Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: o/5SKMJxP0rR7RHdHCEGb8FPUZ61uMPMe7ODn6mTdNU=
Subject key identifier: 0A:AA:F8:7C:04:3B:8C:3E:D5:1F:90:9C:F3:FB:52:40:6D:08:66:DF
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 019A52D1360D8C1122CC25E160B1556988DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 07:00:33 +0000
Manifest this update: Wed 05 Nov 2025 07:00:33 +0000
Manifest next update: Thu 06 Nov 2025 07:00:33 +0000
Files and hashes: 1: 1-Rh4xR4UjkOh8VqSY4pK4d1pRds.roa (hash: x3ETC4RsRxr7b/UEU+/7lhOsihrtUte3yh6z17TAj9w=)
2: GISiwDWwkN55w-OPn4qwRSweA84.roa (hash: HIcUUP5vEFNT3gS3RcoPzA6F9bPL2QzZ521VNaxnhks=)
3: kT-9aZ8PqlfT-VcjyzgIGjoK45k.roa (hash: GXEy5f6ZMAPtdjysI4zwNtCcC/imdXdb1ZPEUBC58HA=)
4: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (hash: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=)
5: llr3G6G5AM7M10tmA9xFiPTyO0Y.roa (hash: iQGQsp8WoDcGM5vwoYe4dx6kdl9hCiwMrIHoYkwEWK0=)
6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: YDzsXHlzKRz3A2/PU9RQvrJnbtygsFlRiVc3/mTe7kg=)
7: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (hash: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:36:0d:8c:11:22:cc:25:e1:60:b1:55:69:88:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Nov 5 07:00:33 2025 GMT
Not After : Nov 6 07:00:33 2025 GMT
Subject: CN=0aaaf87c043b8c3ed51f909cf3fb52406d0866df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:96:4f:01:ce:52:99:f1:8e:22:1f:ab:b6:
28:07:c4:73:4c:60:bd:fe:02:3b:19:68:ff:f2:8e:
5a:5b:fd:40:df:07:7a:6c:ab:1f:b2:4f:41:ac:f3:
9f:6d:5d:e1:76:91:af:80:96:ed:02:69:46:cd:42:
cc:c8:b5:c0:da:ff:ee:59:2b:6d:86:eb:fd:3d:50:
71:d1:03:09:16:f5:39:ad:f9:5e:89:96:10:24:02:
58:66:49:f4:bd:ca:49:8d:94:96:75:d9:95:16:80:
d1:17:2b:76:d8:3f:ca:e2:3d:ef:25:78:02:7c:3b:
e2:7d:1e:e4:48:92:73:90:7b:40:72:90:95:8e:12:
78:24:24:98:a4:7d:08:8c:43:00:ed:0b:23:20:16:
8e:21:fe:37:7c:c9:be:84:9c:40:c0:26:b7:eb:4a:
ca:3b:bd:69:25:aa:bc:a9:9c:e0:0f:59:13:fc:85:
bf:ba:02:2a:83:6f:68:8c:2d:6b:c1:74:b8:9f:79:
00:e8:8d:56:45:0c:53:ae:d4:c2:dd:5e:64:fd:7e:
d8:b3:67:3b:81:b7:56:c4:d9:93:59:d0:06:f7:7d:
7d:4b:e9:24:f3:6f:4d:26:4c:e8:b4:5f:c0:a7:28:
9e:26:a6:62:b2:eb:2e:e6:6e:6c:39:e5:56:3e:98:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AA:F8:7C:04:3B:8C:3E:D5:1F:90:9C:F3:FB:52:40:6D:08:66:DF
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:80:ad:49:2a:61:af:dc:8c:5b:1d:a9:c8:ee:6d:c1:fa:2c:
5c:05:03:49:df:0f:19:61:1f:dd:55:fb:95:44:46:4e:cc:40:
c9:1e:48:6d:d8:12:e9:fc:62:93:82:13:5a:40:42:80:50:08:
58:9a:2c:97:87:92:c1:58:ad:21:b8:83:a3:a1:b1:d4:1c:17:
d3:10:30:38:d6:60:50:03:b4:a9:2b:eb:eb:ab:c8:13:f2:57:
ca:25:15:d9:5f:56:f1:5d:dd:17:90:ea:d8:eb:7d:fb:de:6a:
bb:cd:e4:2c:c5:85:b0:17:10:f8:5f:60:dc:ff:fb:f2:28:f1:
b8:df:77:40:2e:e8:02:07:66:d0:4b:80:61:71:63:f4:26:e4:
6b:22:ee:88:9a:31:ce:c8:88:53:f9:f5:8d:56:02:e6:7d:e4:
33:b4:d5:e4:37:c6:8a:59:54:de:03:b5:df:62:0a:f1:07:21:
b7:a7:08:a3:2a:15:fb:d6:fe:b4:14:3c:a8:44:92:af:14:87:
63:00:54:63:1c:f3:47:43:db:78:61:f0:dc:94:70:eb:c6:b9:
e4:1f:1a:a0:fc:fa:62:80:c7:aa:fb:36:6a:b9:e6:23:4c:22:
ed:a6:e0:0d:5b:c7:c2:24:b1:da:fe:72:cd:5f:71:01:7c:16:
98:20:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:58:05 2025 by rpki-client