Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: ZLtBmp2emhobtmGFmuT0CfKugj41302Au7SiJeu/4Qs=
Subject key identifier: 16:52:AE:DC:8F:47:9C:61:12:76:41:55:FC:91:64:A2:CE:62:9A:EE
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 019A4DE1AD37719279CC829334B3823D87E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:26 +0000
Manifest this update: Tue 04 Nov 2025 08:00:26 +0000
Manifest next update: Wed 05 Nov 2025 08:00:26 +0000
Files and hashes: 1: 64bxF7wA4GbyNp68j4QvJJrXvcY.roa (hash: /BZbUI4tcOvcN8G1/WOb5wicEcPAOnUGplNlfdXvoLw=)
2: 6i00LPl42nHb8qbMKvKVhPUPT4A.roa (hash: 2YZA57Jg0ln+zFDDEt7ePeu3FeU4ieQ7XTEhkxEpCwM=)
3: O0E_dnFN5zi96CvgLLN6eJoyMkM.roa (hash: Ns1LJilR3FhqXle0WRn94Ds/xQRz0HxzYlILaBi7ZCU=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: 5VpdbHUunTogxtDHmH3VoIWzIFWNLv87KwiwTL6F/+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ad:37:71:92:79:cc:82:93:34:b3:82:3d:87:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Nov 4 08:00:26 2025 GMT
Not After : Nov 5 08:00:26 2025 GMT
Subject: CN=1652aedc8f479c6112764155fc9164a2ce629aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:e2:84:dd:0d:2e:f8:ac:09:05:18:ad:d7:
bc:58:9c:d0:51:21:f2:78:81:b5:25:35:68:3a:03:
2c:ed:ea:82:11:2c:2e:e4:bf:eb:fc:d4:56:27:7d:
2b:8f:47:60:61:ec:82:10:9f:31:a5:e0:2b:e4:11:
e4:f7:45:a2:85:3e:6d:af:57:03:20:7d:30:0f:61:
48:a3:2a:a2:ec:a8:b3:b3:1e:9b:de:8c:c7:d1:e8:
bb:25:b4:46:7e:bb:a6:76:db:c4:f2:ff:d6:95:5e:
46:a5:c5:f3:d2:3c:60:21:70:59:97:71:e3:16:84:
5f:67:52:a9:e3:ab:18:f7:e4:4a:c0:18:60:e0:19:
f1:ff:e9:3f:0d:22:d8:19:08:79:b1:df:03:0f:ae:
50:84:3a:7f:9b:92:18:8c:7c:36:f5:8c:c5:9c:13:
80:b1:c2:cd:9a:c1:48:ef:47:39:2e:1b:0d:62:01:
4d:a0:e1:cc:01:f2:fa:61:4a:96:3c:08:fb:b7:cd:
7c:ca:df:4a:a4:28:cc:78:50:2b:9b:1b:63:27:92:
01:77:35:de:e3:62:c0:65:24:59:9f:00:3f:61:c4:
a6:32:a0:c9:14:1e:5b:3c:a0:79:74:21:2e:9f:0b:
5a:e7:ce:87:32:e5:fc:bb:2a:e9:41:23:b9:5a:da:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:52:AE:DC:8F:47:9C:61:12:76:41:55:FC:91:64:A2:CE:62:9A:EE
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:68:27:5d:d1:a6:98:79:ab:9e:2a:31:52:d4:5a:1f:2b:e5:
f8:f2:44:5b:26:4d:86:d8:7f:85:09:a5:37:3e:81:a9:ba:d0:
58:7f:ed:55:5f:93:8e:ce:20:5c:7d:17:85:9a:18:f2:af:03:
f9:9b:0c:ea:14:ea:db:d0:02:24:5a:a5:97:43:ec:e4:1b:f2:
1a:65:1c:48:26:5d:c5:29:0e:27:e1:c8:a5:bb:21:97:82:8e:
a2:6a:53:32:3f:83:81:9b:42:c6:ed:1e:5c:44:1f:15:15:b1:
ea:52:70:c7:09:b7:7b:0d:8f:4b:3b:39:69:da:9d:02:1d:30:
85:42:69:a0:bc:05:2f:53:c3:00:b6:dd:24:a9:e1:b5:9a:c5:
a6:fd:65:27:fb:a1:e4:5d:ef:e4:94:be:f8:8b:ca:ef:36:23:
6f:8a:b5:cf:9d:2c:ca:14:21:e1:b3:3e:5b:77:fe:7b:a5:a9:
78:bf:29:35:3c:47:38:34:92:bb:05:d7:21:a4:73:4b:2e:8e:
a1:7a:d8:f4:01:6d:29:14:e2:c2:2b:60:f2:19:af:f4:9f:dd:
e5:b9:37:d2:d8:5f:cb:13:2f:c0:dd:96:22:43:2c:b2:00:47:
2c:33:d6:8e:82:9b:5e:33:26:ef:34:fd:bd:91:14:12:32:00:
f7:74:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:50 2025 by rpki-client