Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: 6n8FTRUJoCYPYrIZZuAwaRwqx+I4z/JN0/GMU0y9TZk=
Subject key identifier: BA:1D:33:0E:C8:C4:78:71:34:9A:D3:8E:C9:50:DB:B7:7C:0E:C4:79
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 019A4E18E6C6851A5EA3AA347CEC2152BBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 163A
Signing time: Tue 04 Nov 2025 09:00:46 +0000
Manifest this update: Tue 04 Nov 2025 09:00:46 +0000
Manifest next update: Wed 05 Nov 2025 09:00:46 +0000
Files and hashes: 1: 09rZaDf9P6R4diZdTpqbdJFmS5g.roa (hash: nJaLySku8ZYvCwVFCoV24PH4wOMxHH06lLCXG71Fdv0=)
2: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
3: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
4: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=)
5: OSXtgZFTRCqapZbj1Rss-9P6qbI.roa (hash: AUmjKUojOqL9JzPQrWExZ3cDw/gVJywbQJ3W19HFEWU=)
6: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: D3/xcukuXnthXIK9On45ePwfOyTT9z6hEPHHhfL2Y7c=)
7: _9T_S-kr42TO8YpZQ1p1cNkCs8k.roa (hash: DCwl+cJRNegCixrl6T1943uL08w3GonOBX/1cFtnPHo=)
8: pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (hash: uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e6:c6:85:1a:5e:a3:aa:34:7c:ec:21:52:bb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Nov 4 09:00:46 2025 GMT
Not After : Nov 5 09:00:46 2025 GMT
Subject: CN=ba1d330ec8c47871349ad38ec950dbb77c0ec479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:db:ef:16:28:b4:88:3e:6a:25:47:6b:94:
1b:31:af:f8:a7:bd:bc:ed:0d:c2:63:2e:07:62:18:
d9:8b:8d:36:03:f0:9c:f0:f8:08:7e:a7:98:21:1c:
fb:0c:21:33:32:0b:38:89:63:d9:bb:56:1b:4c:c3:
77:74:09:7b:13:0e:2b:6c:88:8f:d3:1e:2c:b4:7b:
a8:97:46:be:42:b6:13:22:8b:cd:6e:9e:54:60:64:
4e:48:ec:3f:b3:b4:20:36:01:b5:be:9e:82:59:b2:
6a:e9:ac:9d:8b:70:5c:f8:0e:57:a7:6a:cc:fd:a2:
11:10:69:3a:18:dd:23:77:27:1e:69:be:3c:df:96:
9c:84:46:66:ed:c4:36:c8:8b:5c:01:fc:7a:c5:0a:
9f:80:52:c8:7e:5c:bd:97:a6:90:df:df:7e:bb:e7:
51:9c:5f:c5:dd:c0:a1:11:21:14:cd:83:e7:86:ef:
7a:cf:fb:90:3f:d6:81:f8:74:f2:a8:6b:f4:47:c1:
2e:1a:74:a6:74:63:e6:7e:ad:3c:74:7e:09:c2:fa:
fe:86:d0:af:1a:e3:2d:6c:dd:ef:b9:8b:d5:7a:8e:
f0:d8:5b:10:1e:b4:76:45:34:8e:45:f0:fa:20:e1:
d8:bf:a8:2e:a1:b6:36:4b:fe:29:20:0a:76:89:07:
fe:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1D:33:0E:C8:C4:78:71:34:9A:D3:8E:C9:50:DB:B7:7C:0E:C4:79
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c4:d5:20:f9:3f:13:1e:a3:66:8c:e9:be:80:a3:cb:21:32:
bb:52:78:18:70:bb:c2:85:18:a6:6c:10:88:33:2a:19:12:38:
1a:87:f9:be:93:b8:c4:cc:95:48:41:aa:7c:09:fa:d4:db:d2:
6b:66:f3:a3:51:0f:70:8a:56:cb:d9:f3:b4:bc:35:d1:1f:b9:
f7:a7:45:44:88:47:b4:dc:88:d0:42:38:60:70:24:4d:6e:55:
bc:40:6f:da:b7:ad:62:15:cd:8f:48:1c:eb:1f:8c:1d:6e:19:
70:b0:64:07:ca:c7:7e:42:d7:73:54:65:d8:3b:ad:d2:d3:34:
00:a9:95:f4:92:84:41:0e:cb:8a:2d:c1:09:34:49:af:8a:0e:
04:ae:3c:ca:5f:46:72:ff:59:69:70:87:08:e4:3e:73:35:42:
59:45:18:5d:57:58:7e:7a:d7:66:1d:57:09:64:fc:9b:21:be:
c0:90:99:17:9e:c3:a4:27:6e:0d:56:1b:b6:de:6b:b8:f1:25:
31:71:d8:82:af:91:6e:f1:12:44:6d:f5:78:a7:12:fb:a9:7a:
dc:ba:dd:a8:6a:46:fb:4a:ce:1d:bb:ad:d6:32:43:b0:f0:6f:
2d:44:4e:93:ca:0c:92:ca:da:1a:ff:eb:1b:98:c6:9a:5e:8b:
15:39:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:29 2025 by rpki-client