Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: UXcN3VZtSdF2Px2g2bXZYh4H/BaTUTy+ClhyWLcI/l8=
Subject key identifier: 63:6D:90:37:CF:E2:EB:CD:D7:43:70:B6:8C:C4:F4:A7:66:55:8A:A3
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 019A22F7B0879C4E24AB68B4CDAD2445057F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 00:00:49 +0000
Manifest this update: Mon 27 Oct 2025 00:00:49 +0000
Manifest next update: Tue 28 Oct 2025 00:00:49 +0000
Files and hashes: 1: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (hash: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: kkD8nUHk03ldgxdKZvbodo1H5Jk9OvxxWVSO43Bf7FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:b0:87:9c:4e:24:ab:68:b4:cd:ad:24:45:05:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Oct 27 00:00:49 2025 GMT
Not After : Oct 28 00:00:49 2025 GMT
Subject: CN=636d9037cfe2ebcdd74370b68cc4f4a766558aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:61:1e:f5:9b:c4:5d:5e:19:18:b6:18:e4:
19:c9:df:fd:1f:e0:d6:e1:b7:bb:91:e5:2f:1c:a7:
43:f5:c0:fa:97:50:30:50:34:1f:1c:de:04:72:5f:
0e:65:15:fb:ac:c9:48:1e:dd:c8:82:d6:e5:06:e2:
f8:3d:c4:f4:9a:a8:d2:43:64:71:2d:95:df:20:e0:
d4:2d:1d:a9:9f:89:e2:30:62:99:5b:13:17:ce:90:
dc:26:08:1f:10:0d:01:26:b1:99:0f:bd:02:0e:70:
49:a8:c5:09:95:0c:ba:d7:45:28:de:73:20:68:0e:
5c:9f:b9:76:fa:25:e9:3c:1e:e0:7d:9d:2c:66:fb:
e4:90:aa:83:59:c6:bc:3f:92:d7:36:d2:cf:e8:81:
ce:45:72:5e:8e:cd:d3:2f:1b:92:ea:b7:33:be:33:
49:4e:71:4c:5f:de:56:a7:3e:2e:99:4d:55:4b:9c:
fc:3b:00:97:4b:62:02:a5:b9:95:fb:e8:a8:75:d4:
43:1f:07:bb:33:65:93:1a:51:62:8f:a2:d7:e9:d0:
60:03:53:74:3f:4b:3e:89:fb:61:bd:4b:27:d9:48:
1b:fa:64:08:e5:7e:ac:fb:c2:8c:9b:ee:c6:0e:16:
e4:8c:22:20:5f:97:92:d8:b3:e5:83:72:07:88:03:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:90:37:CF:E2:EB:CD:D7:43:70:B6:8C:C4:F4:A7:66:55:8A:A3
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ad:de:d2:36:56:d9:38:0a:95:49:96:4e:b1:ab:78:5b:6c:
b9:04:2a:70:b7:dc:76:2b:32:21:01:34:f9:4d:1a:5a:a3:38:
ae:08:88:f6:f3:1a:f0:69:f0:03:d2:44:2f:65:16:45:9c:65:
f4:9b:bf:b5:fc:8c:55:e2:85:1a:13:3a:c6:89:fb:e9:ea:c5:
9d:a2:6e:c2:0e:2e:da:46:56:bf:1c:b6:1d:f4:89:c1:25:15:
f9:a3:f0:0d:3c:de:4e:09:d3:a9:af:f8:c2:20:a1:e3:b1:c5:
80:cb:a9:cb:a5:36:4c:80:0c:54:09:fc:1e:4d:40:62:d3:83:
d5:d3:6b:59:8a:bb:8e:88:f2:15:94:3e:4e:03:37:1b:80:27:
77:3e:81:a6:cf:1e:31:10:bc:76:5a:34:e9:28:9d:83:56:d8:
9e:d5:08:6f:ef:8e:cc:18:9b:ed:a2:44:7f:06:0c:0c:bc:ba:
bf:0c:ef:31:35:dd:d6:ff:fa:21:44:40:e4:4f:bc:e2:57:3f:
16:5c:3d:78:39:0b:f2:53:a6:d5:a6:92:7f:77:7c:db:ca:d5:
6d:cb:e2:80:43:bd:8c:55:1d:f8:89:5f:81:93:ce:37:b7:c5:
49:a6:98:d2:2d:aa:fe:6d:c0:b3:d9:d2:d6:03:21:8c:fe:6a:
77:9f:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:15:40 2025 by rpki-client