Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: 6/FB/PCd7mIYW3qlMwuUlI4tXzjd7pfZuOmhhcFg5v0=
Subject key identifier: 40:E0:7C:1A:82:E5:8F:A3:41:4C:7D:46:A8:E7:0E:97:5B:E2:D8:88
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019A0B5CD96B643A3FD00E9CB1DDDDA8EA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 11A6
Signing time: Wed 22 Oct 2025 10:00:25 +0000
Manifest this update: Wed 22 Oct 2025 10:00:25 +0000
Manifest next update: Thu 23 Oct 2025 10:00:25 +0000
Files and hashes: 1: CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa (hash: AodjA/u0IZIHWzW0wUzupROWai2JCPHe4BHHea78Ms0=)
2: IVs_hi0L8DU-XvjpZ3j52FBoeuA.roa (hash: gjbii66qiZGzea5anGixtq9DuuHhboIpMcO6QPFsj6s=)
3: VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa (hash: g8P7wwNKLRxTvKsPwE4zpfRuDPifBy4qLKB2zlBcTlw=)
4: h5Sxz-4g29FV3kYMoX_wX3iFTqQ.roa (hash: MiZeUc7o+bnHAdooPcAB7y8KMpj0xgLMlX8Uuhc2f7E=)
5: m5QjthCyb83zFe-XzGZ1VPtryIE.roa (hash: idq0+QCfBZJuG2uqoWlXprOQsupzpFPhxR03Ji+VJ/A=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: qkzyhKKobrv0fF8va/LjclHBCV/LpwedXXTvENZ4uHc=)
7: rwgU2mlTS06e7YPqA2lYPO26aP0.roa (hash: w9oJA8hR7uQfiHK53Tj7B18Tkd/AVTn4HnDtFZKJyRA=)
8: zduwkC5PQDOGNkAdIMyn-hz63Ys.roa (hash: dngQzoKRwxwQY6jw/yt5nYtfsqDVjR83fQraMN2FWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5c:d9:6b:64:3a:3f:d0:0e:9c:b1:dd:dd:a8:ea:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Oct 22 10:00:25 2025 GMT
Not After : Oct 23 10:00:25 2025 GMT
Subject: CN=40e07c1a82e58fa3414c7d46a8e70e975be2d888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:1c:60:fa:b1:fd:23:14:5d:bb:71:69:4f:
0b:f6:60:2f:88:8d:3c:f3:ea:26:13:45:ad:b2:7d:
3b:8f:7f:20:e3:28:f1:da:4b:9d:1d:72:86:15:7e:
b5:86:61:7a:49:02:33:d6:1e:07:c2:e9:3c:0b:fc:
f3:52:34:11:2e:0c:68:0c:9f:d1:7d:ae:03:4f:c7:
20:88:c1:26:d4:61:ef:6f:6e:26:74:c6:d2:7e:84:
2a:58:9b:e1:41:fe:1a:ed:2e:ce:aa:5d:b3:a3:78:
75:e6:ed:10:b0:72:e3:89:9a:77:1e:4a:78:32:5d:
e2:8b:0b:c9:e5:d8:d7:78:be:4b:6b:4e:e5:ec:0d:
ab:08:c1:84:c2:b5:67:83:9b:3c:f2:d0:7d:09:15:
44:98:87:62:ae:fb:bf:57:bf:7d:ae:6e:ea:e4:f5:
22:90:8e:94:33:e3:06:6d:9a:98:d3:16:e5:01:61:
7b:29:02:14:5b:90:de:5c:eb:1b:01:28:d3:24:53:
7e:83:4a:a4:8e:08:7c:74:90:64:a7:08:7e:3a:9e:
a1:d2:9d:9e:b3:32:90:3a:ee:08:60:a1:e7:e4:21:
3c:80:69:27:86:00:f4:9e:ed:b0:62:32:d7:b4:3e:
b1:7a:9f:1e:a7:6c:f4:33:f0:6f:ab:7b:fb:41:d5:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E0:7C:1A:82:E5:8F:A3:41:4C:7D:46:A8:E7:0E:97:5B:E2:D8:88
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ee:df:e4:f6:e5:90:03:6f:e7:7d:8b:fe:2b:d5:39:5c:61:
e1:1d:a6:b3:1c:6c:ab:c3:13:7c:c4:76:cc:4a:56:e3:0a:27:
a5:b8:4a:ec:b6:77:02:a0:01:00:b8:e4:d5:8b:36:81:ee:c4:
f6:ac:20:f5:84:51:dd:c1:5d:6a:9a:c8:7d:b9:e9:8c:0d:25:
be:da:60:ba:4c:c4:ed:e9:9f:fb:8b:d0:13:46:30:62:3f:7b:
84:33:4b:5a:69:67:4f:ac:01:f6:1e:61:3c:03:32:e0:14:69:
83:08:f4:fe:96:70:d6:00:31:90:e7:e8:de:79:61:8b:d3:1e:
0a:0e:16:33:6d:e0:71:d0:63:68:d7:70:66:db:a6:a8:12:c1:
ca:3e:3a:2f:b7:94:0a:bc:f8:de:0e:a0:fb:4a:d1:66:e5:6f:
cc:f2:e8:03:f1:35:ad:64:34:9c:35:78:ab:3e:e5:19:49:63:
e1:4a:10:43:35:10:0b:7c:15:53:9a:59:98:63:d4:af:d4:3a:
ae:e4:34:ff:67:bd:1b:33:33:4e:ce:d4:21:da:38:e3:7f:9b:
5d:5a:ce:0b:f4:30:b3:4c:ad:0e:28:ab:40:53:64:a4:3b:5a:
96:c0:5a:33:e7:83:af:28:a4:5a:4e:e7:25:ea:0d:05:38:98:
20:df:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:01:20 2025 by rpki-client