Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier: FXZIpCNaSIDItngcgkYSnhR6OXGYM2cbgFQfSbWynBI=
Subject key identifier: F4:F6:3E:4E:12:79:76:83:D3:64:33:CB:DF:88:6B:EC:D2:B3:D7:27
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial: 019A24778A57726A648E586373A7E7D686EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number: 0974
Signing time: Mon 27 Oct 2025 07:00:05 +0000
Manifest this update: Mon 27 Oct 2025 07:00:05 +0000
Manifest next update: Tue 28 Oct 2025 07:00:05 +0000
Files and hashes: 1: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: N2hMZPJ7vy+7Snd5N0c6c1Bs/dx30zntUQVa2AP7VM0=)
2: prQrRYa7iRxtGVoZ-fOmbS6yQ1I.roa (hash: tnsyAKD0R4WdSHhtE37JrhpYKkCqh9rly9GAA3vquY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:8a:57:72:6a:64:8e:58:63:73:a7:e7:d6:86:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
Validity
Not Before: Oct 27 07:00:05 2025 GMT
Not After : Oct 28 07:00:05 2025 GMT
Subject: CN=f4f63e4e12797683d36433cbdf886becd2b3d727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:f6:21:82:e9:19:c3:e1:39:3b:b7:33:92:
c9:40:9f:b2:11:3e:8d:a1:49:55:9e:ca:08:cc:95:
8f:c3:85:3d:8c:b7:60:dd:56:a8:27:81:e2:5a:f4:
dc:19:50:76:17:10:b3:c8:ab:fa:79:de:9c:64:5b:
20:4d:94:bf:90:5d:35:92:d2:19:93:d9:b6:80:c9:
ea:42:b7:17:5d:18:7e:87:67:f8:80:9d:6e:92:f1:
50:ec:31:50:dc:c9:32:d7:e4:1e:25:79:9d:0d:34:
6c:7c:b4:d1:8e:e1:10:bf:ea:d0:93:ba:52:e6:a3:
ab:dd:d5:7a:c4:a9:6b:63:c7:87:0e:dc:4e:33:98:
9e:8c:58:24:b1:04:9a:ad:35:59:f6:1a:6c:c7:eb:
f8:3b:19:9c:42:79:11:b6:69:c6:0b:a6:0a:ab:b8:
49:b8:0e:f5:09:39:f6:c6:33:8d:6d:1a:e6:1c:ce:
59:4b:33:4d:b5:0b:e7:0e:1d:fe:b1:fa:12:64:d4:
5f:c6:b1:e7:11:c4:f0:20:5b:da:1a:3b:38:5b:55:
59:0e:e8:57:a1:de:95:3f:38:e5:2d:1a:bf:67:e7:
82:78:27:41:2e:9e:4a:3f:94:18:4d:a3:67:34:c5:
72:5e:e6:ab:9d:48:a1:92:99:c5:c2:9e:c6:dd:52:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F6:3E:4E:12:79:76:83:D3:64:33:CB:DF:88:6B:EC:D2:B3:D7:27
X509v3 Authority Key Identifier:
keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a2:5d:db:bb:0f:42:cb:a0:aa:8e:db:be:bf:c2:e1:7a:29:
c9:b3:46:65:a1:12:79:5d:1d:cf:45:28:fd:7b:e7:d7:72:f7:
92:d5:42:15:d5:a1:1b:c7:1b:bd:59:56:0b:86:50:e7:18:53:
73:8e:f8:bd:72:ea:16:5c:8e:45:34:97:f9:33:e3:02:1d:8c:
03:69:ac:16:e5:9d:a4:82:ac:89:d0:fb:ae:37:eb:7a:91:c6:
8f:4b:5d:e0:cd:94:e3:fb:4a:b1:fd:44:ce:f8:14:b8:2b:2a:
f4:86:34:9e:10:78:e5:07:f1:d7:8f:5e:1f:1c:a8:6d:65:28:
fe:20:7c:e2:74:1c:eb:af:d2:60:73:b3:d2:f5:30:f9:d7:1e:
88:b2:b7:4e:b4:44:c8:e8:1d:78:3e:f7:95:77:6c:81:f7:c3:
94:56:2a:14:33:05:62:6f:b0:a9:df:79:1e:5e:c6:82:5b:93:
c0:e9:7d:b6:c6:c9:d6:1c:e1:be:a4:70:e5:8d:8c:f9:52:2d:
81:84:af:51:76:a8:35:c8:40:eb:ac:6f:1e:cd:9a:cc:c4:8d:
94:9c:cf:49:3b:b2:ea:75:46:0a:ab:56:99:f4:17:2b:a0:f4:
a1:97:8d:a4:21:11:09:1c:12:2f:72:24:1a:79:83:81:20:62:
46:a9:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:16:03 2025 by rpki-client