Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: 8EvFByxzZQVMhdXJ9Il9P5RGVXGVb7uzz4A8yVGcMqU=
Subject key identifier: 02:14:5A:F4:E9:6F:AA:59:67:6B:1C:E1:8A:39:59:1B:FC:0D:F1:13
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 019A4EF42AB7BED31589A7EE900B3EC2CA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0D98
Signing time: Tue 04 Nov 2025 13:00:15 +0000
Manifest this update: Tue 04 Nov 2025 13:00:15 +0000
Manifest next update: Wed 05 Nov 2025 13:00:15 +0000
Files and hashes: 1: RuFROxCqzeIbzpx-h2zhu4XG73k.roa (hash: mYt7O5vyisef0XC7lwr4ZHkct165sZT5ZjyUS4XqL/8=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: ZApvoCYil5WOJt6tjDpsFkf8b91RknpRJDyxLNP0JRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2a:b7:be:d3:15:89:a7:ee:90:0b:3e:c2:ca:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Nov 4 13:00:15 2025 GMT
Not After : Nov 5 13:00:15 2025 GMT
Subject: CN=02145af4e96faa59676b1ce18a39591bfc0df113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:bf:aa:30:f6:0d:7b:87:84:40:72:2a:90:
c1:41:b9:bd:bf:f0:f1:0e:ad:92:c1:40:be:72:94:
d9:d7:0b:d1:7b:15:60:03:07:cd:c9:05:72:b3:b5:
f8:ea:6a:86:78:9a:21:37:fa:20:59:64:3c:65:d0:
46:23:2d:84:68:3d:22:f5:b1:f6:82:4a:23:78:06:
ee:3d:4a:b9:3e:c1:49:e6:96:cc:e7:2f:a3:a0:c2:
89:80:a3:57:21:98:05:c3:cf:8b:e2:5f:34:01:d9:
62:91:04:5e:3b:2f:af:ac:a6:f3:52:1d:3f:9b:50:
c8:b9:1b:06:e9:b8:0a:f6:a0:f1:6c:e7:97:28:f3:
79:9e:e9:70:ff:38:54:98:fb:7d:0d:af:ca:05:16:
fd:64:08:77:b7:42:fe:34:75:0e:3b:b1:28:45:9e:
fe:00:4d:c4:39:ed:7f:35:a8:6f:de:0b:8d:20:4e:
15:ae:92:3c:98:80:3b:45:be:6d:fd:7b:ab:dc:d0:
19:82:0c:0e:18:82:aa:24:e8:43:86:aa:e9:0d:9e:
8b:13:3f:c7:27:53:2b:8a:f9:4c:17:b2:61:a3:43:
80:36:27:9b:e5:bc:f6:0d:ee:44:9c:22:aa:5b:bd:
5f:ee:b3:36:bf:e3:cf:9c:62:22:8f:0f:34:c1:ee:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:14:5A:F4:E9:6F:AA:59:67:6B:1C:E1:8A:39:59:1B:FC:0D:F1:13
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:67:39:6f:49:70:35:41:73:56:14:c6:1b:01:1c:f7:47:f3:
c7:90:4e:8e:eb:d3:7b:90:6a:ff:1c:a3:f9:82:17:af:c0:56:
f7:d6:a8:50:4c:00:75:4b:e6:ba:a2:33:85:72:70:3a:45:ff:
42:59:10:9f:1d:d1:75:7f:8b:e0:32:49:4a:3f:19:1f:0c:e5:
1f:fd:4c:b1:78:68:4d:5d:43:3d:0b:87:41:c0:67:15:ed:25:
f3:bf:bc:b3:80:d8:07:c5:b6:3a:ca:ba:9d:42:10:cf:f9:c7:
8a:9f:67:8a:d5:b1:61:30:91:f7:04:b3:7d:1a:44:fd:1a:34:
8b:dd:97:46:61:55:26:1c:de:71:e2:74:0a:70:84:02:8b:0d:
fb:53:e5:f6:bd:d2:cb:a6:ef:e5:d1:c4:b2:a0:bc:6f:16:57:
bb:72:c2:aa:a9:ac:ca:39:21:6b:80:25:6b:51:25:2e:19:3f:
95:bd:86:a9:d9:f5:a9:5f:25:6f:21:54:85:04:61:55:80:db:
a3:90:47:4a:3b:c9:b1:fb:3b:cc:cf:9b:b1:f0:13:f9:35:6b:
8e:11:c3:43:ef:6b:c8:71:1f:ca:ae:71:48:1e:82:24:2c:8e:
88:1c:bb:b4:a8:b5:e1:eb:50:1b:1b:c4:c9:bc:f4:30:52:04:
d8:58:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:19 2025 by rpki-client