Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: namp856WTKNcTl3DNIe7gHlrV+2cD0Ns6DIC+EsGbyo=
Subject key identifier: 20:60:B3:CA:3D:19:F2:97:70:6D:F9:74:C8:A9:8A:44:A7:68:EB:58
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019A51872792D48EFC5821D34410EE6B23DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 84
Signing time: Wed 05 Nov 2025 01:00:03 +0000
Manifest this update: Wed 05 Nov 2025 01:00:03 +0000
Manifest next update: Thu 06 Nov 2025 01:00:03 +0000
Files and hashes: 1: QBmdu5DezxoxKGOkAZGRTHz_Ovo.roa (hash: FxhiZR0M8vGdibBrIWA/GLd0J4VZN3IOW0ocA5RR3YQ=)
2: iVyiZxwev_wYI7BNU3e008G4zfk.roa (hash: 8qCaR6UbT2VINv7ijvxNhHg8ECE+Q7GiqaPlqabo5mM=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: 3qdVe1lX6cFUP9kH7U6DBk49aaMeAnz3f4z6T+DZOnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:27:92:d4:8e:fc:58:21:d3:44:10:ee:6b:23:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Nov 5 01:00:03 2025 GMT
Not After : Nov 6 01:00:03 2025 GMT
Subject: CN=2060b3ca3d19f297706df974c8a98a44a768eb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:8c:16:18:52:07:8c:9d:e7:da:4b:7e:96:
43:62:65:5c:c3:7d:a2:da:5c:df:99:a1:4d:e6:e3:
2a:36:47:5a:4a:c8:25:73:ad:bc:ac:b0:32:b2:a2:
fb:a2:99:29:7e:c2:5a:dc:50:1c:43:01:fc:bb:bf:
37:9e:d5:21:1a:fb:0e:44:14:0d:97:f8:84:47:f8:
11:da:ee:fa:d3:13:58:19:85:c3:41:f7:53:bb:04:
16:ba:9a:54:04:c0:fc:ff:0f:23:44:76:25:72:c9:
d3:b0:bf:bc:92:1b:ae:b1:75:5f:4d:3c:a6:68:93:
d6:d8:35:77:d5:83:b0:63:72:60:ee:6f:44:26:f1:
5d:43:e2:94:2c:c0:92:f9:85:02:77:5e:3d:3d:f6:
7c:53:94:86:ca:5d:c1:d4:27:b2:48:4d:34:e2:d7:
c6:64:2b:e6:a3:dc:56:6d:1d:26:5d:93:b9:fb:e0:
11:07:c9:80:0f:7b:ae:ac:f0:b8:ef:f7:80:cb:4f:
f7:f3:ee:30:82:d2:f4:c2:a4:2a:d3:a0:f0:c8:32:
c0:67:0e:06:fd:19:a6:85:35:84:e8:2a:8e:61:63:
01:22:3c:e4:2c:48:64:d8:fd:54:99:97:f2:a8:b9:
5a:69:67:14:34:34:46:db:c9:f3:33:a9:7b:73:33:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:B3:CA:3D:19:F2:97:70:6D:F9:74:C8:A9:8A:44:A7:68:EB:58
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:70:ef:de:91:6b:25:10:74:7b:b3:1d:72:c7:78:ab:f6:b8:
92:b5:df:ca:7d:48:a1:01:a1:0b:a1:46:28:4d:f0:1f:db:96:
2d:55:b3:34:71:1f:8b:03:90:35:92:d4:7c:d9:d0:e2:71:b8:
24:6d:f4:0c:d3:07:c0:c7:12:d3:e4:cd:ee:db:e4:e2:f8:d6:
bb:3c:9a:cd:c7:68:6d:a5:27:b2:5b:7f:71:03:5a:4f:5d:0e:
8c:5b:71:3a:98:5c:fc:f1:86:95:7b:d0:b0:3b:53:4e:11:8c:
8d:18:e2:3a:65:22:b1:e5:1f:62:5b:64:03:5b:25:45:e3:88:
e9:63:a9:50:ac:04:4e:c4:12:9c:eb:80:b8:d4:df:e7:7f:01:
52:72:2d:8a:ca:0b:68:40:1b:ae:73:ff:e5:9d:f4:8f:8f:e1:
2a:3b:d6:ec:71:2e:4f:84:bf:5d:15:58:2d:19:2e:04:2a:b5:
1c:47:5d:9b:88:e0:58:ae:b7:86:b1:28:57:18:b1:d9:25:7c:
26:e8:15:43:e6:73:9a:d0:fc:20:5e:3a:11:0b:c6:e0:5a:f0:
81:e9:52:40:f3:02:4c:ae:7f:0b:29:3b:25:42:a8:ed:4c:59:
54:8f:89:1a:ad:5e:f8:81:93:a3:42:36:97:53:0f:70:2c:48:
2e:38:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:41:56 2025 by rpki-client