Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File: pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier: ZPS3/1yDnJRB+lRwug6Afczvwlocg2vzPETiT3+fjz8=
Subject key identifier: CF:1D:D1:CF:B1:49:12:25:32:F2:AC:CD:5F:1B:9B:60:24:41:CE:DD
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 019A255384CB56F712CDF1CCF8AEDD2C971A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number: 1711
Signing time: Mon 27 Oct 2025 11:00:21 +0000
Manifest this update: Mon 27 Oct 2025 11:00:21 +0000
Manifest next update: Tue 28 Oct 2025 11:00:21 +0000
Files and hashes: 1: HMGH1OixlUbIZln6UuRHK_JoRTM.roa (hash: hIobepQhJMDuyYwWr9rOBNqOIvasbF7MFvvQPTjZKdk=)
2: PQ45AYuoXrKgjYd4a2nYqs6hfn8.roa (hash: 7Md1PLbDzWkJqH/gps7rzdw/URXMoRhj3yufH4c5pmc=)
3: XXKuildCsFJXdNyCwBMrowurkY0.roa (hash: NXW1f3EG3KW4h6xADEdnRgY4ZNLFSP48OU6WesEP2Jo=)
4: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: 18q4srTlyKIjWDVaDoabubXCU1D3VxJO4srH9sUapd0=)
5: pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa (hash: WRGBj9YhrJQ6r6myfQ5P/R+NIt879XmbiNbiLcGeJP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:84:cb:56:f7:12:cd:f1:cc:f8:ae:dd:2c:97:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Oct 27 11:00:21 2025 GMT
Not After : Oct 28 11:00:21 2025 GMT
Subject: CN=cf1dd1cfb149122532f2accd5f1b9b602441cedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:23:a8:7d:cb:4f:c3:89:e7:ef:5a:24:01:38:
c3:e7:78:35:27:23:2f:49:a2:33:14:17:a0:4d:0b:
83:f1:9a:38:46:d2:2d:3a:a1:3d:76:2a:fd:88:74:
7f:81:f2:d7:19:d0:a9:c2:72:dc:de:3d:df:23:86:
b3:c5:85:12:2d:11:8b:73:55:7b:2b:46:98:16:e3:
74:2f:a8:b4:6f:0f:47:ba:e6:d7:23:70:aa:81:11:
19:8f:a3:7c:9f:30:c5:1f:80:ea:41:97:9e:1b:cb:
b5:b0:48:96:c9:90:38:75:f3:74:1e:4d:c4:8b:d6:
36:09:03:4a:22:5a:11:1a:49:bf:d4:68:ab:d3:49:
ff:cf:79:7f:12:2a:be:55:99:3e:f6:2c:1f:54:e4:
be:d3:e0:e4:b1:8c:14:ef:c3:bf:e4:6e:e7:9d:a0:
d3:7b:05:aa:46:09:54:a7:46:39:d1:91:46:d9:36:
71:20:0c:ea:4d:50:9c:2c:1f:3e:32:62:0b:97:2a:
61:7f:89:63:08:c5:39:8d:bd:fc:68:8a:65:f2:54:
59:1e:3d:ae:f3:36:8d:f9:e9:05:c3:90:c2:24:5e:
59:be:40:cd:7f:b9:2c:db:12:59:6b:e5:d6:14:df:
ac:fe:4b:6b:73:29:c1:bc:0a:8f:5c:70:98:6d:2b:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:D1:CF:B1:49:12:25:32:F2:AC:CD:5F:1B:9B:60:24:41:CE:DD
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bf:e0:51:fd:15:a5:e0:b6:c4:54:3a:57:90:b9:6d:5b:10:
95:30:07:0d:62:86:01:2d:cc:7a:e1:62:ac:51:ee:78:89:72:
e0:e6:c3:65:69:5a:25:33:29:4c:36:0e:a4:2b:49:ba:64:d8:
34:68:3f:1b:61:26:53:e8:45:21:8d:c9:59:94:96:9b:60:65:
10:f7:5a:46:0b:56:b7:72:4a:5c:93:96:65:aa:01:f2:5b:87:
eb:47:eb:96:a5:65:95:16:6b:d7:3e:88:62:65:2e:95:68:aa:
47:9c:59:8f:b5:58:79:07:c0:3e:e8:19:a6:f2:86:08:01:31:
6b:3d:6f:ac:85:24:1b:7a:c7:47:22:b2:08:0b:af:e2:0a:07:
f0:87:53:28:f6:27:10:f9:61:25:3d:71:c6:c3:3b:07:e9:e6:
23:66:b8:2f:be:71:46:a3:41:94:41:88:21:70:d1:21:c8:9b:
5e:5b:0f:34:07:a7:e9:d9:88:7c:be:5f:af:f9:f3:98:38:da:
f1:c4:ce:54:1e:fd:43:51:37:11:4c:e0:3a:89:c9:3b:78:98:
7c:b3:f8:33:51:6c:91:dc:e4:73:04:9a:ae:e0:ef:c2:4b:5e:
11:01:82:d5:f6:62:e5:4e:be:d4:50:aa:33:7c:52:59:6d:f1:
70:d5:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:22:33 2025 by rpki-client