Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
File: p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json)
Hash identifier: /WxW9bajcZf4vhbBEg4l5nn5O9hUGY2kpoGEhTT4xSg=
Subject key identifier: 18:44:CD:68:10:63:B3:7E:C6:11:15:3A:71:69:54:5A:62:8E:7B:21
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Certificate issuer: /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial: 019A4D3CC9EFCC3189C30FD310B40FF27710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:20 +0000
Manifest this update: Tue 04 Nov 2025 05:00:20 +0000
Manifest next update: Wed 05 Nov 2025 05:00:20 +0000
Files and hashes: 1: h56nNbes2ivx0npJDLsxR_z62Zo.roa (hash: wxs3EMyvsXJWyJHCo0ZYi2lqFjVWRDaFII6/r1MtHp4=)
2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: bF9epwAacI+Ux97MH3lI5tTRIqtUQFaWYe7rXk9bjOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c9:ef:cc:31:89:c3:0f:d3:10:b4:0f:f2:77:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Validity
Not Before: Nov 4 05:00:20 2025 GMT
Not After : Nov 5 05:00:20 2025 GMT
Subject: CN=1844cd681063b37ec611153a7169545a628e7b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:27:20:4e:51:79:27:63:b3:37:c7:77:f0:
63:8f:58:5d:41:6e:51:ed:cf:ba:c3:f7:61:ef:43:
ba:4f:d4:ae:57:c6:1b:f7:e6:3f:6e:97:91:23:49:
35:5d:75:cc:ac:cf:df:93:e6:c6:6b:56:4b:a4:59:
f5:33:40:55:98:60:d5:f3:ab:4e:ea:24:a4:7a:e3:
59:9c:27:4c:69:dd:db:80:69:98:cd:e9:7b:9f:2b:
eb:4d:94:c4:9a:45:42:d0:83:e9:05:34:36:f3:9a:
d1:8f:ba:6b:4d:8b:a8:b1:08:a6:cc:d1:14:2d:87:
d4:28:c6:99:9b:f4:c3:07:d4:e5:3c:bd:f8:41:33:
e5:b0:16:c5:92:b2:37:6d:cb:84:36:8c:13:2a:6c:
ba:bb:db:c7:88:bc:bb:b5:47:f7:52:93:6f:cc:71:
76:d4:16:79:f7:20:d4:98:c7:40:54:60:04:e9:13:
50:d9:52:f3:56:1a:26:46:b1:fc:f6:ce:8b:e4:61:
00:f6:b1:0d:7f:33:bb:1c:77:72:02:ab:fd:6c:34:
6e:85:95:77:42:9c:b1:66:e3:60:c2:f9:e2:8d:87:
4f:a1:31:d4:4b:78:2e:11:ae:2f:8b:f8:2c:60:ad:
68:89:d3:97:5e:e4:0e:4f:0d:c7:a8:85:c3:46:f1:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:CD:68:10:63:B3:7E:C6:11:15:3A:71:69:54:5A:62:8E:7B:21
X509v3 Authority Key Identifier:
keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fe:d8:4a:7f:0b:03:78:b6:ce:08:43:5c:0c:54:fd:6a:da:
8d:d1:95:8b:27:1f:f4:7a:02:0d:6b:38:3c:e5:67:94:ed:8f:
53:f7:14:87:d7:dd:2a:28:b7:fb:8b:44:ff:95:cd:6c:62:e3:
51:ca:ab:8d:00:d3:c1:f6:32:55:f1:6e:91:39:5a:3e:6a:38:
0f:a7:d9:82:3c:3b:2b:f3:9b:c7:09:b4:e5:b8:d0:29:8a:1f:
17:15:c6:91:9f:a2:d7:d2:e0:e2:dd:99:83:c7:e2:be:4b:80:
a2:1f:90:55:98:f9:10:6a:3e:90:3a:29:f0:df:08:6f:10:16:
d9:04:24:d5:f0:5d:6f:6d:56:3c:3b:a9:25:5b:d7:2f:45:27:
06:ed:6b:b1:83:f6:50:97:e1:e3:80:a8:dd:0f:b1:a0:36:c2:
dd:91:e1:48:0c:0e:30:e9:c8:70:15:5c:c8:43:3e:63:fb:d0:
fa:bc:84:c8:5b:d5:e0:86:c4:72:b3:36:69:40:51:e3:10:7d:
4d:49:95:2d:eb:f9:e9:68:1e:c7:2d:86:9a:08:db:2c:26:67:
87:50:5e:e8:0c:e3:d7:6a:76:74:ca:01:54:04:b3:9b:0b:92:
38:c8:92:2a:6f:55:0a:e2:77:64:54:fd:eb:38:f6:34:f2:b0:
c7:f2:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:44 2025 by rpki-client