Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: 62nMCenHze/lB/TMKDIh3cxtUmzeESzvxmqsiNa9oY8=
Subject key identifier: F3:72:82:AE:51:4B:D7:08:36:80:41:5E:98:A9:A8:89:4B:C2:A2:02
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 019A0A8164D5C95EDF3C54AFC19F5C2824D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0ADA
Signing time: Wed 22 Oct 2025 06:00:43 +0000
Manifest this update: Wed 22 Oct 2025 06:00:43 +0000
Manifest next update: Thu 23 Oct 2025 06:00:43 +0000
Files and hashes: 1: J_w-klg8Fz7usxtg6f6kBplmW2Q.roa (hash: wSUiP/GQT3afkhYb4zAVk2weNrXx80BBBUvY2crSbB8=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: 1jkLAudnPoc6W51puD9cYXUayGyw8bg+UC+ahkziX6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:64:d5:c9:5e:df:3c:54:af:c1:9f:5c:28:24:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Oct 22 06:00:43 2025 GMT
Not After : Oct 23 06:00:43 2025 GMT
Subject: CN=f37282ae514bd7083680415e98a9a8894bc2a202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:39:76:8d:69:cc:ba:f8:5a:02:eb:56:0a:
c4:cd:c1:17:bd:26:c6:47:49:59:b5:37:c3:c5:f6:
b0:26:58:f8:b1:f9:78:fa:f5:07:89:41:1d:7a:80:
5b:7d:61:a9:1e:58:6c:d0:47:fd:a0:55:27:15:a7:
63:83:9d:26:e0:d2:49:82:68:74:7c:f6:25:ba:98:
c5:4a:af:b0:01:82:f5:2a:96:04:27:2d:2a:c4:91:
f4:89:f6:21:e0:89:e1:0f:d4:8e:87:f8:c1:b5:85:
8b:78:9e:3c:15:f2:b6:d9:f4:69:7e:08:cb:f2:84:
22:95:42:ee:89:9d:ea:3f:8e:1d:08:db:21:bb:30:
7c:7d:16:94:66:90:1b:64:b6:77:41:39:7d:e9:ab:
bd:b7:57:94:94:36:26:da:84:61:01:5b:b5:1a:c5:
3f:ef:bd:fb:24:2d:09:7e:eb:9a:98:74:82:e4:a0:
49:d8:7f:00:20:0c:a4:03:2b:52:90:0b:21:92:73:
bc:31:79:3a:25:bf:a3:e9:b7:66:bc:77:ad:e9:54:
32:de:d4:44:c2:a7:4b:74:cb:37:31:97:f2:c6:a4:
04:3b:88:51:58:d2:1d:36:05:b3:c0:c4:e5:72:82:
4a:00:2f:29:51:f2:47:b8:9d:36:61:40:bf:74:99:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:82:AE:51:4B:D7:08:36:80:41:5E:98:A9:A8:89:4B:C2:A2:02
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8a:48:76:32:30:10:41:ca:50:90:88:5c:ca:8f:29:9e:4a:
ac:d1:f8:42:d5:d2:0e:9f:43:ad:09:85:1d:a0:01:8e:1d:98:
62:9b:b7:c7:bc:7f:ca:f1:04:b4:21:a0:91:41:6d:a1:30:4b:
e6:e6:c0:f8:74:f6:48:84:19:17:51:78:0b:9c:ab:68:37:52:
bb:b0:f3:bb:13:9b:bd:5a:9a:49:d3:fe:bd:5a:fa:fe:38:fe:
16:d6:cf:4f:e5:38:c3:b7:53:08:3c:c7:fb:76:60:b5:39:24:
f8:0d:cc:ec:db:9e:c6:54:f2:9c:c0:de:10:11:6c:89:1d:f8:
5b:c2:b5:5a:38:c2:c6:46:6e:44:b6:c8:38:95:04:30:6e:7e:
12:4e:27:7e:ff:11:09:b4:59:3d:8d:82:3b:8a:8d:ca:be:c6:
96:e8:b2:2a:b9:75:75:5d:43:45:4c:43:c8:ef:3c:d9:16:05:
a4:24:25:8b:04:0a:26:f8:e7:76:20:eb:27:83:d4:13:db:f0:
39:b6:e5:ed:9d:b1:13:4f:b1:c7:e7:11:b3:fc:04:a0:2a:e4:
59:0e:86:47:0d:e8:fa:00:14:21:fc:2f:b8:56:c4:69:31:71:
ca:a7:ba:f1:ce:6b:16:f2:af:a3:0d:10:7e:80:50:80:71:db:
c1:a0:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:28:06 2025 by rpki-client