Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: N9eF53OJvKseiONT8ndR2TqcqgSYVAs1fXeA9j5kUw8=
Subject key identifier: C4:D6:23:A7:F2:02:B6:F2:05:8B:3A:C5:8F:5E:4B:05:63:36:C7:99
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 019A4F61F0F09DF49EB8AE3CCE88828104A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 0479
Signing time: Tue 04 Nov 2025 15:00:10 +0000
Manifest this update: Tue 04 Nov 2025 15:00:10 +0000
Manifest next update: Wed 05 Nov 2025 15:00:10 +0000
Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: Ggix4qgnKOEOyYWTTcMXJ2s7EYh0MEvASg2tJ3ITs3I=)
2: plbxQbrAe4NUuxrJeWYY2owN_A4.roa (hash: UGw+vuKvbSSScPoToTljhf+tZpkdRjY+j2rbaz2Dfco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f0:f0:9d:f4:9e:b8:ae:3c:ce:88:82:81:04:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Nov 4 15:00:10 2025 GMT
Not After : Nov 5 15:00:10 2025 GMT
Subject: CN=c4d623a7f202b6f2058b3ac58f5e4b056336c799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:71:cd:6d:d4:c4:5b:b0:52:99:49:09:91:
28:27:c1:d9:67:ee:f8:d7:cd:34:2b:ad:22:08:e8:
6a:80:1b:04:c7:47:59:fd:19:be:e7:45:92:9d:51:
dd:07:6a:25:39:7a:0c:0d:8a:a5:4d:7f:94:ba:fe:
ee:d0:24:be:8b:20:11:a8:3a:83:a4:60:23:fb:52:
6b:dc:e3:62:a4:33:46:06:6c:1a:c8:4d:d8:4c:ee:
6c:c8:9a:8c:20:af:5f:27:61:fe:20:78:d7:77:b0:
23:1b:0d:e3:af:04:e3:19:6a:e4:52:71:29:8f:b6:
bc:1c:77:bb:af:15:3e:66:02:e0:4f:25:09:48:64:
3c:29:cf:53:a1:1a:0a:d7:74:12:05:11:4c:19:6b:
e7:9d:b6:ea:a6:dc:b9:92:de:31:64:00:a8:ca:65:
a9:fd:f6:72:bd:45:6e:91:66:8d:9f:0b:df:bb:54:
98:1d:ef:c3:29:2a:d8:1d:8d:8a:3d:f2:22:eb:e5:
eb:64:ae:46:81:1c:13:66:2e:1f:21:a9:8d:9a:9a:
de:38:71:07:e4:f4:d9:c0:ac:f4:41:63:13:b3:20:
aa:39:ca:f0:98:8a:77:cb:74:a1:4e:7e:95:4a:05:
64:09:c2:fd:33:63:a5:00:53:65:ba:4b:d3:8e:05:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D6:23:A7:F2:02:B6:F2:05:8B:3A:C5:8F:5E:4B:05:63:36:C7:99
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0d:09:b3:b6:9b:62:8e:b3:8b:1e:e1:10:6f:be:f6:85:e6:
ba:6a:f7:37:ad:ca:40:7c:51:06:f1:0f:b3:43:74:78:1f:5c:
26:02:d8:53:1b:61:71:e0:d3:3a:bc:bf:47:fc:26:48:09:43:
cc:70:22:01:37:02:17:63:0e:87:b3:9d:88:5d:f3:e5:27:22:
72:ab:41:9a:cb:5d:00:b2:f9:8d:83:b3:98:e2:2b:01:24:1a:
60:31:0b:e8:49:d4:98:df:1b:4c:6f:41:bb:6a:5c:b0:56:52:
c1:12:1f:ab:c6:9d:35:39:36:d0:03:2e:c6:11:d6:2e:1e:58:
40:51:56:24:c6:09:13:55:8c:c4:22:72:f6:f6:86:d5:3e:1a:
29:13:e3:13:4b:91:78:f0:6e:fa:88:1d:d9:9b:92:38:1e:6c:
54:61:e8:a6:66:93:a0:dd:d1:93:77:48:3e:c7:d8:27:05:7a:
cf:7e:16:92:be:51:02:b9:60:b1:11:2b:8b:d0:55:b0:5d:f7:
d6:6f:3b:9f:53:ed:57:88:d7:79:1f:e6:26:61:f9:af:3b:f5:
88:c4:8d:77:fb:c1:a8:1d:75:9e:6b:63:b6:8e:51:dd:26:0a:
ed:c6:d6:71:bd:e4:8f:5f:a2:a2:59:5b:26:12:00:76:09:43:
bb:a0:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:46 2025 by rpki-client