Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: F1RdQ03mmN44VgtZ5ehsa9adkpHZyzUraZj92MUvzVM=
Subject key identifier: 02:A0:05:F6:10:AD:21:02:CE:1C:07:98:0D:B0:11:73:2A:88:62:F1
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 019A50E277209CC21F106B6B385B33AC62F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 1692
Signing time: Tue 04 Nov 2025 22:00:10 +0000
Manifest this update: Tue 04 Nov 2025 22:00:10 +0000
Manifest next update: Wed 05 Nov 2025 22:00:10 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: c5CseYMmhZdO1YUgyQmblxrxP6KAxd/84ZWeHmrvMOw=)
2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:77:20:9c:c2:1f:10:6b:6b:38:5b:33:ac:62:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Nov 4 22:00:10 2025 GMT
Not After : Nov 5 22:00:10 2025 GMT
Subject: CN=02a005f610ad2102ce1c07980db011732a8862f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:40:fb:6c:58:9a:cc:31:35:10:ac:11:23:
d4:ff:bc:06:a7:a5:1b:51:0b:12:49:02:af:a1:18:
53:73:fe:92:ef:8c:2e:95:9d:d6:11:e4:64:32:8d:
ac:aa:5e:2f:2e:56:84:9b:61:c1:36:40:41:8a:62:
87:a0:9a:90:ed:02:da:76:e6:e5:e9:d1:98:d7:d8:
91:fe:16:01:43:71:ea:d8:01:48:63:a2:fa:dc:8d:
6f:af:f5:ed:54:5d:d9:cc:01:fd:1e:7e:e2:81:ef:
3c:d2:34:8a:cc:96:6b:b9:6c:6a:9b:cd:d3:1c:f3:
6a:e8:7c:f1:da:b5:fd:84:8b:db:8c:63:9e:93:9d:
31:67:34:78:2d:47:88:79:1a:5d:14:d8:9c:8c:d4:
c5:0d:8d:12:a8:50:0e:c6:a8:f8:42:81:9b:43:5f:
44:72:ea:fd:9c:a6:78:d2:b2:68:ed:89:78:33:13:
c2:cc:f4:0b:12:ac:ae:0d:63:5e:13:f3:97:22:a4:
8a:f7:25:1c:05:8c:d0:ce:1a:fd:c5:d9:0f:d7:56:
55:4c:38:f3:09:2e:1a:65:0a:9f:a8:16:f6:2e:11:
83:a5:28:ee:45:ed:bd:96:06:ad:d1:ea:da:93:cb:
eb:0d:d0:a6:02:83:ae:08:c5:1d:e2:98:89:13:48:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A0:05:F6:10:AD:21:02:CE:1C:07:98:0D:B0:11:73:2A:88:62:F1
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:86:fe:c3:b9:80:d5:e8:ca:e1:07:de:8b:be:94:56:1c:a4:
79:d5:a8:4f:75:42:f8:9b:0b:f4:93:5e:8e:40:c6:96:1d:ab:
cb:f9:dd:c2:80:5d:d7:3b:07:32:2d:74:48:50:e5:7f:2d:73:
4c:f2:99:ad:bb:fb:1e:8e:a1:45:c6:21:d8:f3:cc:ba:04:75:
f1:96:ed:f1:c9:53:11:18:a3:b4:ff:5b:51:94:e2:3f:91:6d:
b8:b4:65:c2:90:f4:9d:0c:e6:99:6c:14:96:90:c1:f7:19:22:
44:68:61:13:60:c5:28:52:ec:25:89:b3:ae:65:74:15:61:07:
e3:d5:be:c9:d7:08:74:5e:18:e2:f5:ff:eb:16:19:be:50:cf:
e4:99:82:76:1f:ce:23:ef:08:12:29:d0:fe:ea:9c:03:3e:b5:
2a:8a:b0:b5:ba:a0:cf:3c:88:39:20:2b:c8:59:5b:08:b3:75:
21:7d:41:25:85:31:7f:60:b6:83:44:7f:24:9e:5a:8b:f5:1b:
40:c7:7d:8d:64:d6:e3:e6:5f:f3:56:23:8b:82:04:93:9b:0f:
99:bd:65:da:27:9e:de:6a:70:e9:cf:c6:0c:74:2e:3f:9e:9e:
54:e9:74:00:9d:93:e1:c5:f9:00:7b:bb:ac:c9:4d:74:8b:66:
b5:da:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:27 2025 by rpki-client