Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier: 7loq4g6MPeYhMAesHpGsCxo2YLqBDpcWL844iIyHGRc=
Subject key identifier: C7:58:28:71:10:E4:A3:93:18:D7:0D:F5:09:1B:F3:BF:A0:1C:8F:07
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 019A4EF4284F0E81A13BA7AC8017D7CC935C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number: 0B50
Signing time: Tue 04 Nov 2025 13:00:15 +0000
Manifest this update: Tue 04 Nov 2025 13:00:15 +0000
Manifest next update: Wed 05 Nov 2025 13:00:15 +0000
Files and hashes: 1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: flNWZ7NDtoH2TzgsxOunrspuMCcf/kL8Kyn6RFgVSOw=)
4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:28:4f:0e:81:a1:3b:a7:ac:80:17:d7:cc:93:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Nov 4 13:00:15 2025 GMT
Not After : Nov 5 13:00:15 2025 GMT
Subject: CN=c758287110e4a39318d70df5091bf3bfa01c8f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:85:28:21:f7:d5:cf:5b:4d:02:fd:86:2c:
8d:f9:4d:9b:f4:50:c7:21:40:8a:d0:5e:af:30:7b:
c8:5b:01:cf:a3:17:6e:9b:52:45:37:a3:c9:41:b0:
82:85:3e:fe:ec:ca:70:c0:81:b5:ae:d9:41:bb:40:
6b:3a:43:ed:59:0b:6c:6a:b9:02:09:7d:c1:93:22:
bf:b0:4d:56:92:ae:ae:44:7b:85:48:d3:fd:e2:4c:
6a:d2:57:3e:87:8c:4c:20:c0:19:04:ce:35:17:fc:
be:28:c3:ef:75:cc:e3:71:56:4c:6a:f2:da:fd:4d:
21:43:9c:23:f5:31:f3:79:f8:fa:ef:d6:a7:98:48:
66:e4:df:29:fb:67:4d:a2:07:97:87:56:69:f8:06:
4c:b0:a2:5e:e3:d1:7e:f3:30:11:85:57:7e:51:dc:
62:83:7a:16:8b:00:70:78:7d:6b:de:c1:d6:2a:30:
cc:75:c3:70:88:69:2b:29:e0:31:eb:ca:54:df:c1:
f1:a1:1c:98:3b:07:27:4d:50:d6:a3:5f:5a:87:1a:
29:2d:b0:c4:c4:20:7f:36:0b:0f:b0:ca:f6:e4:3e:
7b:07:2f:7d:9e:94:41:f2:0f:78:d1:3b:f5:58:a8:
d7:a6:27:48:6a:4b:5f:d5:fc:c4:75:9f:65:d9:1f:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:28:71:10:E4:A3:93:18:D7:0D:F5:09:1B:F3:BF:A0:1C:8F:07
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c4:67:fe:13:bb:45:cc:9e:f0:0f:2b:36:d7:50:76:60:4e:
d8:8c:11:a2:4f:c3:c3:df:3a:5c:e2:9e:3b:9b:56:a1:81:34:
07:fa:22:e1:cc:91:2d:5d:51:c4:bf:d3:3f:38:23:0f:f1:12:
d0:14:1b:8b:a2:66:1a:2f:26:61:7c:e6:64:ae:aa:5b:7c:1b:
cd:64:6f:3a:e2:ef:6a:40:fc:4e:21:49:be:70:3e:88:44:5c:
8e:4e:15:92:a8:d6:26:07:26:f1:16:89:96:c5:00:e8:dc:59:
b3:d1:de:e0:7a:84:62:a4:b3:9a:cb:61:f1:a3:0e:2e:fd:55:
f2:3c:06:dd:e7:81:03:9a:c9:d7:ad:e2:a7:61:72:cf:b2:b4:
14:fb:b1:99:e5:2f:9e:45:64:d7:10:50:24:e0:c5:07:0b:2e:
1a:78:66:9a:2a:a5:1a:21:5b:b7:c6:47:b5:3c:2f:65:38:20:
97:0c:ad:65:77:99:6e:06:49:e0:4e:6e:46:ee:35:89:fe:85:
24:79:8c:77:65:16:c4:8a:64:9c:ed:fa:dd:8f:39:04:83:51:
be:d2:78:6c:35:e7:1b:97:0e:1a:11:1c:63:14:3c:f3:b2:08:
d6:33:5a:7e:27:2f:38:8a:29:bf:0b:b7:c4:a6:53:59:dc:9b:
76:da:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:01 2025 by rpki-client