Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier: Hb8h90II78qLz9gOArZhRNzZ3KOiPZhxhciP8nua4vY=
Subject key identifier: FB:F5:BB:71:6C:A8:AE:10:49:20:EB:6F:99:69:61:D1:6E:95:16:D6
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 019A4F995050BBCDC47DD184FE5BF1142601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 16:00:38 +0000
Manifest this update: Tue 04 Nov 2025 16:00:38 +0000
Manifest next update: Wed 05 Nov 2025 16:00:38 +0000
Files and hashes: 1: U7nNEW5XGU3Qw3Z5TlXa8n1A0Xo.roa (hash: El8KNdvpLmelwHnPspzpd+ZkXP2SnewzZSQOjMbCymQ=)
2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: ucpSHLEtGSbYGEhe04Lx8wq//KFQ0/UgLwITONa+Pzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:50:50:bb:cd:c4:7d:d1:84:fe:5b:f1:14:26:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Nov 4 16:00:38 2025 GMT
Not After : Nov 5 16:00:38 2025 GMT
Subject: CN=fbf5bb716ca8ae104920eb6f996961d16e9516d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:d0:56:cd:7a:55:38:81:11:e6:be:1d:76:
de:e3:d7:47:d9:27:f8:a2:6d:35:4c:2d:c9:ca:87:
71:9c:3f:82:fa:d9:fa:f1:d5:96:90:4b:38:3b:81:
09:12:af:55:2d:fb:62:06:cf:bd:d9:11:a6:b3:13:
b5:58:b7:b8:e0:71:14:7e:09:dd:e5:65:fb:72:1e:
db:58:32:f7:61:ab:6f:73:4e:c1:3a:4b:01:26:6b:
b7:db:25:5f:01:05:7c:95:ae:97:d6:c9:c0:c2:82:
4c:5d:b3:84:43:c0:91:38:fd:f5:a8:74:5b:97:79:
eb:69:08:02:1a:79:3f:88:64:36:22:00:63:1c:56:
6f:d3:1a:11:16:22:96:b5:91:83:6e:81:7f:41:23:
74:a1:ef:55:b2:18:4d:38:dc:93:53:92:91:ec:01:
e6:6f:a0:36:3d:0d:ac:26:ae:e1:a0:1b:d3:91:eb:
12:eb:00:24:36:0d:ee:a9:9c:90:f9:53:1e:1a:36:
f2:29:9b:f7:7c:34:a4:a8:66:43:f0:59:5a:9b:a6:
1b:98:28:6a:8c:1c:28:ae:f6:5d:fa:73:f0:73:e6:
9e:6f:63:d1:32:d4:95:66:36:3e:6a:49:76:d8:83:
1d:49:1d:53:c7:36:73:2a:39:87:65:e0:de:6c:77:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:BB:71:6C:A8:AE:10:49:20:EB:6F:99:69:61:D1:6E:95:16:D6
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:55:38:ee:24:bc:70:64:35:e4:36:7c:71:b8:f8:a1:46:f6:
cd:e3:47:e2:d7:5f:66:55:43:5c:e6:1e:d1:fe:34:c1:3d:1e:
33:eb:e6:3a:33:25:08:71:3a:7d:b9:95:dc:3e:ba:29:6a:7c:
8b:2f:47:ee:54:e1:1a:44:e3:09:58:04:01:53:70:cc:f2:83:
ef:1b:52:4c:c8:64:ac:b5:d6:e6:fb:49:c5:d8:70:57:7d:b3:
4a:db:19:e5:f9:ec:87:47:f3:8b:1e:8b:eb:3b:2c:98:ad:34:
92:9f:4d:9e:ff:f4:08:91:4c:8b:46:5e:79:a0:2e:59:62:3f:
10:7b:6d:cd:13:be:ec:bd:df:35:e3:0f:86:5e:e7:6a:6c:f9:
6d:c2:38:a4:21:54:35:4a:75:ef:93:f5:78:f0:2c:97:b1:00:
e6:fa:45:ec:62:c1:61:e2:0a:c0:3a:14:48:2c:d0:fa:9e:ab:
be:fc:11:c1:97:4b:cd:04:21:88:d5:6f:fc:20:90:bf:a8:d7:
32:88:46:32:6f:76:91:35:30:8b:d4:80:a2:4e:40:fb:74:4e:
8e:2a:17:d6:da:77:02:f7:25:fa:6d:48:5b:56:6c:af:3b:b7:
17:a3:50:4d:2e:33:0c:e6:21:c6:8c:0a:a3:25:7f:b3:b2:c9:
f0:e7:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:43 2025 by rpki-client