Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: AZNnP4RDUWWmws/YBncfc1ZaFVNX0uCV3X7PwFrcoY0=
Subject key identifier: 09:DD:1D:ED:AB:DE:45:C6:72:AD:AC:F4:80:6D:60:A6:F0:32:5E:4A
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 019A4101A2BDAD1B459EDB27810BFF0DB7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 1706
Signing time: Sat 01 Nov 2025 20:00:17 +0000
Manifest this update: Sat 01 Nov 2025 20:00:17 +0000
Manifest next update: Sun 02 Nov 2025 20:00:17 +0000
Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: jHSJCwMrvs2gIeYeBJG8eqQ0gel6UaDpSbjjK7SHZj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:01:a2:bd:ad:1b:45:9e:db:27:81:0b:ff:0d:b7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Nov 1 20:00:17 2025 GMT
Not After : Nov 2 20:00:17 2025 GMT
Subject: CN=09dd1dedabde45c672adacf4806d60a6f0325e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:2a:1d:5f:bd:98:49:86:65:a1:9a:36:d6:
57:df:dd:72:fd:e9:94:05:ae:83:a0:a0:ee:7e:09:
7e:4c:66:58:88:73:16:69:b3:7a:d5:c4:2d:f7:d5:
82:48:b4:b9:cf:97:23:7b:99:c6:f1:d8:c9:fe:0a:
77:21:9b:a7:66:c5:b2:32:65:4a:f5:b6:7a:dd:fb:
e7:be:18:fc:98:af:88:f0:d8:df:7d:bc:6f:b6:8e:
07:d2:e2:b5:f5:5e:6a:17:fa:f4:95:12:5d:0f:48:
62:50:14:4d:05:47:90:01:2a:91:38:e0:78:ee:f4:
83:b5:72:70:6e:6d:b3:60:db:b2:32:6e:d4:1c:9a:
fb:4d:12:da:09:bf:06:55:19:a3:ea:c5:9c:cc:e8:
fa:97:50:ef:72:f4:6e:71:a3:ec:08:05:29:17:1d:
bc:97:4e:cd:7d:3e:6e:e2:8d:b1:92:17:19:29:09:
4f:62:ba:c9:ed:15:8b:01:b2:f8:61:3c:0b:75:6b:
90:d0:0a:c1:87:ac:b4:61:98:0b:f5:1f:f9:0a:be:
c6:3c:ae:d5:93:b2:23:f9:65:ed:ad:36:b8:45:dd:
6e:7b:b5:33:c0:45:7e:c9:8a:87:73:4e:db:56:d6:
dc:75:3a:78:b2:33:9a:bb:b3:68:ea:17:7b:20:26:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DD:1D:ED:AB:DE:45:C6:72:AD:AC:F4:80:6D:60:A6:F0:32:5E:4A
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f5:f2:73:90:3d:00:06:e0:b6:e5:4e:b1:ed:64:34:6d:2b:
26:09:2e:78:c2:b1:b0:09:77:25:4c:97:9a:fa:cb:d5:a4:50:
9e:bc:65:ea:af:2a:2c:55:3e:ce:9b:b4:b9:91:b3:e6:e9:76:
b1:49:41:64:f7:94:06:5c:d2:12:0e:d7:0d:73:4f:a9:81:7f:
f9:6d:77:91:70:7c:2b:c3:f8:55:74:9f:30:91:c0:1c:9f:bb:
8d:6a:9b:11:42:b7:c5:02:ec:d3:b6:13:90:18:1c:78:60:98:
f8:bb:8f:7e:12:5f:a2:a8:78:33:2d:e8:26:c4:d8:58:01:73:
21:a6:5b:2c:f8:b0:b3:2e:d4:c6:cf:fe:d9:79:ad:57:c4:56:
40:60:d0:60:ae:5b:b3:6f:ad:6b:43:2a:6a:14:08:02:ff:30:
75:13:35:77:54:83:c1:ae:b9:34:5c:84:89:4e:e4:9d:05:ed:
af:7b:53:5a:db:f1:28:bc:94:48:d8:e2:a7:7d:b8:70:4f:4f:
86:58:3f:44:ab:5a:f5:0a:eb:1e:3e:a7:64:01:52:c8:04:e6:
bc:52:f7:f9:a7:fb:12:45:20:98:dc:6e:52:1b:16:20:5a:f1:
69:bf:6d:fc:7c:e7:32:a5:69:52:8e:13:0f:8b:52:c5:f8:90:
89:1a:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 05:37:55 2025 by rpki-client