Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: mkK7ZFh0aHgTfAzVdY6xH6kh6K4iGitw+drrIQqJy6A=
Subject key identifier: B2:2E:51:06:B6:FB:5E:C7:25:8D:50:EE:4F:9D:7A:DB:81:93:30:84
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019A4F98F79898B876CF7897B6FDC44A8F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 16:00:16 +0000
Manifest this update: Tue 04 Nov 2025 16:00:16 +0000
Manifest next update: Wed 05 Nov 2025 16:00:16 +0000
Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: vNGacl+iPrylW+DYO1Goc6mWIlGHIWkun5fvMLaeCDk=)
2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:f7:98:98:b8:76:cf:78:97:b6:fd:c4:4a:8f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Nov 4 16:00:16 2025 GMT
Not After : Nov 5 16:00:16 2025 GMT
Subject: CN=b22e5106b6fb5ec7258d50ee4f9d7adb81933084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:b7:6b:55:cd:a9:d8:51:de:e8:d3:a2:18:
40:1a:22:e0:27:bc:16:8b:a2:f9:b6:10:ec:47:c5:
10:84:4d:bc:26:cf:39:4d:0d:3d:cf:08:ef:5f:a3:
a5:94:1e:a0:9a:b1:de:8f:e0:ab:a8:52:02:16:80:
86:54:3f:7a:60:c3:ae:2b:8b:96:ac:96:72:c4:d0:
ed:55:d7:94:9a:f2:b9:d6:06:9d:ab:4c:52:8c:22:
0b:de:56:ff:63:83:4c:9e:e6:d4:30:98:d6:40:ce:
7a:53:9e:54:3a:bb:08:bb:06:75:b4:6d:dd:93:55:
7b:4b:79:62:b3:2c:46:d3:58:0f:ef:16:e3:d6:cb:
e1:2c:15:ae:33:fa:3e:a3:3c:83:b2:db:25:0a:38:
21:8b:f0:b4:36:98:a6:d1:b9:dc:e3:79:8b:fd:19:
a9:a5:ea:53:93:74:6a:b8:ea:a6:5f:9d:82:88:ab:
b1:d5:75:ea:8f:5e:82:33:52:c0:a9:f8:77:32:81:
27:ae:90:f4:9f:62:86:c1:7c:06:05:87:28:48:bd:
b3:49:45:e3:21:4e:1e:47:35:7b:fa:66:7d:3f:83:
10:1d:57:30:d2:9c:17:f5:12:0c:48:7a:fb:bd:cd:
30:b8:cd:07:9b:54:1d:27:49:93:cf:e4:f9:5d:f4:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:51:06:B6:FB:5E:C7:25:8D:50:EE:4F:9D:7A:DB:81:93:30:84
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:22:52:00:c3:9d:49:95:95:25:85:49:c6:31:76:db:de:03:
d4:0b:6e:6f:3c:43:c8:26:34:4d:64:2e:01:17:60:73:1b:e8:
23:58:96:4e:78:23:60:17:b4:9c:45:1f:38:76:32:35:86:a5:
9f:ed:64:87:46:b3:50:f2:7e:fc:78:c9:1b:80:15:35:74:38:
20:05:e1:b9:cf:e2:97:48:dc:2b:2b:71:82:8a:fc:96:4b:d1:
cc:2f:05:63:21:1c:c3:9f:db:c5:f4:18:3e:bd:cd:0f:8d:a9:
7f:cf:e4:4c:38:5f:c3:ef:97:2f:e8:28:1f:1a:3e:b7:6a:c1:
9b:95:42:49:a7:d0:ee:8f:19:f0:24:73:0f:9b:96:e6:de:3f:
7b:03:9d:6d:bd:5a:c7:c4:21:2a:b2:6d:4d:f1:df:2e:ef:e5:
3f:97:9c:45:5e:63:7e:1b:08:3b:1b:66:52:4d:b3:df:e7:5e:
df:96:10:32:8e:92:a6:b7:8f:9f:4f:d9:87:ff:fa:e6:c7:ec:
5a:cb:4d:2b:80:8c:d2:62:a9:fb:01:02:f6:2f:99:bd:ca:30:
ee:31:29:6a:1d:0c:55:46:e8:84:62:fd:56:76:98:99:84:d2:
24:90:cd:ad:2b:53:be:d6:75:68:1c:d4:31:30:9c:e5:01:32:
01:18:6f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:14 2025 by rpki-client