Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: UsZdultD60nmOfa5mPyaP9KnBfJvu9P7QpHzNWu5/QM=
Subject key identifier: F7:40:03:35:22:B7:AE:0D:1E:5D:AE:46:65:58:8F:C3:A4:F8:00:6A
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 019A146004BF140DAA83D43F33C96195F2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0BD0
Signing time: Fri 24 Oct 2025 04:00:28 +0000
Manifest this update: Fri 24 Oct 2025 04:00:28 +0000
Manifest next update: Sat 25 Oct 2025 04:00:28 +0000
Files and hashes: 1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: uogvwBAVieGJDcnCEw22Ok99ZILHdyWsGTc4vN0UrY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:60:04:bf:14:0d:aa:83:d4:3f:33:c9:61:95:f2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Oct 24 04:00:28 2025 GMT
Not After : Oct 25 04:00:28 2025 GMT
Subject: CN=f740033522b7ae0d1e5dae4665588fc3a4f8006a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:4c:6d:98:8b:00:61:5e:bd:30:c0:b4:19:
ac:9f:ef:d3:0c:98:69:f8:2c:8b:67:c1:da:ca:24:
d4:d0:ae:87:03:7e:f6:13:c8:78:97:dd:40:9c:4d:
b5:33:bf:7b:77:54:a7:f0:0e:7f:b1:e9:d8:68:16:
4d:ab:12:e4:84:7f:7f:e2:0d:3b:11:74:02:7f:ab:
cd:cb:c8:06:be:7c:9f:42:b0:77:05:5b:63:f9:88:
24:02:18:eb:45:c2:b5:74:51:f9:7b:7a:27:a3:9c:
9f:bf:df:1c:f6:b8:77:5e:0f:ef:9c:0d:17:bd:db:
ca:b7:63:9b:86:ce:d4:05:93:aa:08:3e:d6:92:eb:
57:53:7e:9b:ae:d8:e8:a1:99:b8:13:03:47:83:93:
22:6a:9f:d9:1d:6e:15:23:27:a4:bf:fd:db:40:a8:
d9:25:3e:53:16:f4:2b:05:80:a3:97:51:fc:fb:49:
7b:55:f0:fa:0a:65:ae:89:dc:d8:24:78:bd:e0:6f:
66:8a:d6:69:86:44:0b:34:8a:32:49:f6:be:27:82:
11:2e:59:88:2c:48:75:5f:b4:c9:d3:0d:7a:a5:c6:
01:f1:5c:6c:69:ed:e1:06:16:c5:35:26:17:35:6c:
7a:d4:1c:e0:16:8e:af:cd:fd:83:8a:ce:bb:81:b2:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:40:03:35:22:B7:AE:0D:1E:5D:AE:46:65:58:8F:C3:A4:F8:00:6A
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:80:51:7f:04:14:e5:a5:c0:0a:32:67:d4:5f:4d:b5:25:b1:
2b:a2:48:e3:00:d3:32:8c:b7:21:71:f4:bb:1a:2f:97:3c:42:
36:4a:01:0d:e9:46:af:08:05:ac:1d:33:c3:ce:d8:9b:2c:15:
dd:2d:fc:77:b4:6f:16:3b:94:c6:a8:d0:67:31:93:89:6d:a1:
d1:31:fb:e6:0f:ed:b1:1d:e2:4e:62:1a:d2:78:42:43:69:e7:
1d:65:f8:4f:59:6d:b7:5f:4e:24:30:b1:f4:93:16:ee:41:dc:
fd:d5:be:e8:09:c0:88:ba:88:84:b6:25:a3:d6:13:5b:36:50:
87:9c:74:eb:8a:76:71:71:29:7f:3e:cd:f0:2a:fb:fd:da:a1:
67:18:8b:4b:ab:c4:52:d2:68:65:ce:76:26:50:d1:d6:f5:da:
11:1b:3f:bc:69:09:4f:5b:9a:49:83:bc:2b:dd:a3:de:97:46:
1b:ce:2a:df:12:ca:e8:7d:61:4c:c5:7c:d1:28:0c:cc:ed:07:
bf:b2:44:fc:fe:48:3e:2c:76:60:cd:df:30:01:07:36:a9:a0:
1d:4d:ab:75:1d:38:36:49:7b:c2:30:2f:54:33:f0:48:57:52:
31:5a:20:23:53:e6:c9:69:8f:4e:55:d5:36:71:d6:cd:ab:13:
50:68:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:01:56 2025 by rpki-client