Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File: pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier: +fWx+zX8IQyzaQmidgqmuyzsWAyuUQgOcwtgyOINYGs=
Subject key identifier: D8:59:74:C8:33:60:4F:0D:31:91:A1:06:E4:2D:01:2C:6C:CC:95:20
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer: /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial: 019A232E722D45EDD960A89B029106B7E68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number: DC
Signing time: Mon 27 Oct 2025 01:00:37 +0000
Manifest this update: Mon 27 Oct 2025 01:00:37 +0000
Manifest next update: Tue 28 Oct 2025 01:00:37 +0000
Files and hashes: 1: 23JWsnJj-jb8Wa8yxWmE89jRhEc.roa (hash: hyRLz7Lb6AY/XCQzJ69T02ZWEp1ZBMf9ccg5gtbuPtQ=)
2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: JyEUFYJBMM9T8XumwSY67ZPxPNdcosnSfxbhUz8tv0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:72:2d:45:ed:d9:60:a8:9b:02:91:06:b7:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Validity
Not Before: Oct 27 01:00:37 2025 GMT
Not After : Oct 28 01:00:37 2025 GMT
Subject: CN=d85974c833604f0d3191a106e42d012c6ccc9520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:42:38:db:a0:a5:35:c3:95:ef:97:c3:94:
2c:86:a1:3f:eb:f3:43:01:32:89:60:a3:4d:95:34:
27:3b:d8:e6:fa:e1:b8:19:3c:07:7a:c9:94:b9:65:
cd:43:20:4d:fc:6d:0d:cd:8f:1b:03:75:b8:d4:a0:
3d:4f:e4:ef:1c:d0:e2:33:d4:5d:f0:6a:52:74:03:
3a:4f:05:67:0f:06:57:95:57:13:61:7a:13:bc:32:
4c:6a:29:6e:14:0a:76:b1:db:dc:b9:ca:78:7f:5b:
6f:f1:ca:57:91:87:ac:6e:24:71:bf:76:86:00:ee:
76:de:21:db:e8:f6:ca:75:1e:dc:85:d6:e9:77:f0:
96:00:4f:32:69:cc:ea:8e:f5:af:24:53:eb:45:7d:
75:58:5e:ec:5d:29:ff:15:f9:1f:07:19:b4:30:fb:
0b:3f:c0:b1:78:b5:1a:1e:54:69:62:47:30:47:23:
15:7f:45:28:3a:b7:b4:5c:3c:8a:a3:48:c9:0f:ec:
eb:28:9a:4b:21:c0:9e:07:b0:91:8f:12:35:b1:c3:
cc:ad:c9:cc:e1:bc:ea:f9:fd:3e:6c:78:8a:f3:a0:
aa:62:79:ad:e2:c8:5b:19:86:ad:a9:2e:79:b5:96:
cd:ed:44:84:45:2d:e8:14:ad:2c:ed:01:4e:0e:c3:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:74:C8:33:60:4F:0D:31:91:A1:06:E4:2D:01:2C:6C:CC:95:20
X509v3 Authority Key Identifier:
keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9e:23:ce:a7:f9:49:e5:62:af:59:7d:49:c1:8d:23:ed:e9:
41:c4:c2:f0:ab:74:55:bb:bb:1a:58:ef:70:f1:d8:57:54:40:
78:25:75:05:e6:f0:54:f7:00:d7:cc:cb:6f:09:47:83:b0:c9:
ef:30:fc:64:f6:89:71:11:6d:fb:a0:30:d2:2c:34:9a:8b:12:
12:91:9d:ee:bb:7d:82:ce:b5:92:75:4f:0b:f4:fa:44:eb:7a:
4c:dc:4f:0c:a8:63:ea:70:0d:2a:b6:ad:41:f2:b9:bd:b7:91:
c5:8c:ce:f8:f7:aa:bb:dc:12:6f:2e:6f:65:5d:6c:ac:90:a2:
4b:17:a0:59:7c:38:1c:9e:20:45:bf:05:86:39:ed:41:7a:a3:
0d:99:74:9f:47:41:59:b3:30:29:32:93:9a:a7:9b:6b:ad:bf:
a9:3b:cb:03:8e:3c:ab:30:46:23:0e:08:df:f3:15:b5:65:bb:
e7:c2:37:24:c2:23:94:c1:ef:94:3c:ec:9e:8e:95:3e:4f:22:
48:57:13:fe:a1:5e:5b:32:42:be:ae:6d:72:93:36:a5:71:9f:
50:8c:85:a9:44:c0:92:27:96:22:40:df:eb:50:80:23:20:35:
6a:18:c3:d0:51:bb:52:6f:e9:bb:d5:f2:98:fb:33:55:ed:99:
25:75:bf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:50 2025 by rpki-client