Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File: pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier: /sEHy/HcDRo2hk5X41qRLKWMPpd/A+rLSCQxfZbzDUM=
Subject key identifier: F8:B2:7B:15:9F:60:6B:23:C6:3F:B8:D9:83:BF:82:24:21:B3:7D:E1
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer: /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial: 019A5187B6A51AD042C1CB66D8C30F523031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number: F4
Signing time: Wed 05 Nov 2025 01:00:39 +0000
Manifest this update: Wed 05 Nov 2025 01:00:39 +0000
Manifest next update: Thu 06 Nov 2025 01:00:39 +0000
Files and hashes: 1: 23JWsnJj-jb8Wa8yxWmE89jRhEc.roa (hash: hyRLz7Lb6AY/XCQzJ69T02ZWEp1ZBMf9ccg5gtbuPtQ=)
2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: PrGaG4Mj/G7Cx0dJBpkOG+l29FH59fs3DeXG5C34UZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:b6:a5:1a:d0:42:c1:cb:66:d8:c3:0f:52:30:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Validity
Not Before: Nov 5 01:00:39 2025 GMT
Not After : Nov 6 01:00:39 2025 GMT
Subject: CN=f8b27b159f606b23c63fb8d983bf822421b37de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:ea:e0:99:36:04:da:e5:af:7f:67:d3:e9:
2b:68:c8:41:53:4a:04:12:1f:39:fa:f4:d0:74:5a:
73:0f:8d:55:ec:95:3a:4b:f2:ae:d5:a5:5f:b7:a3:
85:7d:4c:08:34:4a:4c:07:2e:63:8c:b2:6b:a0:97:
89:88:3e:1b:cf:1b:02:b9:6d:70:af:42:f9:80:39:
cc:b8:6f:17:98:3c:e5:46:27:6d:da:28:d4:e6:42:
dd:9d:02:e4:4f:54:b7:2b:b9:0e:37:ea:5c:4a:f5:
d9:ab:d3:3a:e8:2f:86:06:5e:6f:97:7d:34:13:98:
98:e9:25:87:57:0f:19:88:ff:98:54:5c:3c:55:fb:
df:f8:20:88:6f:7d:c6:95:04:6d:34:4c:25:07:45:
33:03:74:c5:7e:f4:51:a4:48:75:d7:84:5f:90:2e:
d1:d7:d8:46:bf:57:15:a3:60:e4:2a:b8:dd:72:98:
51:ed:c5:13:ec:ed:90:b0:07:59:f9:4d:a1:0b:e8:
6c:69:97:50:31:2e:21:7b:18:4c:96:cc:f1:a7:d4:
cb:3c:ea:24:72:7f:97:6a:8d:f3:ed:c0:53:77:1d:
36:8c:8d:39:40:34:c5:5c:f2:4d:0d:0c:ca:5d:9b:
5a:8c:e0:94:a9:cb:c7:f7:c6:39:95:fb:d1:70:81:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:7B:15:9F:60:6B:23:C6:3F:B8:D9:83:BF:82:24:21:B3:7D:E1
X509v3 Authority Key Identifier:
keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8e:af:81:32:f5:03:aa:15:54:de:f9:a9:e8:1e:a0:6c:0e:
67:a0:cc:4d:22:8a:e1:3f:9b:79:8e:30:e6:47:30:9b:83:56:
a8:02:7e:9c:d2:88:2e:2a:d5:b6:af:fb:c8:8c:31:4f:e7:ba:
50:f0:cc:03:5e:ea:d1:fb:f3:c8:49:df:c3:5f:08:31:d1:b5:
86:97:8a:2b:6f:0b:e3:1f:dd:d8:96:08:a4:32:92:f5:fc:b3:
8a:58:f0:21:d6:0b:03:44:a1:6d:aa:e2:1c:b7:fa:6e:b7:cd:
04:30:bb:35:ad:86:4a:a5:92:b5:e8:fc:cc:10:f0:ca:22:34:
46:cb:25:64:56:c8:2e:11:9d:a7:45:b2:2b:85:87:bb:85:83:
a5:6e:f0:12:6e:f1:1e:9b:d8:e4:de:3a:d8:38:3d:e4:da:98:
eb:a7:e1:b0:65:91:2a:da:78:37:8e:ab:e8:a1:7e:26:74:c0:
7d:c0:20:12:a1:37:3c:4f:1f:68:17:44:ec:a0:df:4a:ed:79:
ac:b9:8b:ba:7f:2b:33:ee:3d:c2:41:e0:f9:26:e8:cb:f6:cc:
62:23:88:2e:0e:cd:ed:2c:94:2b:0e:77:67:9a:32:f3:98:8a:
b8:7b:79:80:88:f8:35:27:fe:47:37:5e:f1:01:e5:31:40:97:
b6:de:7a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:24:34 2025 by rpki-client