Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: jBiCiPo8S0CGcH0Bk2NkSY5qVJL36ZsyKWQkwIYp0io=
Subject key identifier: 49:FC:A5:F6:D6:AF:80:B7:A1:B2:D4:7D:71:04:5F:E7:AE:8D:F0:D7
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 019A4DAAF30F79DE485D465724CCB94811FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 05D2
Signing time: Tue 04 Nov 2025 07:00:40 +0000
Manifest this update: Tue 04 Nov 2025 07:00:40 +0000
Manifest next update: Wed 05 Nov 2025 07:00:40 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: ZOw9lbHpKvUf+wMwep//24PbheU8vzNSyNSopnQADZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f3:0f:79:de:48:5d:46:57:24:cc:b9:48:11:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Nov 4 07:00:40 2025 GMT
Not After : Nov 5 07:00:40 2025 GMT
Subject: CN=49fca5f6d6af80b7a1b2d47d71045fe7ae8df0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:6e:c8:77:91:3e:0b:95:35:63:0b:34:ee:
94:e0:00:2c:21:db:44:e7:b3:14:3a:e8:4b:93:ef:
c6:69:67:98:33:87:9a:67:9e:43:70:fc:b0:61:8e:
d1:76:00:54:34:54:05:50:13:c7:b4:ff:e6:5d:39:
c3:fe:ab:e9:86:0e:29:21:62:68:84:6b:5a:f8:89:
c5:ab:e9:3f:2e:65:ed:d3:5e:99:30:b2:c5:ed:74:
60:38:93:6b:32:23:e5:f4:fb:7a:05:09:4a:5e:5d:
93:60:93:09:d1:77:4a:87:0e:22:3b:4c:4a:58:96:
65:28:d7:65:eb:8d:06:87:2b:1e:2e:c9:48:b9:45:
28:35:ee:6e:7c:09:17:9f:d9:a5:b8:2f:d1:72:20:
ba:2a:0d:7b:2f:fb:31:93:c9:8a:f9:a4:89:aa:7b:
aa:4d:4d:d3:f6:30:5a:ee:e0:12:ad:87:a6:fb:28:
d3:96:3e:65:8d:d4:6f:d8:fc:15:27:c0:3e:af:8a:
d5:c5:9d:67:aa:66:3f:15:db:f7:7c:f1:54:53:15:
01:e9:dd:7f:5f:97:56:41:3f:e5:56:45:46:34:64:
7c:18:c3:2c:67:7a:20:6b:d2:24:82:b8:bc:20:1e:
f8:99:d2:50:29:f6:73:53:7b:ed:ba:b2:71:90:a7:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FC:A5:F6:D6:AF:80:B7:A1:B2:D4:7D:71:04:5F:E7:AE:8D:F0:D7
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:90:e5:fc:f6:26:a1:6e:fb:2a:fd:76:d3:b1:a8:80:5f:
4e:7e:8c:31:3d:d7:54:e7:b6:3e:1a:09:61:d0:51:23:42:44:
62:d2:85:ed:20:10:5d:06:ad:ca:cc:42:1d:aa:60:49:11:f8:
12:6e:a6:bd:68:39:1e:0b:44:4b:b8:32:f8:20:3d:c8:73:4a:
18:7b:0e:5a:e6:62:63:13:96:6b:42:cb:55:d4:49:18:96:fa:
30:4d:47:97:15:eb:37:a4:0c:94:96:c2:a7:69:2b:ed:fd:69:
a3:eb:00:a6:9c:75:ab:38:dc:01:b7:24:74:cd:a6:bd:0d:4e:
b1:d2:2c:63:f5:f9:53:fd:69:e4:09:2d:5c:b5:68:a7:6e:0a:
8c:35:37:4d:cf:54:01:bc:86:5e:cd:ec:58:27:18:5b:3e:02:
a3:ae:a6:69:c1:9c:99:fb:1a:dc:3f:bc:37:98:5d:b0:0f:fd:
cf:35:26:f4:d4:0d:a1:46:16:b3:51:b6:d3:bc:e3:f4:b2:ec:
ae:14:eb:bd:8e:28:8a:b2:80:d7:54:f3:a3:b0:e1:ba:cf:81:
ff:08:39:5f:5d:66:19:69:07:dc:05:60:fe:fd:85:d0:d1:b2:
62:12:5d:ef:92:99:70:e9:0b:c9:e3:1e:c9:1f:84:ee:59:16:
59:4e:81:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:07 2025 by rpki-client