Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: pHxSTnPKrlqAMUbHTvGCSAAFtkBSFJ0/06Uq4Y0XCBI=
Subject key identifier: 53:25:09:A7:7C:CE:EC:07:80:F6:F9:13:88:07:6C:E1:FE:17:9B:D7
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 019A4E8656CD5990855FC111375B387E5CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:18 +0000
Manifest this update: Tue 04 Nov 2025 11:00:18 +0000
Manifest next update: Wed 05 Nov 2025 11:00:18 +0000
Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: JkZsRr8lQaCt78VGCoC6L9fjp68WExr9wi0BxcEGVmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:56:cd:59:90:85:5f:c1:11:37:5b:38:7e:5c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Nov 4 11:00:18 2025 GMT
Not After : Nov 5 11:00:18 2025 GMT
Subject: CN=532509a77cceec0780f6f91388076ce1fe179bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:16:2c:8a:22:d6:33:fe:b6:df:9d:86:69:
0b:db:75:ed:03:8d:49:7a:b3:f7:86:e3:99:9a:ae:
38:76:1e:7a:d8:d8:65:7f:e6:dd:92:5d:ef:90:79:
11:b7:03:84:34:87:e8:3b:d3:b7:2b:7b:db:8c:d3:
b5:1f:f4:6c:45:1c:6e:c2:62:68:2c:7a:5f:d4:39:
69:9f:d9:59:ea:29:48:0e:b1:85:1d:42:81:5d:f6:
70:18:19:e5:65:b6:91:0a:26:f3:a9:e2:99:bc:b9:
62:ef:aa:61:0f:99:30:b4:fc:d7:3f:7b:f7:a9:0b:
70:91:1c:bf:44:2c:d2:ee:ad:fd:b8:7f:14:fd:52:
63:27:97:04:13:a6:65:8d:cd:c6:9a:63:2d:48:f6:
e1:eb:3d:f0:a2:c1:27:6f:b0:49:d5:69:a2:33:66:
80:82:d3:e4:10:44:f9:55:75:54:af:83:50:91:3b:
b6:65:d8:64:e8:22:76:6b:c7:e1:40:e8:77:29:5e:
3a:b9:ef:fd:5e:e0:96:c1:d8:1f:75:4d:10:c0:b3:
20:8d:d7:d4:17:48:aa:7b:58:d3:5d:ea:f0:c9:55:
4b:14:71:f9:3e:f2:77:24:ca:ea:15:46:e2:3e:cc:
c3:0a:47:69:43:9f:68:b4:73:b4:22:71:6a:90:bc:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:25:09:A7:7C:CE:EC:07:80:F6:F9:13:88:07:6C:E1:FE:17:9B:D7
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:16:bd:f4:19:87:fa:6e:98:b4:f5:9d:10:55:be:7e:31:28:
25:a8:2a:af:5d:36:2a:e3:44:a0:78:fc:31:ad:e8:18:c9:5c:
6f:3a:f6:b2:50:0e:f4:e1:ac:89:f3:6b:eb:6d:b1:d9:51:59:
4e:0d:1f:8f:03:ea:58:ed:c7:3f:65:fc:ef:9f:d3:6f:cb:3a:
24:d6:c3:f5:a8:86:5c:2c:94:a5:81:7c:f2:83:e8:d5:81:c4:
99:5c:ca:18:4a:3d:09:61:ec:fa:c7:59:16:6f:fc:be:e5:fb:
83:53:88:44:33:fa:4c:07:57:d9:81:b1:9b:4d:ad:8e:8c:21:
97:57:3e:b7:fd:dd:8a:34:ca:1f:97:2b:44:9c:28:56:f4:44:
9c:60:46:06:be:03:02:9f:ac:3c:eb:1a:52:5d:a3:7d:e1:d3:
d6:07:12:14:72:10:f7:d7:b2:f5:6e:96:24:9e:15:2c:8b:d8:
32:b6:e0:91:96:29:93:a1:89:12:2b:f6:1a:7d:d6:32:29:3c:
ec:d4:c8:03:70:f1:ce:83:39:dc:d2:49:5e:e9:7a:35:8b:08:
bc:bb:4c:90:47:a2:7e:cf:88:76:c5:c4:83:a3:d4:4f:bc:83:
b9:2e:68:84:29:02:af:0f:e6:bb:07:1f:d7:29:41:4b:8a:d6:
fc:10:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:00 2025 by rpki-client