Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier: tkFuwsgFKtc1+Sv/Sa+TyD+4bVA2EBnzRM0tS+O4MSw=
Subject key identifier: 71:A9:C9:E9:1A:17:B4:20:46:69:9E:9E:5F:42:0F:39:6E:3A:97:5F
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019A03A39E6BD09E10A8AD4D961433DE9E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 22:00:45 +0000
Manifest this update: Mon 20 Oct 2025 22:00:45 +0000
Manifest next update: Tue 21 Oct 2025 22:00:45 +0000
Files and hashes: 1: SMwI-Rnmis2eePW_F_GRyzsQVwc.roa (hash: tdRLxodAQZWX8dKW9xJOxhOQI+ocU2apdjVD9eeaSWc=)
2: jHM5InJQV_3L354P4EcDRlzLqQg.roa (hash: YagEFBVsay86X4xOyFCoWFnHQNGB7P3cKZT9Ojcer8U=)
3: p60T_9BRDnROvd9U0mIYWu3JYG4.roa (hash: CASmZCb6AimtCFSZaoN9/6dcpSXZ9rOo6eQFeAX0PBw=)
4: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: brzuEp5S0gI9jDGduvWIQRaS0pcg9rywiIUGIJw1fK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:9e:6b:d0:9e:10:a8:ad:4d:96:14:33:de:9e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Oct 20 22:00:45 2025 GMT
Not After : Oct 21 22:00:45 2025 GMT
Subject: CN=71a9c9e91a17b42046699e9e5f420f396e3a975f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:a5:d2:c2:32:7d:72:39:b4:bb:ed:c3:b5:
9a:a1:81:c0:ce:27:1f:2e:0f:4c:93:c9:ac:8b:bf:
8d:7d:89:65:2c:3a:07:c7:a0:04:49:cb:2e:b8:d4:
67:a9:2d:83:bf:3c:db:31:59:20:c1:c5:08:6c:bc:
93:88:70:fb:38:89:32:8f:6d:ca:aa:bf:76:6c:3c:
e4:1b:90:c6:ec:d2:ab:fc:6a:76:1d:f8:a3:07:cd:
7d:97:8d:4e:ad:3b:34:c3:e9:4f:05:04:24:9a:73:
03:ef:fc:95:28:81:73:62:4e:bc:92:77:84:f1:6e:
13:39:43:e1:cd:2f:28:1d:a5:21:a1:78:f0:1c:3c:
f0:89:1b:98:15:e2:e2:6c:89:09:07:ac:5c:f1:38:
c8:e3:e1:69:8c:94:ba:65:b5:9a:20:c1:13:9d:93:
92:b9:01:70:da:6c:fe:c3:5f:af:59:e3:a8:ae:8f:
f4:9c:ab:6f:2a:3f:13:6a:02:60:c6:a2:6a:43:46:
0d:c2:a1:0f:56:6f:36:25:16:2d:4b:96:78:4f:0a:
b2:ff:6c:9e:d7:0e:61:41:92:90:85:72:ce:ac:b2:
96:8d:fc:46:9b:0e:33:6f:68:0d:f0:72:22:0b:a0:
7a:75:be:a6:67:5c:25:c1:53:92:a8:a7:16:97:fb:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A9:C9:E9:1A:17:B4:20:46:69:9E:9E:5F:42:0F:39:6E:3A:97:5F
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d1:c6:3d:0d:4e:6d:05:82:33:15:c8:9c:21:e2:76:e5:84:
8a:a0:19:e4:84:a5:0e:9a:02:e1:90:2d:d0:d7:87:5c:a3:f5:
f2:a2:25:1c:f3:9e:21:52:5d:69:b2:fd:03:ba:68:30:8a:92:
0f:24:b8:7a:ad:b6:8d:bd:ba:51:fe:c8:1e:41:4f:00:96:a6:
4b:e5:88:fd:c1:48:4d:41:30:5b:2d:cd:34:e2:63:9f:5b:3e:
b3:0f:96:54:fd:7f:d1:a9:4a:0e:4f:2f:f7:04:e1:43:8b:7e:
cb:44:33:4a:0c:45:55:45:ad:10:e3:60:97:ef:33:52:3b:48:
3e:02:a2:e2:e6:dc:8f:37:71:3a:8c:20:57:1f:c8:ef:14:8c:
a5:9f:cf:ba:03:59:3b:20:40:96:a0:53:77:ab:30:bf:cb:e9:
81:fb:e0:12:de:f3:f0:81:30:70:24:a0:08:f8:ac:47:40:af:
71:3c:c2:c7:b4:7f:8a:aa:8f:bb:41:35:9b:ed:02:1a:89:d6:
f9:74:17:7c:42:94:40:2c:37:73:9d:6a:b2:ab:17:3f:e6:52:
1e:13:04:28:3d:5e:f5:21:8b:77:cf:15:95:f9:11:3d:85:24:
5a:65:a2:da:9d:d9:5c:44:8a:63:db:e6:2f:90:ab:aa:58:9d:
63:23:e1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:54:09 2025 by rpki-client