a5:5c:bf:3f:7c:b2:8c:a8:8d:7d:49:
05:2b:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:29 2025 by rpki-client