Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: pAIw0ZZ9eha1ybcfqnUrB4d5ZXXCNOnIDv+RZ32tpO0=
Subject key identifier: EC:F1:73:65:69:E5:50:BC:4F:B2:97:F5:D6:04:2C:A9:EB:65:BF:FE
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 019A4B8527DDB67AB3A13989CA993D6999E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 15DA
Signing time: Mon 03 Nov 2025 21:00:08 +0000
Manifest this update: Mon 03 Nov 2025 21:00:08 +0000
Manifest next update: Tue 04 Nov 2025 21:00:08 +0000
Files and hashes: 1: BZzPZeF6nVBFp0ePkibSpSImMO4.roa (hash: CC6O/xKtKrtHkfClJGWdlIogukbhcIa4MJLuoLVEnNw=)
2: DUIJZvRDQ202HKrZ6QZsgh8Lpxg.roa (hash: WYZK5bFTDM+c1kX5q/i2Za+Wt5aspj2Z2UKRWytwMBA=)
3: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: 2JV0SZy0nKCszTR4FD00pHwnQsg3DI7PKP2k+9aUDmw=)
4: qRD7ujzJORaie3rLE2YnokYZ17U.roa (hash: S1UJWxv+rwUU/ObCl8nZivjHpfQGYiacpAIE0ZGhjrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:85:27:dd:b6:7a:b3:a1:39:89:ca:99:3d:69:99:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Nov 3 21:00:08 2025 GMT
Not After : Nov 4 21:00:08 2025 GMT
Subject: CN=ecf1736569e550bc4fb297f5d6042ca9eb65bffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:a2:b3:e4:3a:e4:9a:0c:ae:39:a4:ab:7f:
99:2b:c1:e3:c8:73:a6:91:e4:90:f4:3a:07:a7:2a:
2c:94:71:ae:b1:81:28:5e:45:23:ce:92:a6:67:b1:
d5:6f:53:cd:56:ef:cf:4d:32:29:d2:a2:98:0c:c2:
97:ce:44:20:12:e4:5c:91:f9:22:50:e4:61:15:c9:
08:b1:71:31:cb:ec:3c:f3:49:06:4d:16:28:85:d6:
6d:27:6d:ed:d0:f8:63:04:4b:43:d6:38:8c:d4:06:
46:1b:2c:d9:cd:b6:5c:47:98:de:19:9d:58:72:7d:
17:14:12:d1:f6:79:30:43:aa:a7:03:32:ff:06:ff:
1c:3f:73:30:f1:07:ae:1c:dd:15:ee:a7:c7:8b:40:
5c:68:ec:d0:90:4a:74:31:e8:52:2f:e7:a8:39:71:
11:ca:8b:f7:f4:e3:3f:6f:5d:65:ef:5c:be:a5:d0:
db:79:11:98:5a:45:15:5a:db:17:2c:a9:f5:fc:0b:
33:13:cf:33:b1:61:6d:b2:9f:7a:ae:0f:27:d2:50:
51:83:e3:c4:84:eb:77:e7:86:42:b9:81:2e:c9:e6:
8d:bb:23:c3:cf:5d:7a:74:0d:2a:08:f0:e3:63:bd:
42:7f:13:99:6f:62:15:34:83:ba:81:1d:e9:ec:9c:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F1:73:65:69:E5:50:BC:4F:B2:97:F5:D6:04:2C:A9:EB:65:BF:FE
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ea:29:26:36:ba:c0:26:29:dd:e6:f6:90:6e:d0:b3:16:3f:
0f:45:c5:af:8d:1b:5a:f1:b7:c4:5b:3d:1a:89:23:73:f7:68:
b0:ba:a3:7c:28:ba:e9:c2:5d:2f:0d:9c:25:fe:96:7e:d7:04:
17:70:ae:ea:2f:b1:ad:eb:e5:9e:c0:f7:b5:a0:91:8e:68:9c:
b7:7a:00:6b:f7:0e:70:c6:b6:6c:49:2b:98:10:ef:0c:11:a8:
62:f7:f4:da:68:6e:03:fe:28:38:4d:07:26:ad:06:9d:66:7e:
19:26:65:b4:67:09:75:c6:de:60:76:1f:46:80:24:e4:e6:c0:
17:7a:66:88:2b:5e:4f:be:bb:30:31:ac:d6:10:ec:bc:25:e8:
52:43:a2:c7:59:91:d4:af:43:d2:53:4d:25:ec:47:bc:11:63:
9c:b0:36:e3:3c:64:b9:13:75:c8:81:32:1e:7d:9c:d4:d3:41:
60:6b:96:a3:fe:c8:23:a6:98:01:b2:e9:d3:1f:59:1d:7c:a5:
c3:ae:97:47:4f:2b:d7:8e:18:bf:fb:a7:b1:76:45:56:da:3c:
cb:6e:96:f5:cb:49:6d:21:3e:79:f8:85:a8:c2:0e:d5:62:52:
65:5c:8e:af:e1:52:28:1a:78:0b:5d:c4:2c:d3:c5:92:47:bb:
3f:ec:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:17:45 2025 by rpki-client