Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
File: pSNBhTlzXL2bC6PCeew1V9cmJlo.mft (raw, json)
Hash identifier: RtZ7d16IHuHDPlDX9w6zsdt/EQMfGyUgREft3qj9wFU=
Subject key identifier: 21:E2:EE:42:B7:82:A3:64:24:74:03:C3:49:2F:CE:F9:A9:27:34:11
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Certificate issuer: /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial: 019A7149DB8607C3A6B941F288AFE7C322E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
Manifest number: 14D5
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (hash: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=)
2: pSNBhTlzXL2bC6PCeew1V9cmJlo.crl (hash: E6ZZJUZlIfgaPIqUBftRVB3DeWZWibWCKiyjvTah/xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:db:86:07:c3:a6:b9:41:f2:88:af:e7:c3:22:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=21e2ee42b782a364247403c3492fcef9a9273411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:9e:69:1b:04:ff:33:37:a7:27:f3:77:bf:
ab:b7:22:f6:de:5e:54:19:b9:1f:7c:e8:26:d6:4c:
9a:d3:d0:74:71:04:ea:42:24:d3:e8:80:21:d4:49:
00:f0:4f:24:b5:c8:ba:00:fa:68:4d:6f:1e:64:13:
75:30:b3:c7:e6:63:21:85:8d:38:55:a3:28:13:3c:
36:a3:b2:34:ba:17:80:56:f9:8a:d7:2f:1b:b0:96:
fe:73:47:43:71:cf:31:eb:96:a2:1a:5a:77:a3:8f:
1d:d3:c5:1a:98:9d:85:8a:1e:62:b0:68:f4:19:58:
66:74:2a:05:42:55:f9:56:eb:20:25:dd:ee:5f:c3:
12:fc:2c:2a:3b:e3:ad:53:38:03:e0:03:91:3d:e7:
3e:22:d8:58:2b:bf:67:61:18:3a:e5:47:4a:83:e2:
57:b7:9b:14:70:0b:43:01:02:95:14:25:f1:4b:2a:
02:5f:48:7e:e8:8e:e4:13:b7:aa:42:f9:5c:7d:09:
e1:7f:6d:d4:81:6c:a3:ec:f1:75:a2:64:3a:4a:d9:
2b:3e:cf:02:27:51:22:39:cd:aa:be:25:5c:18:85:
d6:58:74:2d:dc:2f:5c:df:8a:2b:7c:3a:8d:bf:37:
69:fd:fb:b7:39:56:1f:b5:88:1b:78:1e:f4:1a:e7:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:EE:42:B7:82:A3:64:24:74:03:C3:49:2F:CE:F9:A9:27:34:11
X509v3 Authority Key Identifier:
keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:81:83:24:7b:4e:72:0b:a4:99:8b:2b:47:c8:41:59:e7:c1:
27:c5:3c:d0:ba:89:51:19:d9:dc:19:34:62:3e:ac:5b:c9:30:
cd:39:22:fb:da:90:19:47:d2:da:64:3f:27:fd:78:1a:9f:17:
c9:d1:6a:4f:f5:9b:6b:c7:dd:0c:11:0f:ba:c6:38:f2:91:2a:
bf:f3:c4:ba:a8:0c:83:05:67:e0:bf:c3:df:2c:b1:44:b5:b1:
af:d3:88:cf:92:e4:3a:3b:e7:b4:de:70:86:a9:9f:00:b8:33:
2d:df:73:80:3a:98:8d:81:8e:b6:01:27:0a:0b:a0:7a:6d:17:
7b:5f:30:d4:11:b0:4d:fc:b0:0b:87:1a:80:9e:ae:99:0f:25:
e9:97:3b:4d:eb:2c:92:bd:9d:d7:71:54:cd:ef:de:87:60:d2:
14:d0:90:f2:87:70:19:61:a5:b1:5a:25:80:04:b7:3d:06:fe:
aa:db:44:ed:38:2b:dd:81:64:b2:95:94:a9:2f:b1:49:50:46:
08:39:6b:f6:66:11:80:78:3c:15:46:6d:bb:2f:4c:2b:03:3b:
35:f2:3a:c9:7c:91:23:9a:88:f0:b8:10:c6:29:0c:a5:79:87:
bf:75:97:fd:b3:63:bb:54:0d:d0:77:c8:b6:02:af:11:97:56:
da:34:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:41 2025 by rpki-client