Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier: KkOROyc1e/KIdpOm0zhEOvLPkJkHXG6YlVkgikyazSo=
Subject key identifier: 52:70:04:D1:67:A2:41:29:89:8E:CC:5F:5C:53:EE:37:F3:E4:AE:98
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial: 019A4D3D0810E4DA5E243177E220CB80BF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:36 +0000
Manifest this update: Tue 04 Nov 2025 05:00:36 +0000
Manifest next update: Wed 05 Nov 2025 05:00:36 +0000
Files and hashes: 1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=)
2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: BWNjnjo9aj4r2XgpXh4T+KY1MbbCmf7WdDvP4tEv5eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:08:10:e4:da:5e:24:31:77:e2:20:cb:80:bf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Validity
Not Before: Nov 4 05:00:36 2025 GMT
Not After : Nov 5 05:00:36 2025 GMT
Subject: CN=527004d167a24129898ecc5f5c53ee37f3e4ae98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:34:9a:ea:9e:22:f6:7f:b6:42:98:a3:c5:
89:9e:e7:25:c5:4a:b4:4a:6d:b4:32:09:fb:b8:0d:
85:7d:66:ae:8d:7f:92:75:0c:47:b8:b8:1d:98:0c:
f0:af:16:66:26:cb:37:53:c6:88:3a:77:58:40:66:
49:97:e8:13:c8:24:91:a3:2e:41:1c:ac:71:96:8d:
a4:fd:05:d1:9a:8a:59:7d:da:b8:99:d0:66:bb:5d:
97:4e:94:df:7d:30:cb:16:09:a7:ed:53:cf:b7:03:
c4:62:0c:8f:f8:c5:ac:6b:66:86:9f:bd:ba:4b:38:
a9:be:dc:1e:98:86:4d:75:18:19:7b:19:94:74:4b:
fd:d3:e9:ec:b1:22:ce:43:5b:bf:9b:61:c0:9c:63:
10:04:20:78:70:3c:55:f2:ff:c2:a7:56:bb:b5:2b:
47:9f:d6:ad:0d:bd:e7:ae:9d:c9:7b:a5:bc:f1:36:
45:88:08:1c:0e:ba:9b:fa:32:e7:7a:65:ce:86:2a:
9a:9a:8f:9a:15:05:2d:cd:fe:1e:53:36:6f:16:b5:
93:65:9e:23:cf:5e:86:e9:f9:2a:e4:6f:c8:0d:e0:
14:b5:51:93:16:23:66:6d:af:fb:82:de:7b:70:04:
25:f8:ca:58:18:af:e6:29:c2:c6:33:a7:dd:9d:b7:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:04:D1:67:A2:41:29:89:8E:CC:5F:5C:53:EE:37:F3:E4:AE:98
X509v3 Authority Key Identifier:
keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3b:c3:dd:cd:11:bc:71:20:84:68:9e:c3:c1:07:86:d1:45:
01:fc:7e:a7:87:90:ae:81:3d:8e:4b:63:b1:6a:ab:c6:d8:36:
24:30:82:7f:57:a7:79:0d:dc:b6:22:9f:14:6e:b5:0a:85:75:
39:bf:47:2b:78:12:b4:47:48:70:92:f5:73:e1:d7:8e:be:23:
f6:c4:4a:ac:6f:92:07:9f:a7:27:55:c5:14:8c:05:e0:dd:06:
b5:b3:6d:27:fd:6e:f6:33:3c:46:6f:3a:1d:a9:d9:e9:9e:94:
6d:d1:fc:19:69:f7:8e:89:b8:78:86:90:c5:20:80:72:4a:b1:
21:6e:1c:59:56:cd:e8:b4:1a:ba:d9:8c:0a:2a:84:b1:da:8d:
87:02:81:9b:66:60:83:6a:30:7b:b0:eb:f1:92:4e:88:9e:c4:
f7:e2:a8:0a:3a:db:19:c7:ff:bf:a6:56:be:ac:96:e1:27:b6:
0a:23:fa:c8:a0:4c:03:1f:03:9f:ef:97:51:18:1a:2e:80:2a:
52:18:59:21:ee:7b:b5:61:a9:2e:49:3e:d7:69:52:19:bc:bd:
5a:af:8b:fe:fb:a8:2e:75:6a:17:0c:41:e8:4b:39:df:e7:ed:
d4:98:7c:4b:63:a1:78:5e:d9:7f:59:43:74:7b:cf:3c:c7:d3:
3b:8e:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:16 2025 by rpki-client