Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: igdhhzC4f5FNMkdIWR+05NeQUZGlus7UBGISPqvwDTA=
Subject key identifier: 54:8D:8F:E9:2B:D0:A1:A1:B4:02:40:CD:BC:40:04:28:2D:FA:61:01
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 019A51BE8E24166CE570880AE36AABF677F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 02:00:33 +0000
Manifest this update: Wed 05 Nov 2025 02:00:33 +0000
Manifest next update: Thu 06 Nov 2025 02:00:33 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: h0JbafZVAd19wm7gcqU1QcbH5aemFIECYK2OhslTvkg=)
2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:8e:24:16:6c:e5:70:88:0a:e3:6a:ab:f6:77:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Nov 5 02:00:33 2025 GMT
Not After : Nov 6 02:00:33 2025 GMT
Subject: CN=548d8fe92bd0a1a1b40240cdbc4004282dfa6101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:c6:e0:7f:b3:00:cd:e4:b2:a6:2b:37:92:
12:46:c0:8d:73:6e:85:28:4e:b0:e5:05:59:a9:f5:
43:2e:d4:c8:1e:7d:d4:67:38:d1:7c:b3:f9:b5:cc:
25:20:ba:0f:92:54:e8:e7:7d:42:1d:5a:b2:17:5c:
d1:ae:6d:be:ae:a8:af:f7:28:cb:5a:27:bb:f9:90:
6f:4f:1a:89:c3:8a:62:cb:04:16:09:f7:fb:06:0a:
95:bb:93:5f:35:cf:18:b4:c7:60:90:13:da:3b:f9:
ba:39:e3:15:67:1d:00:33:ee:bc:bd:8d:24:7d:1e:
d1:3c:62:0c:fb:26:fc:0e:1b:9d:86:9c:f9:83:35:
43:03:5f:e6:40:77:d2:62:c8:5e:df:62:1e:94:2b:
db:b6:79:f2:4b:21:4b:39:74:c1:89:a5:6e:30:78:
26:85:51:c6:6e:32:8c:11:e5:ec:a3:63:04:09:aa:
85:08:6b:04:72:c1:ae:43:7f:14:94:d0:4d:d9:e1:
a9:21:3f:da:d7:2f:e6:ce:30:dc:6b:e4:e5:89:93:
54:68:2d:46:ff:d6:55:93:cd:d3:14:1b:e0:f1:c1:
60:17:4d:cb:e4:98:cf:c7:20:01:6e:ea:a8:53:15:
7c:b8:ac:73:07:a8:c8:df:13:57:b7:ba:3c:56:08:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8D:8F:E9:2B:D0:A1:A1:B4:02:40:CD:BC:40:04:28:2D:FA:61:01
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e4:4c:28:e0:0a:08:72:3a:69:8a:98:96:b4:70:c0:02:54:
3a:47:62:53:57:a1:90:d9:cf:4f:c0:bc:a7:4c:dd:fc:0f:94:
7c:69:6a:ca:37:4d:91:1d:27:5f:cc:80:71:06:77:5c:25:16:
2f:63:3f:ac:56:50:1d:26:56:a6:d5:8e:fb:e3:80:b2:79:fb:
37:a5:f6:43:98:2e:71:09:be:ff:7b:6e:93:78:8e:c7:21:19:
e3:29:6e:d8:a0:97:f4:cb:e0:87:32:fb:29:ef:3a:3d:18:a1:
cc:81:73:79:d6:58:1a:02:8a:80:a0:44:b8:3d:f0:3a:7b:b2:
40:b9:d7:4a:04:07:10:e7:fd:6c:da:d4:8d:3e:42:56:67:9e:
ce:c9:09:0b:30:4b:56:7c:6b:9f:6c:03:61:7c:83:ff:82:fa:
5e:23:69:15:29:fa:0a:b4:40:65:2f:e8:15:bb:79:f9:98:32:
18:95:15:fc:02:4c:60:5a:89:9f:93:25:ac:3a:9d:2b:3f:0c:
32:c8:b4:6c:ab:36:95:9b:cc:2e:7b:5f:a7:fa:18:50:dc:20:
e1:8a:25:a7:6a:d7:11:f6:d8:6a:c0:a7:6a:19:22:65:b7:7b:
2e:f8:94:6b:26:20:b3:92:51:e6:0e:2a:3a:de:98:5b:ed:0c:
6a:85:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:30:19 2025 by rpki-client