Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: J0u/bYMGpA1yyqQndEJbc7YxC62VyTRKOkXg5rKDBtM=
Subject key identifier: 0B:74:98:DF:0E:83:1C:09:68:1E:F7:41:D9:48:3B:C4:4A:23:D1:7E
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 019A4DAAA9622D66D21256ECDDE25AC0E379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 13AE
Signing time: Tue 04 Nov 2025 07:00:21 +0000
Manifest this update: Tue 04 Nov 2025 07:00:21 +0000
Manifest next update: Wed 05 Nov 2025 07:00:21 +0000
Files and hashes: 1: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: W8ugiNKjpw4qrHIbk/MtrwHHc4vd2AweKcFmph1Ye3s=)
2: wW2KE3gY8QjEsnXJFmwHDL7WH6g.roa (hash: rYujNDXyFY6K7NmLNp1LWeOiCz0Qh+l0K7mCOQxVp3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a9:62:2d:66:d2:12:56:ec:dd:e2:5a:c0:e3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Nov 4 07:00:21 2025 GMT
Not After : Nov 5 07:00:21 2025 GMT
Subject: CN=0b7498df0e831c09681ef741d9483bc44a23d17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:4a:6a:b9:7f:8b:dd:c5:7b:a6:dc:0b:d9:
cd:ad:39:e3:95:d4:b3:2a:93:14:ce:6a:72:7c:27:
bf:ee:c9:83:99:9e:e8:ea:39:f7:7e:cd:42:5b:42:
7a:16:bc:2e:64:e8:ba:f6:af:94:41:9a:81:e6:6b:
9d:95:ca:be:6d:30:a2:f9:30:45:ea:dd:a1:7c:9e:
59:a4:72:a7:fe:e4:cc:18:80:4f:2d:54:7e:2c:30:
13:cb:90:03:e2:c8:96:03:87:e7:a4:ea:97:a8:0b:
97:36:96:04:3b:f3:85:60:ba:12:59:e2:a6:8d:18:
25:e2:ed:aa:14:ca:5d:6d:bc:03:f9:51:50:fa:3b:
6c:d3:14:fe:53:1c:a9:b9:0c:67:77:d4:3a:57:87:
8e:34:7a:35:60:95:e2:52:f7:b9:42:7a:8e:f2:a7:
41:24:54:9e:1f:39:6e:8f:b9:3a:7c:b0:e5:c7:d5:
cb:09:b7:c8:f1:70:6d:5c:77:ed:1c:16:c2:53:98:
53:f2:a0:24:e6:7d:97:d8:3c:6a:c8:ce:4f:de:62:
53:1d:39:62:03:59:e0:f4:22:93:79:c0:50:06:32:
bc:64:bf:9b:95:bd:6e:09:dc:39:e5:01:3c:29:74:
1a:f4:ac:ba:70:ee:04:83:a1:e6:5d:8a:42:95:eb:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:74:98:DF:0E:83:1C:09:68:1E:F7:41:D9:48:3B:C4:4A:23:D1:7E
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5f:7a:2d:e5:c6:5e:aa:c1:4b:37:5c:25:ec:1d:7d:41:7a:
ef:50:47:9d:7d:d4:ca:3f:a9:05:5c:d7:00:77:42:a8:0f:0b:
f2:c1:09:3d:67:55:b1:12:02:0a:28:99:c3:44:36:22:bd:c2:
e4:f8:95:2d:09:66:f0:a6:9a:d4:d8:1f:84:bd:a4:d3:01:78:
03:d4:6b:21:4f:05:2a:09:9b:6d:48:fb:56:6b:7b:da:3c:d6:
2b:2b:ed:29:f7:4f:d3:0b:3a:e1:e8:11:95:e3:02:15:1d:69:
0a:f4:12:e0:d6:96:cd:12:9c:aa:33:36:a7:01:1a:de:21:c0:
34:68:de:1c:d8:07:de:08:7f:e6:f0:ff:92:4c:f2:41:8e:d3:
19:2d:61:17:8e:4b:4b:1f:50:96:6b:b4:46:b4:34:c4:67:64:
9f:c5:df:99:2d:63:52:95:2f:55:5a:54:c5:8e:85:c6:17:85:
ea:8b:8f:7f:19:3b:6a:77:46:2e:1f:e7:b1:51:68:7e:1c:be:
1f:1c:95:28:a5:94:eb:73:36:10:8c:40:36:ba:ad:0f:e6:21:
ba:c7:7d:f1:dc:61:f9:c9:15:d8:bb:7c:0c:07:94:3b:55:47:
3d:8d:24:d9:d9:6d:d9:d6:36:b4:6d:57:1d:f3:0e:d5:7a:26:
b5:5b:7a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:44 2025 by rpki-client