Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File: p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier: zKs42xy72QIu1fge5ErwuiafTnZbt9PqNOiYnw4ed4M=
Subject key identifier: A5:72:47:8D:D2:09:D3:03:DF:65:47:C2:34:45:CF:BC:A8:B3:4D:71
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial: 019A4EF524AC8978B2C790EDB5394DC70DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:19 +0000
Manifest this update: Tue 04 Nov 2025 13:01:19 +0000
Manifest next update: Wed 05 Nov 2025 13:01:19 +0000
Files and hashes: 1: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: 1HgbhKSormIt3qeuzWhcGj93mItaoj6fJyCDWdjgs64=)
2: zPOGOjbboaQbMeAXK6bmSX50QU0.roa (hash: OFCJwWf3DDsRtbtAfKkoaMdc4vMktJu9Jl985uyVWSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:24:ac:89:78:b2:c7:90:ed:b5:39:4d:c7:0d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Validity
Not Before: Nov 4 13:01:19 2025 GMT
Not After : Nov 5 13:01:19 2025 GMT
Subject: CN=a572478dd209d303df6547c23445cfbca8b34d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:e1:6a:a1:4f:52:40:b1:6b:00:02:95:b9:
f3:7e:72:93:e6:77:93:78:e3:82:f4:0e:86:4d:dc:
fd:59:ae:de:7c:5f:e3:1b:17:64:be:b1:e0:04:82:
91:bd:0b:aa:3e:af:ef:77:2d:78:0f:eb:59:eb:38:
bd:80:1f:df:06:1a:dc:87:9f:5c:b1:11:5f:67:ab:
b2:93:11:1d:e5:fc:34:02:ed:e2:17:c0:a9:f2:22:
79:6f:ff:2b:5a:2c:73:db:f0:ac:91:8d:6f:ed:53:
aa:fd:d2:a6:70:95:61:b7:f3:0b:36:98:51:78:68:
70:50:5b:bb:2d:e0:c9:f6:ad:65:cf:52:9f:de:22:
7d:ee:d1:51:d8:b5:b9:10:7f:74:f7:df:ca:f3:fd:
61:19:78:ef:25:29:ad:6d:6f:b9:9c:c5:3c:08:5b:
83:45:2a:1c:45:84:ec:3c:6a:c8:37:7b:e3:af:ee:
24:53:c5:8a:e4:94:95:f8:b1:30:fc:93:34:c5:e9:
45:34:38:1a:f4:fa:fd:58:c9:91:6e:8d:d1:ac:a5:
f8:8e:2f:af:c6:32:bc:b7:65:2a:28:8c:60:c0:bd:
90:e8:b5:73:36:50:91:c8:5f:ef:84:58:0a:a2:6f:
8b:f5:f1:a5:f4:b9:8d:92:de:cc:c3:5e:7f:c5:db:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:72:47:8D:D2:09:D3:03:DF:65:47:C2:34:45:CF:BC:A8:B3:4D:71
X509v3 Authority Key Identifier:
keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:52:54:f2:eb:f6:bb:1f:ba:d7:57:51:e9:8a:f0:73:c9:f2:
27:a4:91:f4:0d:00:6b:00:31:8b:b1:f2:25:62:f1:35:f4:71:
94:b4:fc:f3:e3:97:cd:80:cd:50:6a:56:81:87:b8:4d:46:cc:
75:6e:0f:d3:b6:ee:39:26:43:71:c1:af:e0:24:98:be:58:44:
95:6d:f2:47:e6:e4:44:fb:49:0d:88:40:e4:86:68:de:86:ab:
e4:6d:94:d2:92:b7:60:34:b5:51:bb:ed:ad:6f:cb:d8:6e:8a:
50:21:1b:5a:3e:fb:ea:48:3b:c1:02:02:79:cb:09:dc:78:e6:
91:85:e9:7b:c8:59:f5:8e:13:d4:b1:91:ae:c1:9f:ae:45:1a:
24:2d:ef:05:cc:94:d2:ac:3a:06:b1:70:f2:61:7c:8d:d4:41:
b9:79:7f:c0:9a:d4:7e:1e:73:82:5b:e5:7a:e6:eb:a5:6f:67:
5d:61:19:53:48:23:03:44:8b:ab:2d:a0:63:60:ba:f0:f9:78:
62:bb:f5:82:57:2d:f9:9c:a2:ff:99:a2:d2:ea:38:03:13:ab:
69:3a:80:20:b3:f7:97:d8:eb:cd:d6:51:3a:0b:9c:66:f1:57:
95:90:e9:7d:73:38:df:b2:69:ab:7b:6c:2c:26:ef:f3:e5:85:
be:20:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:25 2025 by rpki-client