Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File: puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier: 8MTMm26WRXEzINnaOdmirHTWU8/XL4whWT68xUi22vE=
Subject key identifier: 99:92:CD:2B:8B:6E:79:2A:26:EB:4C:33:1C:85:5C:59:E5:D1:29:1E
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer: /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial: 019A4EF5E43FCCD9EF9E253821C5A0132D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number: 1667
Signing time: Tue 04 Nov 2025 13:02:08 +0000
Manifest this update: Tue 04 Nov 2025 13:02:08 +0000
Manifest next update: Wed 05 Nov 2025 13:02:08 +0000
Files and hashes: 1: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: iuThmCA78Wqk2NWC6aL73O2VmH7rrFLvxS5OXTc0afI=)
2: wEf0XFewVLDEH498_3ycA_iLwpA.roa (hash: jj8EG5dFJudLiKXib9hP+9XTMUS6HXp2GHHzc8cEo24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e4:3f:cc:d9:ef:9e:25:38:21:c5:a0:13:2d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Validity
Not Before: Nov 4 13:02:08 2025 GMT
Not After : Nov 5 13:02:08 2025 GMT
Subject: CN=9992cd2b8b6e792a26eb4c331c855c59e5d1291e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:0d:c9:21:e1:c9:01:24:0d:f9:7a:ee:1e:
a0:88:1e:78:1b:c3:7c:b1:e7:04:5d:c2:0e:57:24:
e6:a8:59:d8:98:ee:31:ff:66:90:f3:5d:d3:16:0c:
3e:de:33:0c:17:83:ab:3a:89:02:2d:b2:88:b1:ed:
6c:ad:48:f4:5f:06:28:7f:67:8a:a7:e1:56:ea:2f:
11:80:00:7d:ff:f6:7b:05:5c:c3:d3:97:b4:8d:d3:
95:39:98:86:7a:f8:88:10:de:ac:13:99:f7:49:0c:
1f:c8:90:fe:d0:a4:30:08:e7:36:cd:de:a2:4e:8b:
fd:4f:1e:26:3a:7b:ba:c3:46:03:63:b1:cd:bf:22:
e1:ed:33:78:c9:25:cc:33:c7:c0:86:90:b3:33:f2:
18:c2:2e:2f:6b:c7:29:20:04:47:c6:ae:2b:69:ad:
13:ef:36:4a:b6:68:12:1f:7b:05:d5:2e:b0:fa:50:
f9:23:b6:e9:a6:b0:ec:c9:55:bd:bc:ed:3e:92:b6:
27:a0:c2:9f:c5:e4:de:1f:1f:b3:b9:5e:e5:a6:ab:
1c:dd:8a:45:2a:cb:62:52:9f:b4:a0:bf:01:fe:e2:
cc:06:52:e9:ae:b8:f8:9f:14:e2:4b:99:b8:e2:1e:
73:9e:80:1f:3a:d3:e8:05:7f:0f:6f:13:d8:25:a1:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:CD:2B:8B:6E:79:2A:26:EB:4C:33:1C:85:5C:59:E5:D1:29:1E
X509v3 Authority Key Identifier:
keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b8:75:1f:65:98:84:6b:9a:40:35:d0:6a:2e:46:97:b4:05:
26:72:24:f8:06:27:ff:a4:05:0c:40:7f:4b:b3:6f:21:c2:6e:
f0:a7:28:84:70:ef:1e:d9:0c:af:09:cf:75:20:19:16:06:d3:
61:a5:be:2c:19:2d:86:0c:b4:07:3b:dc:c1:60:b7:85:77:6d:
00:cd:80:6d:64:2e:d7:b8:49:de:51:61:0e:34:86:90:1b:16:
e2:51:43:2a:16:7e:ef:a3:0b:82:09:63:67:c5:4d:68:b0:d2:
a8:2b:55:a5:b3:e8:95:9d:dd:ad:c5:a3:a6:2e:f0:c9:cc:a0:
35:fb:1b:72:75:5d:ab:78:70:ff:59:ee:01:a4:71:ce:c3:06:
cc:be:e6:e2:4e:df:12:4c:a0:ba:86:8a:36:3e:ac:19:2b:37:
cd:1d:c5:10:07:4d:51:15:03:9b:4b:2c:7b:04:21:47:6c:f1:
f4:14:51:03:27:b8:b9:44:e7:44:a0:2f:fc:f9:a3:79:b7:8d:
20:fc:6d:f3:b7:6e:d3:6e:26:20:f5:d6:be:4a:15:5a:34:5a:
bc:7d:76:86:49:21:83:b7:9c:80:51:6f:3f:c7:5a:9c:fb:a4:
1f:f7:6e:26:95:0a:0f:00:e7:f4:af:f3:ce:cc:d6:14:bf:e7:
ab:ed:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:13 2025 by rpki-client