Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: 6vfOgvhcuD0HmRWqPhUQUYWylvDYrblsdfbofUJ7iMM=
Subject key identifier: 7E:B0:A2:48:06:08:B4:02:B1:EA:D2:38:EF:33:A2:09:08:F9:C8:D0
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 019A2778FB0C263E9D1D37798EE52ED0D829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 21:00:31 +0000
Manifest this update: Mon 27 Oct 2025 21:00:31 +0000
Manifest next update: Tue 28 Oct 2025 21:00:31 +0000
Files and hashes: 1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: Mx7AkphezXHbVXFZHsLcF4qw5BRfnbEyvAwYujfwSRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:fb:0c:26:3e:9d:1d:37:79:8e:e5:2e:d0:d8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Oct 27 21:00:31 2025 GMT
Not After : Oct 28 21:00:31 2025 GMT
Subject: CN=7eb0a2480608b402b1ead238ef33a20908f9c8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:c4:1f:c8:30:ca:2e:38:ca:96:6a:d2:4b:
7f:29:6a:75:78:1e:cd:dc:bd:2b:dc:6b:fa:1a:57:
af:96:e6:dd:92:7f:9f:0d:37:a8:7e:d9:9a:b1:d2:
50:74:42:d6:89:1f:24:b8:51:4e:fc:a5:ad:4c:f8:
5d:e9:ee:94:c9:6c:cb:6e:b3:52:ae:c9:25:07:ca:
ad:43:e1:98:28:c9:ef:4f:a8:38:93:09:da:99:e1:
db:fc:63:1c:d4:d4:1c:5c:54:44:3c:40:67:73:e7:
1a:bf:f8:45:5d:91:3d:b8:ca:3f:70:a5:31:46:d9:
3b:cc:a8:c1:af:16:fd:a6:dc:b2:34:a7:42:17:f2:
b1:b0:a1:1b:78:67:83:7d:0d:0e:96:f1:9a:ee:32:
7c:69:45:64:ce:1c:5a:ae:b9:94:25:e3:5a:2b:ab:
14:fd:e3:7d:68:47:20:27:dd:93:e8:0c:f9:af:fc:
6b:69:3b:bd:33:e3:5f:10:94:1e:27:0b:0e:6c:e0:
f5:54:41:b1:6f:44:c4:e1:0c:be:f1:64:8c:b8:f5:
50:47:28:29:83:9f:e1:9a:a4:b9:8d:d1:ff:81:20:
ef:ca:8f:bf:20:ad:69:83:24:e5:53:48:ae:24:43:
ce:5d:2f:0d:45:cb:f8:57:38:d2:d1:04:74:32:00:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:A2:48:06:08:B4:02:B1:EA:D2:38:EF:33:A2:09:08:F9:C8:D0
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:16:ef:a9:e6:f0:b9:f9:86:4d:10:b0:20:40:d3:2a:a4:63:
b0:c4:cd:0b:5b:5c:db:2c:45:7d:0b:e8:67:c7:60:64:f0:f5:
8b:5e:22:0e:d5:56:f0:75:14:fa:f9:bc:66:09:d3:a5:22:6e:
8b:ed:1a:ad:5f:e2:0c:41:14:9e:3a:f4:db:2e:76:2a:03:cd:
44:47:94:70:7f:5b:6d:0d:fd:f0:ed:c4:72:b4:5b:82:7e:40:
a4:a8:db:9e:52:73:e1:e3:bb:8f:00:6e:08:28:a6:29:fe:63:
df:30:1b:9b:9c:1c:73:93:b7:a9:9b:a1:6b:46:42:9c:6a:ae:
c4:11:f0:00:85:15:3a:9f:38:59:7a:b5:fc:7b:2e:75:fa:5c:
ff:7d:4e:ff:42:75:19:33:11:ca:fe:d8:91:cc:92:b8:c6:a8:
5a:ef:33:37:25:19:bd:7a:e1:d7:a2:33:26:7e:cc:3b:24:b6:
d4:fc:67:30:f4:cf:f1:ed:05:0c:0d:30:c6:92:c2:34:18:b6:
62:1c:08:03:c2:1a:1f:3c:bf:61:31:65:77:0b:81:36:b7:7e:
e7:15:a9:38:94:83:ef:35:6e:22:07:60:67:90:29:5f:55:45:
9f:14:82:ce:5c:c1:03:39:06:8b:05:a7:ac:aa:f6:f2:f8:71:
a0:9c:ee:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:48:56 2025 by rpki-client