Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: RGl5FQWngrgYjgg9lJm/qMcQVnNm5g4MUDCdnBmGQUo=
Subject key identifier: C1:CB:59:BB:11:12:A6:0A:FC:2E:A3:F6:36:70:E4:D8:E9:C1:9E:3A
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 019A725C958144113C59735A83FB655EF49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 13C1
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: SyEUkkAf1NRkjPixnlvakLXDZTpx/kW8BLuroIXnzD0=)
2: wW2KE3gY8QjEsnXJFmwHDL7WH6g.roa (hash: rYujNDXyFY6K7NmLNp1LWeOiCz0Qh+l0K7mCOQxVp3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:95:81:44:11:3c:59:73:5a:83:fb:65:5e:f4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=c1cb59bb1112a60afc2ea3f63670e4d8e9c19e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:45:9c:54:cd:55:42:a3:25:a9:d2:36:ee:
54:3f:1c:82:96:30:af:07:06:df:f9:0b:51:88:e8:
e5:9b:fe:d0:27:db:3c:03:15:c9:92:a5:61:21:e5:
8d:ee:27:d6:62:df:ae:fe:d7:17:0f:51:50:8b:4e:
88:a4:2f:2e:b1:e9:38:2b:47:4b:05:a9:36:e5:93:
12:83:5c:fd:2c:c4:39:c2:24:67:3c:38:d4:e4:8e:
ba:0d:a1:37:f3:6f:d9:ed:b5:6f:4f:c1:1b:de:48:
fb:5f:8a:a7:bf:a3:65:34:03:35:d3:27:47:8d:b3:
a5:b8:36:9b:c7:7d:ff:33:10:36:6a:be:e6:0e:fa:
20:8d:dd:c1:f4:bc:7c:fc:fe:de:6d:22:4b:49:9e:
0d:2c:25:63:e1:31:fe:8f:40:25:be:60:36:ec:d8:
58:a0:1c:e7:5f:85:15:f2:a8:29:02:29:ea:08:4e:
96:76:d2:ed:2f:d6:78:d8:3e:d1:fc:33:51:c8:e5:
d0:77:75:ae:3d:c8:95:b1:9f:76:b6:df:b5:5b:38:
a8:7d:f8:fd:3f:7d:18:14:3e:74:e5:d1:41:7e:e9:
37:ed:5c:cf:ab:bd:32:bc:ce:d6:e9:d0:28:0a:23:
5b:7b:da:49:a4:1f:3d:f3:a0:08:d6:dc:e6:e3:81:
7a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CB:59:BB:11:12:A6:0A:FC:2E:A3:F6:36:70:E4:D8:E9:C1:9E:3A
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:70:44:bd:98:5a:43:d7:44:71:f0:ec:53:75:24:0b:c2:c3:
35:86:0a:4b:2a:c7:a1:6a:34:c7:aa:be:9e:25:87:88:ff:8d:
28:97:31:ff:fb:82:ec:5c:8d:f4:86:a4:8c:b2:b1:20:db:c2:
34:37:38:0e:e8:ab:aa:ab:53:a6:25:4d:ad:f5:54:40:4f:8f:
4a:78:63:36:99:1d:2c:b9:43:61:c9:ac:2a:3f:aa:8e:ba:4c:
b9:2c:1a:45:28:10:ca:15:bb:5e:73:eb:86:22:a1:30:72:10:
bd:a1:4e:54:69:30:c6:9f:52:60:9a:b4:f2:60:0a:51:68:b6:
55:bf:71:c5:9c:e3:37:e7:65:59:09:1c:10:75:22:96:36:a6:
10:e4:ed:49:9a:98:4d:31:d7:80:d8:09:84:86:ad:53:09:c4:
9f:55:19:68:95:a8:66:08:28:1b:b1:8a:0b:e3:7f:a6:4a:99:
de:ec:ad:6c:52:28:d3:f2:2e:97:ca:26:df:41:85:bd:e6:67:
35:7d:e0:bb:93:ca:48:33:50:f2:34:a1:5c:8f:88:d0:17:5f:
98:1a:6d:fb:60:18:8d:83:19:56:fd:f6:7e:9d:7c:e8:ca:d6:
e0:ff:96:34:8d:57:89:e7:49:ad:08:18:89:0e:b5:2b:68:4a:
95:cc:98:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:22 2025 by rpki-client