Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
File: pnQBXVCbXU85bqNjNp6ddP-tdZM.mft (raw, json)
Hash identifier: 7JxVWvQugeTzKKt8MoAiIk4Ce3jvy/cOhTdwztCYYdU=
Subject key identifier: 06:FC:82:A4:A9:40:FD:B9:B0:24:EC:04:DD:78:51:E4:3B:29:D6:42
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Certificate issuer: /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial: 019A4D74276499DAC33EDD20EA00F2C8E4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
Manifest number: 15A5
Signing time: Tue 04 Nov 2025 06:00:49 +0000
Manifest this update: Tue 04 Nov 2025 06:00:49 +0000
Manifest next update: Wed 05 Nov 2025 06:00:49 +0000
Files and hashes: 1: pnQBXVCbXU85bqNjNp6ddP-tdZM.crl (hash: xkhDJ9SGlEpGj1ZIhlcACHHhLeImJp4ya1kpkMnP6cM=)
2: ytlPgasGVjygeToAnL_7qGL6niY.roa (hash: 4pWkNfB/a5sc8sNCH66lYgOc8aQwiUY9Cf8vuGjBpFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:27:64:99:da:c3:3e:dd:20:ea:00:f2:c8:e4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Validity
Not Before: Nov 4 06:00:49 2025 GMT
Not After : Nov 5 06:00:49 2025 GMT
Subject: CN=06fc82a4a940fdb9b024ec04dd7851e43b29d642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:83:90:d5:16:9e:53:dc:7d:0b:c4:3d:6f:
42:9e:39:01:d5:63:76:a6:82:5c:6d:75:7c:fa:79:
9b:1c:48:12:0b:3f:55:5b:5c:c1:d4:fb:31:17:85:
00:54:84:c1:d9:3c:fd:74:c4:38:ae:6c:80:7f:ba:
96:d0:50:46:f3:b2:0d:ce:40:c3:87:d1:9a:eb:f1:
3c:d1:51:c8:e3:61:8d:d0:62:dc:f5:19:f5:90:08:
ea:23:ec:69:9f:71:cc:b1:b1:a8:10:94:60:c3:68:
06:80:4a:47:c6:99:fa:2f:23:c6:48:21:04:e9:f9:
57:61:93:bd:38:0e:ba:21:5e:33:10:39:68:fa:62:
bb:83:e1:fb:49:1b:a1:e1:5a:f5:71:0f:ef:19:be:
69:4a:8e:74:50:8d:89:41:d5:c6:ad:ec:59:ed:9d:
b6:fa:ea:28:06:41:1f:00:b7:4e:ff:c5:c2:87:37:
ef:a7:81:d1:4e:cb:26:31:41:ec:c4:65:d0:ef:21:
37:2a:9f:7d:e5:12:58:7c:32:32:67:a2:d5:8f:d5:
e6:f0:0d:4a:06:bf:ad:40:03:de:df:d0:39:89:89:
e7:b8:74:02:67:06:08:91:a2:fc:8f:05:9a:5d:dc:
f8:05:3c:53:e5:33:91:82:c1:b3:f0:a4:86:91:e5:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FC:82:A4:A9:40:FD:B9:B0:24:EC:04:DD:78:51:E4:3B:29:D6:42
X509v3 Authority Key Identifier:
keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:40:c5:70:c9:cd:3e:49:63:96:b9:7b:9e:da:d6:97:12:e3:
0e:15:81:ee:e6:3a:4a:e2:f9:aa:58:9f:e5:4e:5e:de:2f:72:
09:57:1d:84:d9:99:03:91:21:2b:67:db:88:d2:d7:1e:89:17:
ec:71:6c:be:da:76:78:60:f8:30:e8:0a:c6:c7:e1:5d:db:2b:
e9:79:68:b3:42:e2:cc:3a:13:a7:76:58:60:a6:3d:89:df:67:
22:94:41:9c:95:3a:41:6f:e1:3d:b4:d6:b8:6b:41:03:33:e5:
77:2e:94:74:3b:77:8c:03:56:77:ad:bc:07:cf:84:0e:35:75:
6f:50:00:b3:36:a0:22:23:b8:7e:ac:81:fd:c0:24:33:5a:73:
45:79:40:e0:5e:55:2a:9e:00:59:33:19:62:50:9b:22:dc:75:
25:59:b0:da:26:f9:d6:49:88:eb:f8:e1:2d:e1:60:8a:0f:e6:
46:2b:2c:9f:f2:90:cb:25:56:9b:be:c0:7b:ac:a1:9c:73:20:
7d:2c:78:8d:c6:f8:1a:af:56:7e:0d:24:6d:ac:e5:3e:19:9f:
03:ce:af:01:82:01:0f:37:1c:0f:23:f4:10:cb:ce:11:62:56:
43:2e:f6:e1:f9:75:62:68:6d:b4:c8:5c:73:50:62:81:50:59:
46:64:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:50 2025 by rpki-client