Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File: pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier: Kf54NWpsmCgYTKFCy6ksQOhElWapCxGdhjqLuHA8EII=
Subject key identifier: AB:56:85:43:86:FB:8C:CE:5E:F5:00:60:44:E6:97:B9:8D:40:3A:21
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial: 019A503E35F5B01ACF33A841457E22625B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 19:00:45 +0000
Manifest this update: Tue 04 Nov 2025 19:00:45 +0000
Manifest next update: Wed 05 Nov 2025 19:00:45 +0000
Files and hashes: 1: C68Jy4vS9ZhrosrQ0hLHm1uIuZY.roa (hash: KriDQtKp0/6qr4HNTZ8vH7ju161mMdjIkNUJn2wDbds=)
2: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (hash: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=)
3: aLyfJT6We20ULVg1UbujnE5UVaI.roa (hash: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=)
4: lixJMjo5-_bNmfYtadlmrrGpsCg.roa (hash: OW5E61Tvo1LN0X4Q2KSxHXhfLjcuHjhFHfnXTwr/DjA=)
5: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: DzCz06qr3n0RjaXufuVhmGXqbaRddtSIcOvZQX6hWLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:35:f5:b0:1a:cf:33:a8:41:45:7e:22:62:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Validity
Not Before: Nov 4 19:00:45 2025 GMT
Not After : Nov 5 19:00:45 2025 GMT
Subject: CN=ab56854386fb8cce5ef5006044e697b98d403a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:2f:7c:36:79:2a:da:88:99:bf:20:43:ac:
75:f9:24:17:f3:1c:dc:05:f7:ab:f7:e5:0a:ba:6c:
be:d6:be:fd:6e:60:f5:9c:18:ea:89:aa:9f:54:a9:
c6:2e:26:90:b5:43:88:6f:20:4b:82:43:4e:9c:88:
8f:9f:0f:7e:fa:45:6a:d5:02:e1:30:1d:d0:aa:f5:
23:e1:a3:90:04:86:0f:8b:18:15:cc:f2:e0:cf:f1:
c4:c6:5d:63:71:de:d9:34:36:39:8e:95:ca:1f:1c:
8a:86:7e:80:e4:07:14:61:63:66:58:be:fe:8d:3d:
fb:df:38:41:a8:23:eb:6d:5a:b4:13:9d:fa:5b:21:
43:92:8a:b6:78:83:d2:33:4b:27:9d:4f:06:63:17:
f2:23:26:9d:2b:8b:79:8f:c0:f4:0d:e4:79:21:6d:
6b:cc:52:eb:e2:7c:d6:ce:f0:0c:d1:f0:9a:7d:36:
7a:35:45:6a:07:54:b3:4f:df:5a:e8:29:ca:eb:27:
1f:1b:08:1f:2a:55:23:e4:42:49:f0:58:12:80:0b:
26:0d:df:01:47:b4:b3:ef:0b:79:39:ff:fc:91:67:
61:2f:68:ff:d7:e8:23:ec:96:da:55:48:b4:75:70:
9c:a8:a8:ca:8a:bc:a9:de:94:a4:85:45:4b:5b:34:
ac:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:85:43:86:FB:8C:CE:5E:F5:00:60:44:E6:97:B9:8D:40:3A:21
X509v3 Authority Key Identifier:
keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8e:26:a8:76:5f:da:0e:32:57:03:d2:c8:63:b7:67:b3:7d:
e4:3d:aa:0a:f2:2c:64:be:c4:6a:32:63:fc:26:94:b0:27:a7:
30:20:bf:e9:f6:44:41:0c:c3:d5:58:e2:1c:d6:30:cd:60:bc:
5d:a1:10:bb:e4:aa:3a:e5:2a:9b:a9:12:23:57:76:11:b2:3e:
e6:e1:f6:24:ee:21:fa:72:47:14:89:86:74:7e:44:f4:31:c2:
3a:43:ca:44:e5:eb:d8:75:bd:6c:ab:d4:6e:d4:de:21:06:4a:
18:13:51:0c:b2:77:0e:3d:01:b8:b3:26:0c:03:85:95:a4:8e:
f8:12:c3:6e:c1:72:8e:b4:00:ce:b9:c9:f9:eb:6f:65:fe:2c:
79:50:7f:1a:e8:74:5f:93:de:0a:6b:5e:1b:da:57:75:f7:a1:
8e:1d:49:07:41:6e:36:85:71:5a:42:96:8f:3e:9c:d0:c5:51:
4f:df:84:21:12:9e:4b:e5:d8:0a:dc:87:33:f2:e7:a3:10:3e:
5c:d8:61:dd:c9:60:fe:59:1e:98:f6:2e:5d:8f:ab:76:30:93:
c5:8b:3e:6c:3f:a2:5d:39:50:29:5c:94:75:cd:e1:61:73:e9:
6c:14:f7:9d:2c:ee:dd:2d:05:0f:97:94:d5:63:3f:0a:9e:f4:
65:8e:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:25:11 2025 by rpki-client