Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: KcL/kqIBAaekP4EdFjD5GD6zWhKEoGvG9o0nlslKwTo=
Subject key identifier: E0:A1:81:D0:92:23:55:37:2F:60:2E:98:98:EF:E7:A8:4D:DE:C5:DE
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019A4EF5C24CC6974F3BB4A4F22019C45813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 16BA
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: 6FL6cncJMk5r4dm0Ci2URuN6Y5pCowRCvKmQSq5HgbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c2:4c:c6:97:4f:3b:b4:a4:f2:20:19:c4:58:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=e0a181d0922355372f602e9898efe7a84ddec5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:9f:db:76:6e:c8:8b:39:4b:35:fd:5f:14:
e2:ea:3e:bf:d9:fc:ff:ff:3a:89:55:70:a9:6e:78:
d6:a0:4a:8b:86:ab:25:e1:d6:64:93:38:b1:37:92:
12:2a:b7:d8:6f:87:43:cb:4a:0e:88:fa:d7:94:5a:
fc:09:ba:95:53:79:03:15:9e:42:38:05:bb:cc:e6:
3a:cb:62:5c:1f:58:ef:77:8d:91:ae:fc:55:b9:3f:
75:d1:23:83:60:ba:19:14:93:83:89:18:f7:57:45:
72:4c:06:e0:b5:57:99:8e:2b:56:12:ac:ab:a6:a0:
ec:47:57:d0:18:75:1e:a2:24:94:7a:0c:56:0f:73:
43:1d:04:d2:ad:d7:c8:9e:34:ed:f7:9e:f7:4f:c2:
df:e9:0a:ab:03:af:5c:7b:53:3f:65:11:89:ba:a6:
04:b2:09:80:4d:31:35:c0:fe:0b:6f:80:dc:8b:3f:
04:e2:3c:ee:5f:15:d1:73:8a:41:4d:ef:33:91:8b:
71:0e:fb:13:db:bf:c7:83:ef:cc:d8:0d:c0:34:10:
d1:91:ec:5c:dd:b3:3c:33:a1:92:a9:cb:e0:d8:31:
ff:6f:2e:f2:55:68:92:59:eb:f8:0d:90:0d:7d:4e:
c4:dc:ba:88:77:e9:92:e8:83:8a:52:29:76:62:3a:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A1:81:D0:92:23:55:37:2F:60:2E:98:98:EF:E7:A8:4D:DE:C5:DE
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:4a:97:32:3f:17:63:9e:ce:34:6f:ad:66:26:5d:b8:8d:
ad:c1:30:38:16:ce:42:c4:cf:fb:1d:5f:7f:49:1f:72:ae:86:
04:fc:4d:93:26:5b:54:2a:09:bd:7b:04:36:1f:0f:4d:e4:ea:
f4:ad:1d:01:2d:33:60:de:8f:3c:20:e1:27:f6:98:e6:14:6e:
65:a3:d3:57:ef:9c:ad:28:32:5c:a6:91:08:a9:8d:88:bd:07:
9b:c5:de:e6:fe:28:ed:88:ba:ce:5c:e5:d2:30:bc:79:8d:1a:
69:40:de:78:ea:ce:f7:9a:8a:4c:d2:97:c6:17:e1:99:93:b0:
ea:44:31:5a:b7:2c:de:fd:bf:05:f8:13:e7:fe:8f:f3:d4:ed:
dd:1f:35:e9:6f:f5:e4:f2:c1:2c:21:cd:b0:e7:d3:c6:a0:3d:
12:fb:91:44:e0:bb:43:b6:e7:fc:f2:13:d8:a7:81:f6:fd:a6:
bc:eb:e7:6d:67:35:61:3c:9e:dd:ca:e0:56:bd:20:14:03:5d:
a5:b0:60:26:1a:3b:32:0f:5b:42:e8:31:0f:c0:64:81:8c:8c:
d4:13:0e:cf:e3:9b:79:33:33:e8:d3:3c:97:4c:19:11:21:2b:
b0:ec:f9:ec:a6:77:fa:bf:8e:c0:5f:2d:71:c5:08:8b:f7:21:
79:8f:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:50 2025 by rpki-client