Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier: JKYOLJUjicycht8Vtqscs1nF1iluiJ6JOaXn4PXrtDg=
Subject key identifier: 0B:12:9E:56:FE:4F:EE:4E:AA:CE:08:D6:50:0B:4A:EA:88:81:2F:2E
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial: 019A4C6124AE293D1AEC953135D6808310C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number: 153B
Signing time: Tue 04 Nov 2025 01:00:25 +0000
Manifest this update: Tue 04 Nov 2025 01:00:25 +0000
Manifest next update: Wed 05 Nov 2025 01:00:25 +0000
Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: OTf5gsNQx5nByqjz1dtgxkUaH8fFRIHh2d3zbLCuU7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:24:ae:29:3d:1a:ec:95:31:35:d6:80:83:10:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Validity
Not Before: Nov 4 01:00:25 2025 GMT
Not After : Nov 5 01:00:25 2025 GMT
Subject: CN=0b129e56fe4fee4eaace08d6500b4aea88812f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:3f:3b:4c:36:a2:b3:94:a2:4a:38:de:68:
1c:1c:79:1e:f4:84:d1:6e:73:b7:dd:2f:63:de:69:
fa:8d:0c:6c:68:98:8b:6a:c3:c3:20:26:25:07:06:
b2:6a:fc:59:a7:b8:14:02:6a:60:2e:3f:31:a0:4b:
c9:c2:ef:50:cb:ab:36:f2:1d:7f:82:2e:a1:c5:e7:
23:a9:1e:0c:5a:f7:72:d2:0a:89:7f:bf:3d:31:a3:
8d:44:94:3b:11:c6:89:28:1a:c5:21:ce:61:c4:cb:
5c:aa:48:48:e5:c0:8e:b7:a3:ca:a5:ad:ab:dc:d1:
66:d1:39:30:85:c7:b9:4b:ed:c1:4f:d5:9a:8c:5f:
a7:f8:a3:49:45:ee:75:ed:e4:c5:9f:38:02:1c:08:
d1:64:fc:06:bf:ca:3a:db:7f:1f:c3:b6:18:01:ed:
d6:55:d8:fc:c7:35:5e:f8:76:dd:ae:9d:62:47:47:
92:1f:d5:a3:0c:d1:71:1d:dd:2f:c4:07:e0:17:ad:
86:26:37:4d:3a:51:c3:ad:79:d7:61:63:6f:8b:8b:
d0:ea:14:b4:35:4f:d8:58:4f:06:31:ad:f3:25:7a:
07:ed:29:bd:e8:8c:2c:21:94:2a:6b:2f:97:3e:03:
23:c4:95:11:77:43:c2:f2:4d:d8:87:22:bf:3a:40:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:12:9E:56:FE:4F:EE:4E:AA:CE:08:D6:50:0B:4A:EA:88:81:2F:2E
X509v3 Authority Key Identifier:
keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e5:ad:9c:63:76:a3:5a:4c:44:2f:2e:b5:3c:7a:9d:37:82:
4d:83:9b:0d:3c:a5:59:a1:b7:e7:1d:2e:05:44:2c:ae:aa:25:
06:95:35:eb:41:67:02:ed:35:93:20:3b:d5:38:5c:9f:db:c8:
17:f8:9d:ea:4c:88:94:49:ca:df:9c:e5:7a:4e:57:48:02:cb:
d6:d2:70:2f:4e:07:99:0b:8e:88:dd:7f:da:3e:ee:66:ed:39:
35:3c:12:a0:b4:c8:b1:a4:54:00:e1:80:b5:2d:b6:34:fe:08:
8a:70:82:78:74:33:f9:a0:5b:80:7d:e1:5f:e5:0c:32:7b:43:
6b:84:d5:e2:9c:77:62:04:21:b8:1b:e0:74:22:a9:24:03:45:
4b:bc:9b:32:13:d4:59:0a:10:7d:f8:9a:96:31:1b:70:03:9a:
b9:ee:66:1c:66:7e:4a:7d:79:39:5f:d3:69:a9:58:47:78:0a:
c8:9e:72:cc:84:29:60:4b:1d:de:2c:1d:4b:e5:7b:76:fe:ce:
59:cc:64:ae:11:e4:1c:ed:2e:c4:47:14:9d:c9:bd:db:f2:4b:
a8:e5:9e:05:3a:9f:69:6e:b2:48:15:65:ac:a2:1a:e6:5d:d3:
48:c9:5e:f1:28:52:74:c4:8b:92:4e:2a:82:60:62:e0:62:e1:
4e:d8:de:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:24 2025 by rpki-client