Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier: v7K3dgIlknBfBkis9Ovu/EP+eWsIlCO3ALU8Y1atcjs=
Subject key identifier: 16:3A:0D:45:C0:E5:A2:C8:3F:64:D9:10:B1:41:F6:F2:FB:B9:6F:E7
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial: 019A4F2B4C8E3719C558DE6D9FFF1E9103FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number: 0941
Signing time: Tue 04 Nov 2025 14:00:28 +0000
Manifest this update: Tue 04 Nov 2025 14:00:28 +0000
Manifest next update: Wed 05 Nov 2025 14:00:28 +0000
Files and hashes: 1: kzCPfsKhNa5ARc8OXK-NG4JyCeQ.roa (hash: HLmxhWB18Y9khY5YFcnO5u1aShLl675WwIsq2RBJTDQ=)
2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: q1Uq8B2WATsETdBpipLp02R1tEX5eEVFrZH09kUiFEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:4c:8e:37:19:c5:58:de:6d:9f:ff:1e:91:03:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Validity
Not Before: Nov 4 14:00:28 2025 GMT
Not After : Nov 5 14:00:28 2025 GMT
Subject: CN=163a0d45c0e5a2c83f64d910b141f6f2fbb96fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:ac:60:8c:12:ee:f0:c0:30:59:13:e5:f2:
ce:d4:eb:fd:da:f1:b9:9a:b0:29:9a:13:07:55:dc:
39:32:9a:cf:7f:85:f9:ac:66:72:69:37:ad:24:f7:
f1:a9:8f:5f:72:dc:f0:d2:6d:ea:03:11:53:b5:24:
7b:b8:dd:fb:cd:b9:a5:b9:eb:9e:d5:a8:0d:e1:77:
09:7b:26:e2:b1:78:a5:92:52:2a:a1:a5:1f:e9:26:
3c:08:14:94:6e:04:54:31:65:42:d4:7a:d8:8e:aa:
b5:9b:43:42:c4:52:9b:f2:8d:a8:89:79:27:43:c2:
f1:62:03:7f:93:62:69:26:7d:9a:0e:79:a3:a9:ab:
f4:a1:c4:b7:1c:f0:26:17:d2:32:fc:87:84:77:67:
de:53:3e:1f:60:a0:88:4a:2d:92:da:7b:7f:e3:ca:
a6:67:1f:16:b5:27:8e:3c:13:e3:08:98:a9:dd:95:
f7:75:e5:d5:94:20:fe:bf:1d:82:3e:80:7c:4e:e7:
93:4c:9d:eb:54:47:b2:98:47:25:77:0c:cf:d4:61:
1e:d2:01:89:43:9a:f3:91:b6:cb:af:c7:a7:73:86:
cf:3b:d3:06:8b:f7:8f:90:a3:5c:81:d6:73:46:7a:
f1:d3:89:40:c8:b4:3d:36:31:98:fa:1e:48:08:d4:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3A:0D:45:C0:E5:A2:C8:3F:64:D9:10:B1:41:F6:F2:FB:B9:6F:E7
X509v3 Authority Key Identifier:
keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3b:21:39:b3:b3:12:bc:50:33:91:14:d4:a2:5b:ff:b5:16:
de:e9:87:70:43:8e:89:a4:54:8b:1c:c6:12:c4:86:5c:76:ee:
1c:5d:09:b2:2a:9a:5b:c0:9b:d9:bd:7d:41:2f:38:2f:fe:5b:
9a:15:90:99:7f:c3:7b:9b:2b:92:42:8c:13:b6:50:6f:71:ed:
fd:d0:77:1c:fa:64:23:90:ce:4b:09:f5:98:3d:20:ee:47:6f:
a4:01:a9:59:3c:af:cd:42:6e:2b:dc:1c:32:53:78:21:05:7e:
d5:16:49:6c:c7:59:34:a3:d2:de:32:16:1d:98:9f:1a:ff:25:
70:b4:fa:9e:f8:af:b1:12:16:a3:f3:92:ec:d7:9a:89:07:e3:
5a:2c:7b:41:ce:13:f8:2e:fc:50:f3:38:ce:0c:e9:18:2c:db:
61:c7:33:b3:6a:29:1f:2b:a9:d3:a3:b4:5a:f2:a6:ac:3a:8a:
3b:aa:b3:40:6b:94:2d:4d:95:34:9b:9c:d8:0c:c1:1c:0e:3f:
b0:98:14:32:06:a5:4e:8b:5e:1a:5a:d7:5b:73:73:d1:01:e1:
97:d5:4c:16:9b:48:78:c1:e9:c7:32:0f:71:e6:8b:2c:41:a1:
88:fb:2a:0a:17:44:5a:f7:cd:d4:88:d1:4c:9b:16:92:a8:f8:
ef:7d:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:14 2025 by rpki-client