Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
File: pPhiddwhxh2gzs0Sfpd0zKoysLs.mft (raw, json)
Hash identifier: gYxUaowJXpZHV8Iyq1mMB+V7JmQt3zs4/nrBfeJlIlc=
Subject key identifier: 34:86:73:45:8D:FF:0C:C5:96:F1:DA:DA:D0:30:95:B3:4D:B6:AB:52
Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
Certificate issuer: /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Certificate serial: 019A5308419D4338A60F671B26066663EF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:41 +0000
Manifest this update: Wed 05 Nov 2025 08:00:41 +0000
Manifest next update: Thu 06 Nov 2025 08:00:41 +0000
Files and hashes: 1: a0SjSsK93R47m4eRP1Kso9k59CQ.roa (hash: 4DqaXQky67MktM88+QkXZEvBSJRKln9MtvLpFVmXjJ0=)
2: pPhiddwhxh2gzs0Sfpd0zKoysLs.crl (hash: 2IRXj0lP1T4X6hzXORI/T0L7A15qRWPDFCXUy89FefY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:41:9d:43:38:a6:0f:67:1b:26:06:66:63:ef:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Validity
Not Before: Nov 5 08:00:41 2025 GMT
Not After : Nov 6 08:00:41 2025 GMT
Subject: CN=348673458dff0cc596f1dadad03095b34db6ab52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:4a:9a:5a:d3:ab:ae:b5:a9:6e:b8:53:66:
a7:d5:df:73:71:3f:d0:3e:78:28:24:5f:07:90:42:
e1:0b:c5:de:e5:93:5b:94:95:6b:de:c2:69:b0:ba:
50:82:4f:a7:90:f4:0f:b7:c0:00:7a:d8:0f:b4:cc:
cf:5f:a2:8a:b7:33:3f:5c:c9:65:d6:f4:4f:63:ff:
51:0e:62:94:89:6c:59:0d:91:58:35:3b:3d:7d:4c:
2e:49:90:24:21:4d:af:b6:32:d0:70:6a:c2:e1:48:
0f:ce:b0:7b:68:a2:94:1d:69:90:09:91:97:b0:68:
fa:d4:64:46:a2:f6:49:a2:da:b2:6e:f9:0f:e6:5c:
6f:c6:4c:89:03:63:b1:a0:a9:59:b9:d3:ca:b2:b2:
0e:f9:f6:7f:b2:35:37:42:e8:b7:00:d3:bb:42:0f:
f2:87:9f:d7:6f:ea:93:e7:65:f1:d7:3e:1a:24:40:
2c:7a:13:cd:d4:29:06:bd:71:50:4d:f0:68:3a:26:
7c:26:e1:38:a9:c1:dd:4a:fe:5b:7f:e2:aa:e6:b2:
c6:f5:4d:b0:e5:dd:ce:33:7d:ce:5e:9c:33:67:d7:
87:77:b1:81:e0:0f:f7:fe:3f:6c:36:13:b1:18:44:
bc:42:2b:25:37:0f:fd:60:40:4f:7c:57:17:69:ee:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:86:73:45:8D:FF:0C:C5:96:F1:DA:DA:D0:30:95:B3:4D:B6:AB:52
X509v3 Authority Key Identifier:
keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:03:92:12:aa:81:34:7a:0c:36:c0:be:7b:1d:77:ad:f9:e6:
62:3c:a3:5e:b0:98:e7:66:02:ee:b1:c1:58:21:df:f1:62:6b:
fd:95:4b:a7:17:a7:d2:ab:1d:84:1c:cc:91:56:5b:03:38:a6:
95:a5:4a:3a:65:3c:b3:9e:db:ab:61:02:39:60:fa:00:c2:5d:
9f:d9:a0:78:f1:e6:8f:47:c0:60:b6:0d:32:06:66:ad:d9:3c:
ee:62:74:07:c4:f5:33:8b:aa:b2:95:01:20:c2:ab:f1:ce:94:
24:2f:0c:c7:02:a2:da:4b:72:cc:a0:a1:f9:30:34:b7:50:9d:
41:14:a8:0b:38:a3:a0:42:e5:3c:d2:1d:ea:a1:31:ec:f3:67:
a3:7a:42:cd:f0:c8:09:8c:dc:ce:32:cc:55:c5:02:6a:d8:cc:
56:f6:f8:f6:2e:b5:f0:ff:25:58:32:7b:9b:1e:ad:44:87:b3:
6e:75:34:6d:a0:87:48:56:9c:94:8e:95:01:b4:ab:ff:ac:00:
ab:5e:b8:67:cd:e4:bb:31:18:09:bc:83:27:df:68:43:a4:eb:
00:a4:91:84:03:a6:86:17:c0:dc:7e:56:72:ad:ab:4b:2a:20:
76:1b:bf:f5:21:f2:22:3e:cf:ca:8a:89:a2:d1:6b:c0:04:88:
39:96:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:06:41 2025 by rpki-client