Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: Z1C7Fmnl6XY+yyg6xnY/SuzFMeBsGeNInjVCQxqrunU=
Subject key identifier: 67:2F:98:48:9C:06:00:C2:BF:16:57:87:B1:1C:9E:7D:30:CD:90:CC
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 019A6244DB931C97B950D3435E5A507D4165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 06BF
Signing time: Sat 08 Nov 2025 07:01:11 +0000
Manifest this update: Sat 08 Nov 2025 07:01:11 +0000
Manifest next update: Sun 09 Nov 2025 07:01:11 +0000
Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: wy+DdqbC7Txl3boYreuiBxV0x/HD/0cqYREHpeJRMcM=)
2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:62:44:db:93:1c:97:b9:50:d3:43:5e:5a:50:7d:41:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Nov 8 07:01:11 2025 GMT
Not After : Nov 9 07:01:11 2025 GMT
Subject: CN=672f98489c0600c2bf165787b11c9e7d30cd90cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:4d:89:5d:bd:90:d5:8b:3d:a6:f7:a2:b9:
15:7f:cd:bc:aa:aa:ec:82:d6:4b:53:23:fe:52:b5:
dc:1e:d4:62:44:a8:0c:9a:b4:06:fb:fe:4f:8b:09:
fb:59:6f:85:6f:13:86:f5:c1:ca:1b:a6:14:23:f5:
02:b9:2f:b0:b5:8b:55:0e:c5:10:3e:4c:b8:53:58:
c1:f4:e9:75:c5:ad:b0:7e:ef:ec:c7:d7:58:59:33:
8b:fc:e6:96:0c:f1:56:14:d2:e8:60:b9:91:76:41:
9a:ef:9f:c6:7e:e9:94:dd:8e:63:f8:24:e2:b2:7d:
d0:47:0c:a7:50:04:2c:81:6b:8f:1e:3a:75:56:4d:
76:59:2e:bc:55:14:33:87:0f:61:e4:11:2f:51:57:
c3:93:76:eb:30:b8:3c:3b:01:16:d2:60:b6:69:01:
13:f1:1c:a3:3e:6c:ef:73:53:00:19:81:c6:fc:b2:
95:55:fe:8d:a9:09:4d:ee:79:57:7e:ee:df:ee:d5:
a8:1e:7a:7f:5d:78:04:37:f4:02:68:89:e3:64:fe:
16:0b:68:bb:03:56:49:fd:f6:05:bb:0a:57:76:f9:
28:d4:b4:f2:b9:fe:68:31:8d:76:9e:f5:ad:ec:e1:
d6:46:ea:bf:f2:2e:09:20:3a:30:fc:b4:bf:32:01:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2F:98:48:9C:06:00:C2:BF:16:57:87:B1:1C:9E:7D:30:CD:90:CC
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:46:60:30:9c:f4:4d:5e:82:35:56:7a:a2:7f:0e:7d:73:f8:
31:fe:f8:4a:ad:5d:15:2b:4c:2c:17:f5:39:72:7f:2b:c9:c5:
5d:17:c1:1a:1b:a3:e3:27:fe:00:8f:df:88:65:ab:74:e1:a6:
85:d4:ab:38:ee:6f:4d:ea:7d:88:47:2b:09:43:c9:9d:3b:2a:
51:52:19:22:77:6f:24:90:88:c3:de:9b:20:ff:34:27:b7:7f:
9e:8c:df:e1:bb:24:73:f4:b9:11:8e:9d:b5:01:18:f1:b2:71:
7a:61:77:b1:e9:ea:fa:ed:29:c5:37:77:4e:9f:ce:0e:cb:e4:
69:b3:9c:23:6a:fb:7e:5f:69:5d:ca:1c:b9:8c:55:c5:03:c0:
32:c9:74:9d:a2:28:90:bc:ce:20:29:26:f5:68:6c:3b:bc:a9:
63:8a:df:64:a3:4c:bb:41:6e:7b:01:96:0f:c2:69:e5:dc:8d:
c3:22:69:3f:00:90:3f:d0:13:fc:45:be:18:ab:45:46:c7:ab:
83:89:20:8e:71:56:d6:41:d7:63:ab:66:58:43:31:2f:9d:9e:
8c:c2:8e:88:e7:e0:6b:f7:4e:8f:72:3c:c4:db:40:80:ab:72:
70:9a:4d:0f:48:9f:1b:d1:3a:42:e4:c8:db:c6:ce:57:27:07:
d8:c7:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 11:11:10 2025 by rpki-client