Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json)
Hash identifier: HmAzy4AQrxoJFqX6Ah/utrNychRVPO9B78Fsrv4bBKM=
Subject key identifier: 73:0E:5A:D8:C7:C1:B7:5F:19:E1:3D:91:68:9F:2C:84:7C:F2:66:E5
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 019A4F2B278051F59B2CB3E03A04E03FF22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
Manifest number: 0D1F
Signing time: Tue 04 Nov 2025 14:00:19 +0000
Manifest this update: Tue 04 Nov 2025 14:00:19 +0000
Manifest next update: Wed 05 Nov 2025 14:00:19 +0000
Files and hashes: 1: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: JT0afIgE7yOxzEsFA0UbZtEztdSYk1YZmwMMUoXDbbE=)
2: dJvnPDYPLo4Sslu_Zmnf2lx_js4.roa (hash: 5Msv4aPMo6ReE0YmQsW6vQo0j0v5HFcFjEhrex1AtOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:27:80:51:f5:9b:2c:b3:e0:3a:04:e0:3f:f2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Nov 4 14:00:19 2025 GMT
Not After : Nov 5 14:00:19 2025 GMT
Subject: CN=730e5ad8c7c1b75f19e13d91689f2c847cf266e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:b0:60:03:51:5e:7c:16:ce:70:f2:b1:e9:
ef:26:da:2c:51:db:83:06:43:c2:1e:2e:72:e1:f4:
a8:ab:67:27:bc:22:8b:8f:a7:47:64:d1:9b:32:68:
5f:d8:62:1e:4b:ed:c0:3d:e4:36:ba:a8:57:4e:3a:
e8:63:de:d7:61:82:77:32:76:c6:75:c3:65:b6:a7:
a8:c1:da:d7:23:af:78:a0:c2:32:4b:3d:a8:e2:9c:
23:34:17:37:0c:60:8b:25:ba:3d:2f:21:d8:2d:53:
4a:21:4c:b7:03:36:24:fc:bb:2a:fc:6b:62:b0:ca:
5a:75:e8:41:86:45:7a:73:9b:1e:cc:1e:f9:c3:ea:
67:79:d9:f8:21:b2:7c:da:9b:eb:61:3c:69:ae:03:
98:c0:70:11:7a:71:6e:ad:77:b1:16:26:d2:66:30:
5c:ad:a8:c3:d6:94:04:a6:d5:f1:ec:33:4c:a2:be:
03:b1:92:30:1c:2e:d3:76:21:ae:c0:8a:62:24:b8:
0a:7b:71:93:88:a3:1c:79:f2:90:04:94:b4:6d:00:
ce:05:6c:f7:20:41:09:e9:3d:b9:c7:47:60:32:4e:
44:a1:61:6e:54:3b:c7:7e:60:60:ed:54:94:51:26:
57:21:90:81:62:e4:0f:65:8c:02:9f:76:17:0a:43:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0E:5A:D8:C7:C1:B7:5F:19:E1:3D:91:68:9F:2C:84:7C:F2:66:E5
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:79:62:e2:60:c2:47:cd:b4:83:b0:c7:b2:3e:23:94:45:d5:
84:81:c8:ef:ef:88:94:17:8c:c4:54:80:53:90:06:91:c9:99:
85:ca:9d:ff:36:97:74:bb:f5:4d:e5:cf:ed:a8:d8:7c:2a:92:
90:1f:4d:b4:85:93:11:0f:a4:6a:6c:a2:46:0f:4b:c9:4b:d8:
34:a2:24:f1:0f:e8:00:f5:7c:b7:90:66:de:01:32:9f:cb:16:
b9:9f:df:a7:9c:68:4a:15:60:2d:0e:7e:51:c9:af:8f:7e:72:
99:52:b7:3d:25:2f:11:97:9e:c0:51:63:68:6a:71:f2:c1:b6:
cc:93:b1:f4:1a:d3:78:db:25:00:f4:31:1c:4d:f3:18:91:92:
16:f3:7d:9d:5e:a4:8b:9f:41:7a:44:03:9b:65:50:0b:d8:60:
41:ba:9a:ef:3a:10:85:f4:95:49:4c:61:54:b4:c6:3c:f4:63:
ad:df:7e:41:92:56:18:35:85:a4:8c:ba:99:c6:a6:e5:3e:a1:
fa:2e:a8:dd:6d:ca:77:6d:db:70:a2:73:77:7c:42:43:d9:de:
ce:26:c0:22:2e:41:69:8a:28:9c:9d:a9:ed:f1:47:ca:e1:0d:
0e:ca:e6:9b:a5:de:63:19:2d:18:b3:84:18:06:43:a1:da:3c:
55:72:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:20 2025 by rpki-client