Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
File: pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft (raw, json)
Hash identifier: zu13sLwUnROxuThTYxpgdq2zvznnXf0fagJA9GmCNPw=
Subject key identifier: 44:FE:28:7E:48:6D:7D:6D:FD:88:05:75:3B:0D:B7:46:52:A6:AA:87
Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
Certificate issuer: /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Certificate serial: 019A4DE22CD102CD61C8BFBE0C55710291E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
Manifest number: 0B1A
Signing time: Tue 04 Nov 2025 08:00:59 +0000
Manifest this update: Tue 04 Nov 2025 08:00:59 +0000
Manifest next update: Wed 05 Nov 2025 08:00:59 +0000
Files and hashes: 1: Zul1tgj5h7XyL00R81W1mi6g1V0.roa (hash: JA2Lp3OQPetYYVSiRbEJs9OwBpQrX9gJ6sScomlZ4Xo=)
2: pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl (hash: kr0erxc2E51Vp+AUSbSHECdfp/xi5vMkx7BP6fDAuqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2c:d1:02:cd:61:c8:bf:be:0c:55:71:02:91:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Validity
Not Before: Nov 4 08:00:59 2025 GMT
Not After : Nov 5 08:00:59 2025 GMT
Subject: CN=44fe287e486d7d6dfd8805753b0db74652a6aa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:2c:a4:d1:1f:cd:21:c8:4a:b8:17:cc:cb:
92:f5:59:4a:00:81:9d:a7:95:e8:6d:90:5f:89:2c:
21:e2:0e:c0:f1:fa:1e:97:00:d6:7c:92:9d:94:8c:
e4:17:b1:6c:d3:a8:29:af:3a:b8:c5:84:08:28:18:
32:6c:16:21:b5:45:95:61:d5:4b:50:c3:c4:a1:1b:
b1:6d:99:12:aa:bb:2c:46:f8:cf:d7:e7:05:91:1f:
84:19:e4:6e:1d:ea:d4:52:49:01:0b:82:b4:79:de:
72:e3:7d:ab:05:7a:32:f5:5c:d8:dd:5d:0d:59:61:
19:11:37:29:11:d5:49:e6:98:64:d1:5b:44:48:2b:
31:c9:c1:e9:ce:cd:a3:23:ca:a5:a9:c2:4b:33:97:
db:25:22:19:0d:a9:f1:4a:58:0b:37:45:57:19:40:
e1:47:61:f6:f4:46:cd:40:8e:6c:0a:03:90:e9:3c:
7c:65:9c:e9:74:fb:f3:80:73:f2:47:fc:8e:52:f7:
65:e9:1b:f8:e0:83:45:d7:78:83:56:fa:cc:83:f8:
f4:d6:89:4d:16:d5:69:04:ab:65:03:f0:06:32:7f:
35:08:68:a0:3a:28:42:04:85:a9:a9:75:54:90:19:
f0:11:04:5d:0a:ab:1b:42:91:9d:00:fe:1f:43:0a:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:28:7E:48:6D:7D:6D:FD:88:05:75:3B:0D:B7:46:52:A6:AA:87
X509v3 Authority Key Identifier:
keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5d:46:74:48:24:7b:63:3f:3a:4c:1c:8e:fd:8c:b8:cd:c9:
d4:d5:c6:40:70:d6:0c:05:ec:12:00:9a:98:dd:03:df:0c:7d:
72:b0:cb:8a:0f:ad:77:2d:a3:84:83:0c:d0:fb:d8:9a:59:8d:
a0:7a:11:f4:9c:cd:93:fd:b8:4c:62:ca:e1:99:ea:3e:40:5f:
21:67:c8:8d:70:57:6e:36:97:ec:56:b4:40:f3:c1:aa:96:97:
0f:51:08:e1:08:35:9c:44:a8:40:16:d6:2d:35:d1:96:87:4e:
5b:cc:33:78:6f:0c:60:7b:4d:e0:53:25:05:5b:0a:77:8e:8e:
1c:8b:3f:d1:97:cf:39:ce:ee:89:89:d4:ab:0b:83:60:ef:02:
a0:28:9e:0a:56:28:74:c4:4b:ae:f0:ea:1e:2b:22:8f:83:57:
0a:37:d0:22:8f:92:df:0a:b2:63:01:cc:15:c2:d2:ce:22:75:
c3:0f:ab:77:a8:2c:03:3b:c2:c0:3d:ac:be:3f:9f:33:66:e5:
d1:a3:78:cd:56:14:85:26:6c:b8:ea:ea:9a:40:64:f8:f4:16:
ef:03:37:42:53:8b:e2:2c:20:2a:63:08:d3:72:c6:5a:4f:60:
ec:82:3f:76:ab:65:ba:6d:85:53:8a:dd:1a:e6:62:9c:cc:b2:
c5:12:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:44 2025 by rpki-client