
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier: 2W7GYCS2qTtcbzs6+JGzf9jtkdd55BXG6jB5WfaLEvo=
Subject key identifier: F1:6B:FF:BB:F8:13:3C:58:C5:5C:51:D5:9D:20:6B:EA:95:73:F8:92
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial: 019A20D24F0BDA46A4689C80218B41149B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 14:00:44 +0000
Manifest this update: Sun 26 Oct 2025 14:00:44 +0000
Manifest next update: Mon 27 Oct 2025 14:00:44 +0000
Files and hashes: 1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=)
2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: egubSToo5nUJ/HtAhNXhu0f4h9fcDFL6DMSk9y8m0Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:4f:0b:da:46:a4:68:9c:80:21:8b:41:14:9b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Validity
Not Before: Oct 26 14:00:44 2025 GMT
Not After : Oct 27 14:00:44 2025 GMT
Subject: CN=f16bffbbf8133c58c55c51d59d206bea9573f892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:45:fc:f7:e8:6c:35:f5:88:02:8c:b8:f7:
d4:01:73:7e:3f:aa:11:c6:b5:70:96:02:33:55:10:
c7:3c:95:45:5b:59:c8:72:74:e5:f8:31:3c:fc:50:
2f:6c:4a:b7:b5:7f:ea:5a:a5:e9:5e:b6:f5:af:fd:
6e:dd:b7:e8:9b:d4:09:d8:0e:49:02:97:ae:37:51:
d4:27:c1:fd:00:4c:c0:19:76:3a:2c:e2:d5:bc:b0:
f0:aa:db:d8:42:63:12:f7:34:51:03:7c:c2:81:0f:
47:e8:8b:96:d4:1c:7d:ab:ee:0b:37:f0:dc:47:e0:
96:6e:67:1d:06:d6:9a:b0:08:16:3d:f9:61:b1:a6:
2b:5b:b7:a1:8f:b9:4f:24:2e:70:04:ca:4d:73:33:
8b:b3:71:a7:44:2a:4a:57:da:c7:f3:7d:46:0d:46:
12:43:ef:41:c3:ad:c5:8f:ad:8b:4f:93:de:78:85:
5a:fc:dd:ab:aa:71:c8:4c:53:be:6b:de:3b:81:ed:
4e:54:9c:ff:c8:d4:4a:7e:ff:92:ca:9e:74:f4:42:
dd:be:32:ba:9a:59:c4:82:01:55:ed:a0:83:46:d2:
f2:9b:4d:27:14:f7:28:01:94:54:67:4b:fd:dd:d1:
59:cf:70:0c:ed:69:70:5e:9a:7d:2c:d0:0f:f8:ea:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6B:FF:BB:F8:13:3C:58:C5:5C:51:D5:9D:20:6B:EA:95:73:F8:92
X509v3 Authority Key Identifier:
keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:61:e8:15:84:1e:89:d5:07:3c:1a:78:96:a1:fc:98:24:de:
1c:b8:c7:8c:aa:73:e6:fc:33:32:11:ec:f8:18:f7:65:05:1d:
a7:02:8f:e2:66:f7:4c:71:c7:7f:cd:6a:db:8c:66:86:f3:48:
e2:c9:be:47:fa:0a:69:f3:c1:9a:bc:10:40:89:0b:02:66:44:
da:04:46:bf:87:b7:a0:61:77:4e:1a:c3:de:eb:2d:40:13:df:
12:8a:e7:85:76:8e:ba:52:22:29:39:28:a7:aa:99:17:ad:2b:
4d:50:b1:00:b1:95:98:c4:33:e6:de:4c:99:95:ac:6c:d0:33:
fd:18:30:03:38:8b:89:5a:31:b4:34:b8:1c:f8:74:28:51:6a:
05:c4:47:07:0a:d1:25:9d:c6:22:42:a7:b3:7f:de:6c:93:f2:
be:c8:a3:f3:8c:9c:d8:af:a0:ad:0a:10:35:f8:3a:ae:f0:11:
ca:46:b4:03:5f:d7:ff:92:eb:5b:f9:34:85:57:39:0c:f7:50:
30:44:15:20:2b:4a:49:13:43:e1:f4:ca:9c:ed:49:6b:b1:79:
86:10:8d:f8:d1:6c:b5:db:c7:0d:92:6c:96:17:9e:3f:d5:e5:
fd:85:53:90:25:da:fa:9a:60:95:d8:a5:a9:c2:11:35:d8:d5:
8b:7a:8d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:43:36 2025 by rpki-client