Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: mTFbt7Fb7CzOvUXm33UM87+cZrE4Hotklco9f4d8SZU=
Subject key identifier: 9D:15:CC:35:39:7E:9A:F3:32:A7:B5:CC:4F:8D:03:26:43:B2:9E:EB
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 019A71B8B42B1F66FEEF482A19EF0489C6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: sin3Cwh/L+C0NO0UrXGNaEVy/EPV4tsqqJRZHmGotKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b4:2b:1f:66:fe:ef:48:2a:19:ef:04:89:c6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=9d15cc35397e9af332a7b5cc4f8d032643b29eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:12:a1:54:ce:cf:76:10:c3:3e:6b:28:8e:
68:20:2e:ac:9d:40:10:3c:6f:cc:c0:56:32:6f:1a:
8b:a4:ea:9a:91:8c:2b:fb:1f:a2:2c:1e:0b:8c:46:
ef:6c:39:f1:05:f1:c7:58:f0:d7:d4:ed:b1:37:3a:
f5:dc:e2:b7:9b:8e:b4:b5:ff:59:ed:3c:eb:a6:c6:
23:7b:cb:ed:29:37:87:91:9c:f5:9a:64:25:6e:8b:
b4:08:03:c0:75:cb:cf:90:1e:b7:e5:d8:c6:1f:84:
09:ea:84:74:73:98:a4:55:21:f5:4c:f6:a9:13:42:
c6:40:d6:50:07:93:40:03:db:07:49:12:2f:53:72:
43:3d:67:e7:d7:36:07:6f:de:b2:06:96:d9:d4:d9:
bd:a4:bc:1a:95:e8:d5:ee:75:5b:95:71:c4:ef:93:
e9:6a:99:06:18:f6:45:80:8e:b7:d3:f5:a4:2a:13:
55:eb:db:c4:88:e3:5c:64:a6:99:10:9a:b9:cf:62:
3c:3b:ac:90:9b:34:ac:a2:a4:03:44:24:00:47:f6:
44:de:0e:df:83:ea:94:cf:ca:c9:c7:27:71:23:94:
60:b6:cc:8a:c6:13:c7:23:40:4c:f3:3d:58:02:d1:
2b:d8:2e:4d:45:8c:3c:e2:71:45:18:0f:2b:a9:47:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:15:CC:35:39:7E:9A:F3:32:A7:B5:CC:4F:8D:03:26:43:B2:9E:EB
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b7:d6:a1:1c:c7:e5:4c:77:70:fa:10:95:65:5b:17:52:59:
97:65:71:8c:4d:b5:d0:0b:87:ae:96:ba:45:7d:4c:b2:e2:42:
fc:59:2c:b5:b6:e1:12:08:21:f0:c0:f6:60:8c:1b:11:61:49:
d7:f9:bf:3c:c4:b2:8f:cb:99:59:b7:bd:49:92:51:60:b8:dd:
af:9d:1c:b4:30:58:2d:26:9a:56:d4:47:2a:4c:62:b9:c7:94:
d0:25:a4:eb:16:a2:97:74:a6:d3:49:ce:27:09:23:7c:48:93:
05:bb:55:c8:4e:c5:a2:60:a2:05:db:78:d0:cd:76:95:c8:38:
ab:5d:ae:70:e9:fe:84:ce:fe:04:af:5e:43:2d:44:b2:75:ac:
95:18:5b:25:50:e6:53:5b:c5:09:d9:39:24:5c:fe:b4:90:29:
eb:ec:76:b1:43:7a:a7:b6:d8:19:da:bc:bb:9b:c6:05:cb:df:
d1:c1:ff:d4:28:93:00:6e:c4:4e:e6:a6:bf:d4:55:0e:88:6a:
06:2d:c7:95:e4:0a:37:57:89:84:3f:2f:cc:70:dd:c9:72:25:
f4:e5:c3:9e:e7:be:c7:f4:1d:ae:7c:69:a3:bd:d1:be:8c:29:
2e:06:28:e4:da:d7:0d:2e:df:5f:14:62:ed:ee:4a:5a:88:4b:
30:53:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:54 2025 by rpki-client