Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: 7j9rQs0HSBNUkJapbCS6OrG8UCvez/NWztxFFK1qbl4=
Subject key identifier: 66:CC:6E:48:79:B2:01:0E:6C:94:E0:C4:5C:D8:BF:FC:FB:94:CD:DE
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 019A4EF5A9A2DA44E254E1CE7F0A28B4E423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 13:01:53 +0000
Manifest this update: Tue 04 Nov 2025 13:01:53 +0000
Manifest next update: Wed 05 Nov 2025 13:01:53 +0000
Files and hashes: 1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: vyvJSRMaag1m7wTqoMYFsBzPeDltquP0wE1lwppEO6U=)
3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a9:a2:da:44:e2:54:e1:ce:7f:0a:28:b4:e4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Nov 4 13:01:53 2025 GMT
Not After : Nov 5 13:01:53 2025 GMT
Subject: CN=66cc6e4879b2010e6c94e0c45cd8bffcfb94cdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:a4:1c:74:48:88:a0:8d:15:c5:1a:f3:e7:
c0:49:65:29:7a:ea:7e:f6:e2:82:f5:af:f6:6e:03:
64:d9:37:89:30:8a:88:a3:c6:a0:8e:0d:1b:df:31:
14:d8:27:5a:13:96:79:fd:a0:9e:c2:5a:1b:1b:12:
f2:b3:20:7e:b3:02:8c:8b:44:23:2e:c1:eb:da:75:
74:61:34:57:c7:22:dc:7b:ee:d6:7a:d2:93:68:4e:
07:f4:e2:ff:ea:41:ba:d4:72:1e:59:29:c3:f9:34:
38:4d:d4:cc:fc:f1:57:f1:f7:72:68:9f:ad:15:16:
27:64:e4:49:7f:23:3f:c0:26:2c:09:cb:d1:49:3e:
2e:1e:0a:cd:78:79:5f:5c:fa:21:49:78:3f:ec:35:
b3:29:10:dc:23:df:e1:c0:e8:08:1c:d3:39:bc:fe:
e2:42:6f:09:1c:72:1e:9f:98:26:3b:16:3a:8c:75:
50:99:26:ca:37:76:cb:8b:e2:d6:c3:0e:c6:05:73:
dd:e0:17:a8:d0:00:8c:3c:5f:fe:50:f7:e7:d4:87:
a3:3a:24:93:b0:92:ca:b2:3a:a2:06:30:26:63:15:
38:a7:5d:67:a5:4c:55:17:09:9a:00:08:a6:fa:6d:
e3:42:06:14:c2:04:b2:7d:af:10:58:d8:73:e2:8e:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:6E:48:79:B2:01:0E:6C:94:E0:C4:5C:D8:BF:FC:FB:94:CD:DE
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:70:be:ff:93:32:56:52:2e:19:f8:c2:96:10:f4:bf:29:4d:
8e:c0:66:e7:41:d3:98:02:a3:6e:8d:49:ea:81:7d:d7:93:e5:
9f:0e:39:3e:ba:6f:3c:4e:d2:d8:33:2f:4c:34:67:c1:b3:ca:
a9:8f:81:ca:bf:fc:e4:64:c1:3a:38:30:38:38:05:71:73:3f:
5a:b9:24:d1:b4:1b:a3:e3:8b:e2:39:f5:19:5f:3d:11:ea:35:
f1:ea:ce:64:a1:5b:33:4f:fc:77:f7:ff:c6:44:33:d0:b8:64:
c3:6b:c2:ca:3f:2b:22:2d:2d:7b:3b:5a:59:57:18:69:91:61:
d4:e1:84:86:48:41:08:65:29:57:a2:8d:3f:c0:f4:9a:f3:f7:
05:40:63:8f:1f:dc:94:ba:4c:2a:db:f1:b2:55:ff:9b:be:36:
c3:29:43:6e:a5:11:fc:14:88:2d:04:f5:3d:b8:9b:14:05:4d:
e4:8d:ef:55:78:25:27:f6:35:fe:b3:5f:4e:0a:f1:18:63:91:
97:b1:84:fa:57:16:22:3f:e7:11:bf:e6:ea:50:db:1c:95:31:
6c:c2:39:b9:87:c7:16:72:0d:4c:8a:02:83:43:b0:97:50:cb:
68:70:7d:04:ae:f8:32:ff:1d:e6:7a:ea:a4:ff:1c:f7:40:5d:
2b:58:be:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:26 2025 by rpki-client