Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: oQOrt21LjqnYkSoF11QJFs6rh4zHcBSV9J4x7WofYHU=
Subject key identifier: 33:63:2D:02:F1:FF:FB:90:D1:13:09:90:59:94:A7:40:4F:12:04:A5
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019A21E52CBD2E53C80B3180084D73BDAB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 19:00:58 +0000
Manifest this update: Sun 26 Oct 2025 19:00:58 +0000
Manifest next update: Mon 27 Oct 2025 19:00:58 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: ddXtkPSAAsoV8xgk4Ood0doX1gJsSepxG99n0P6ZcUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e5:2c:bd:2e:53:c8:0b:31:80:08:4d:73:bd:ab:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Oct 26 19:00:58 2025 GMT
Not After : Oct 27 19:00:58 2025 GMT
Subject: CN=33632d02f1fffb90d11309905994a7404f1204a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:23:5e:5d:88:d3:a7:fd:66:59:a6:27:0a:
61:2c:06:0d:23:6a:48:4f:22:9d:13:74:e8:46:56:
5c:c8:f8:39:07:ec:8b:a6:2b:8e:86:5d:7c:d6:9c:
1f:2d:55:3c:14:96:9e:f2:c5:92:b3:c2:3f:b2:d9:
73:86:6e:9f:a5:8a:a4:d5:97:5a:a8:27:2e:86:75:
34:74:8f:a0:9b:81:05:79:02:7a:ba:8c:4f:e4:c2:
98:f8:a1:4b:b4:9d:cf:ef:e8:55:c4:a6:dc:dc:ed:
f1:2f:1d:cf:cc:39:f6:ee:b2:e6:70:c8:6f:8a:fd:
36:37:43:a2:cf:61:80:f1:a6:36:e4:8e:08:07:24:
93:ce:96:fb:ce:b7:b5:00:a2:ce:53:aa:1b:53:c1:
a8:ba:bc:10:af:e8:16:95:5f:c7:74:3a:10:8d:c8:
25:98:cc:1f:2a:ea:78:4c:d4:b6:f1:85:41:68:25:
f8:98:09:a8:5b:a3:14:a0:aa:4f:56:cd:b9:79:5a:
a6:2e:77:da:df:8f:fa:3d:06:f3:5f:a1:69:d8:58:
ae:d9:b9:67:1f:c3:a5:c6:47:56:90:73:2b:9e:44:
81:d9:8e:2a:85:7b:ca:52:94:ba:d6:ba:45:8c:a2:
fd:9c:78:fe:0d:c0:15:eb:1a:2b:c8:41:d9:3a:71:
82:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:2D:02:F1:FF:FB:90:D1:13:09:90:59:94:A7:40:4F:12:04:A5
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fa:28:04:b7:c2:fd:8e:7e:1a:f1:a5:de:f6:68:51:97:dd:
30:7b:f1:00:ed:30:72:b6:d2:1b:ec:66:37:c9:42:0f:be:6d:
84:7c:df:de:f3:2d:df:02:2a:47:41:42:41:09:34:c3:20:82:
77:46:af:4f:db:73:f2:11:f2:d7:3c:d5:ae:bf:23:74:cc:ac:
98:a3:2a:d3:3e:41:92:16:32:03:11:ee:3b:d2:79:fd:08:ad:
a7:0d:d3:8f:1d:4b:2b:e1:ee:2f:ae:6a:1e:1d:53:6e:63:66:
46:24:bb:42:4f:7b:9a:07:72:7f:16:50:13:32:26:6a:17:ad:
da:45:5c:db:93:53:12:ad:09:ba:f3:0d:7b:f1:fb:aa:9b:ee:
98:3b:69:a6:5e:4c:54:ed:67:02:79:e6:bf:bf:24:69:83:de:
4c:92:01:94:92:b7:d5:8b:f8:73:5d:69:bd:e9:4e:04:b3:c2:
0f:4e:da:de:56:09:97:94:92:b8:d3:43:2c:f7:bd:0f:e9:b2:
d4:f2:5d:00:33:4a:40:47:a9:ee:e8:67:2e:c7:42:7f:9a:85:
e8:8b:22:68:99:50:86:2a:36:a4:4f:34:fa:ac:5f:14:8b:b8:
f1:e1:a4:36:6e:27:26:bc:44:26:36:59:75:a9:f6:d1:26:2e:
5f:c3:c6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:34 2025 by rpki-client