Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: Z/3pfvcl79ezGb7AYym04U5G5Lfl7ef8TSudiiHT1V0=
Subject key identifier: 1D:1C:82:DE:8A:1F:0C:8E:BC:93:DE:22:52:BD:96:A2:AF:63:CA:EE
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019A51F55D4710DA99A608F9DB6430C65667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: A9
Signing time: Wed 05 Nov 2025 03:00:25 +0000
Manifest this update: Wed 05 Nov 2025 03:00:25 +0000
Manifest next update: Thu 06 Nov 2025 03:00:25 +0000
Files and hashes: 1: alAqnpdWmlZswzu0_tz6FMnDdhY.roa (hash: M7Rrc8n9kYkHNkPjYV4H2sgmRO3YC2Zds6sffNzRLow=)
2: nDjykDgCRY5PJeZrLhezjP3d1sg.roa (hash: f6z3v4pV6tnSGxv48rgOnvHwC9qgyyjVMA6AIzAEA7k=)
3: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: r6rTRcqkwwUXQW2l9a5DGRzN/2YbRDl7wYgKBdT3Gng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:5d:47:10:da:99:a6:08:f9:db:64:30:c6:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Nov 5 03:00:25 2025 GMT
Not After : Nov 6 03:00:25 2025 GMT
Subject: CN=1d1c82de8a1f0c8ebc93de2252bd96a2af63caee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:7c:37:5b:d6:05:f5:19:a7:94:19:c2:31:
c5:0e:fe:57:3e:d2:2e:ad:75:3e:21:51:52:45:b1:
05:96:b6:0e:f5:53:26:04:47:6e:a8:0c:7a:5e:33:
22:04:23:0d:32:f9:f1:fd:ed:cb:a5:7e:e8:81:30:
22:67:d9:18:0b:67:5a:63:fd:2b:77:c0:ee:fe:0d:
c4:00:97:ad:46:04:55:8b:bd:1a:27:58:e5:38:5d:
e1:2f:86:1e:7d:1d:27:c5:85:4a:f1:bf:31:a8:1f:
38:aa:be:df:5e:e9:ba:6d:df:73:29:2b:42:99:69:
39:54:0d:27:23:da:4c:a0:b9:2b:ca:e5:3c:b3:0e:
ce:7b:14:2e:83:9e:b2:0b:e4:f1:18:a8:32:a6:8d:
a1:0e:51:93:cc:19:80:55:a9:dd:4f:78:24:ee:18:
9d:4c:8a:11:ec:ba:a6:70:1d:e8:5d:fb:c2:8d:4f:
b9:f1:fd:14:78:fa:47:86:04:3e:c4:64:8d:ab:7f:
b4:54:c5:9f:27:6b:51:57:59:e9:88:34:28:50:63:
27:c7:2d:fa:3a:50:96:67:6b:85:19:64:81:4d:c5:
78:5f:a6:df:14:9e:1a:cc:26:3a:9d:6f:bb:84:bf:
10:55:ec:de:80:f9:94:dc:34:47:1d:2d:19:48:1e:
9b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1C:82:DE:8A:1F:0C:8E:BC:93:DE:22:52:BD:96:A2:AF:63:CA:EE
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:00:0d:9e:eb:fd:a6:b9:ec:3f:26:51:1c:6d:b9:bc:fe:ae:
ac:25:cd:74:0d:5e:b8:36:96:92:ba:ff:56:6b:4d:03:82:03:
c3:b7:ff:90:5b:e4:8d:c6:eb:43:77:b3:8c:d2:2c:db:be:b1:
05:93:55:49:ce:ab:03:5e:0b:17:21:5f:80:bf:5c:f7:f6:4b:
c3:03:2f:dc:48:eb:eb:35:81:c4:b6:81:2a:42:8f:eb:e2:54:
d8:61:fb:1b:eb:3f:30:ee:50:f6:73:5e:41:72:14:9f:a1:19:
0e:47:9d:f7:b2:c6:c8:ff:09:3e:3b:20:1f:f8:41:d5:6b:2a:
d4:82:8d:89:7b:93:3c:85:cc:5a:08:e0:9e:75:b0:55:14:36:
60:5f:4f:76:0e:39:3f:88:2b:f1:69:50:4a:a7:df:d8:83:6d:
92:1c:b7:c3:19:7e:0c:46:d6:de:24:e8:1d:fd:1b:82:7a:f4:
da:3d:dd:ae:ae:a5:f4:20:44:a6:4e:82:7e:77:83:52:64:1a:
14:78:b1:b4:22:2d:f6:64:32:31:5c:41:6c:ef:77:57:ca:44:
4c:96:7f:7c:ba:77:da:bc:a8:ef:ba:60:b2:2d:c0:fd:12:b5:
af:57:04:80:87:ab:47:65:2c:c9:42:6f:af:41:61:68:aa:c7:
fe:15:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:13:32 2025 by rpki-client