Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: HKcPYbmjUDxiTjfLrYb+OULXSFiQtih0LXYk7b2avVU=
Subject key identifier: 92:3C:13:E9:97:FF:07:CF:E6:A6:35:D9:FA:EE:D8:82:80:0B:57:09
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 019A71B84E94B9C7155E90216669B54727FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 09C2
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: fqv0tsk5cLIMLd0BKTQaSPahNoj5aY8F6JZs6IMZkuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4e:94:b9:c7:15:5e:90:21:66:69:b5:47:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=923c13e997ff07cfe6a635d9faeed882800b5709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:a3:3a:28:64:55:fd:b9:16:a9:e1:c3:f3:
e1:16:b9:80:6a:77:61:89:80:7d:e0:03:60:37:7f:
4b:50:a8:6c:30:91:45:f7:ba:74:14:85:48:b5:87:
ee:94:0e:ef:68:88:86:b0:ae:f8:0f:1c:6f:f5:50:
8f:29:91:4d:93:30:1e:b4:0d:2c:32:11:91:28:d0:
9c:80:58:43:fc:83:fc:d5:e1:bc:02:82:6e:2b:d4:
62:2d:f2:9f:f4:69:9d:57:6a:43:b8:f6:b8:bb:90:
74:4a:94:38:ab:43:5d:fd:56:b1:28:b0:61:8e:3f:
e7:64:ea:5a:01:44:49:4f:c2:d5:3f:f6:d2:00:1a:
30:a6:33:7b:f1:d7:a8:dc:68:03:92:c3:8a:ab:42:
d1:af:47:a6:17:f1:d3:f2:a2:c4:a7:fd:3a:ef:75:
0e:f4:6d:a9:c7:1d:31:06:b2:61:88:98:4b:24:bf:
88:c9:ba:f5:ad:ce:37:b8:fe:97:f9:bd:49:06:c6:
5e:ab:cd:32:94:68:51:f6:0f:18:0c:39:18:c1:13:
d1:76:1e:73:1d:57:1b:5f:29:d3:8d:1e:4e:46:27:
b8:e4:2f:e7:36:c2:45:9a:ed:02:35:93:62:bb:2a:
17:16:42:1d:2a:fd:25:ee:1f:b9:00:04:75:a9:fd:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3C:13:E9:97:FF:07:CF:E6:A6:35:D9:FA:EE:D8:82:80:0B:57:09
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:18:4c:69:4e:74:53:bb:6b:0c:ff:17:5c:20:57:90:ab:a1:
6e:aa:da:0b:74:d9:a6:e2:6e:80:13:7b:04:ce:10:2b:f4:e1:
82:70:8d:a7:e0:59:fc:ae:ea:87:22:ad:b3:46:10:de:aa:e1:
44:9a:5f:28:ae:96:ac:15:c8:c2:61:78:82:43:6b:9e:8a:c9:
fa:04:b4:7b:b6:1b:51:ef:36:91:6a:29:ea:63:9d:98:95:16:
95:63:e1:93:62:b4:46:c5:cf:ea:e3:4d:c7:07:b9:56:67:65:
30:d8:17:c8:84:7e:39:5b:ff:74:77:ce:8f:97:e3:ee:d6:e7:
23:17:4a:b8:05:ee:e6:75:ee:db:71:bb:9b:37:9a:e2:57:80:
e8:61:45:f3:cb:2d:0a:2f:8c:f5:14:06:ce:44:00:c0:11:a3:
a5:0e:52:52:22:af:fe:dc:5c:ae:c2:db:71:b3:41:00:dd:16:
6f:dc:4b:b0:36:8f:d2:bb:d6:7e:90:c4:55:b5:b7:3a:7f:a8:
cb:56:1c:fe:47:b1:b5:ab:13:fd:46:eb:75:84:82:a7:6a:84:
d5:b7:54:fd:44:bb:69:b0:9f:7d:e3:81:67:04:87:a2:a5:72:
c1:81:c4:4d:14:13:75:ce:fb:84:72:72:81:2c:8b:7e:97:4c:
e8:00:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:18 2025 by rpki-client