Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: bKn0Pmr9YflY+3L2Dpq0DQk0OSJI49oU76wY2wwSMwc=
Subject key identifier: 50:BF:D4:A7:EC:B2:87:B9:6E:A3:53:86:91:15:94:03:45:9F:4C:BC
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 019A4D06A7EF10B7778C5E6A41885FA0F007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 04:01:13 +0000
Manifest this update: Tue 04 Nov 2025 04:01:13 +0000
Manifest next update: Wed 05 Nov 2025 04:01:13 +0000
Files and hashes: 1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: 45iU5ilwzGml2SYyRGOE+YkHQrDR8hh9F2+CcF/bQn0=)
2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:a7:ef:10:b7:77:8c:5e:6a:41:88:5f:a0:f0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Nov 4 04:01:13 2025 GMT
Not After : Nov 5 04:01:13 2025 GMT
Subject: CN=50bfd4a7ecb287b96ea3538691159403459f4cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:6a:59:46:9f:e9:d7:58:8b:95:b5:9a:df:
d6:22:b9:1f:6e:27:9d:5e:85:99:09:19:86:f9:a3:
d3:5c:cc:54:44:97:5d:2b:e5:b1:a1:9a:b0:a4:a3:
65:f3:53:37:5d:06:5c:e8:4a:b7:09:fe:9c:9a:ef:
4c:bf:b7:3e:f8:4c:94:69:e3:50:96:4b:8e:66:8f:
09:88:b5:2e:8f:04:6b:49:c3:41:53:38:1c:77:b0:
45:3f:3f:1f:11:b1:b2:a9:45:29:e9:81:53:b1:69:
40:f1:9c:f5:3c:fa:65:19:d3:ce:50:02:75:05:d8:
e9:42:10:67:50:70:e1:9b:7e:66:96:7f:8b:64:8e:
f1:72:f1:4c:a0:1c:2b:96:4e:cd:0a:19:b1:40:cc:
21:55:bd:00:ee:b9:f7:88:3a:9e:fc:01:8c:af:d3:
d2:b3:b4:c3:a7:43:a5:5b:de:98:f4:f9:78:8f:df:
67:38:70:8a:a9:3f:10:6f:aa:5a:d1:fc:e7:31:c8:
e3:0c:c5:0d:56:f1:46:07:e3:b7:25:fc:a8:69:ed:
84:59:31:a7:52:b5:d9:52:b1:88:b5:89:45:64:65:
aa:e8:14:ca:dc:fa:fb:ea:89:ed:a4:bd:16:98:f7:
5c:9c:cd:c3:62:a3:10:77:7a:c4:02:c3:d5:fc:ef:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BF:D4:A7:EC:B2:87:B9:6E:A3:53:86:91:15:94:03:45:9F:4C:BC
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3a:71:0b:05:cf:70:b6:02:a0:0b:23:aa:cd:48:d4:10:89:
a3:6c:91:b7:71:06:f4:d0:94:d5:ff:7f:a9:ab:69:16:0f:1a:
cb:da:2c:9a:ba:6b:95:f4:94:67:dc:9b:71:4e:33:8c:ac:26:
a7:09:69:90:39:5d:b7:d3:62:70:81:23:ec:73:e9:53:ea:be:
49:55:2e:8c:c4:92:24:78:7e:4b:fd:bc:a9:32:df:8b:b5:7b:
87:e6:05:1a:1a:0d:b3:4d:05:63:12:c1:80:d8:89:51:6e:88:
2f:2c:8c:6f:df:86:29:9f:05:5c:60:85:f2:b6:42:a2:2f:f5:
30:8e:d0:74:9b:fe:ac:93:ba:56:e9:2e:07:d7:1e:dd:b1:79:
7a:67:99:9a:79:da:4f:cc:1d:4d:18:e3:13:ad:cb:23:59:57:
12:6c:49:16:d9:f9:9b:6a:64:d9:6e:39:ef:6f:71:ae:b7:57:
fe:aa:3e:a2:5c:f0:b1:77:6e:f4:63:83:13:7a:ee:97:ee:9a:
83:f7:43:f5:68:b8:d6:62:df:b1:89:43:38:f8:28:60:8e:26:
7e:2d:a4:8f:91:4b:dd:e1:3c:21:bb:1a:8f:14:ae:d2:3d:0e:
12:05:fd:91:e3:1d:77:96:e5:cf:c4:c9:94:06:5c:38:43:38:
32:16:38:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:57 2025 by rpki-client