Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: kpur+rrHRnAVa8w04aUx334yJ8PK+h/CTp3KVL3HQVU=
Subject key identifier: 76:81:5E:05:E1:63:C0:F6:7B:36:03:9B:7C:2D:8C:89:9A:19:A1:5B
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019A4EF55F8CE36924BFF50BCFCDA85EF9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:34 +0000
Manifest this update: Tue 04 Nov 2025 13:01:34 +0000
Manifest next update: Wed 05 Nov 2025 13:01:34 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: cMPWFqvkpYR1PPRRjWZsR7rdrUwLEq4Gx03WOe0qx6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5f:8c:e3:69:24:bf:f5:0b:cf:cd:a8:5e:f9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Nov 4 13:01:34 2025 GMT
Not After : Nov 5 13:01:34 2025 GMT
Subject: CN=76815e05e163c0f67b36039b7c2d8c899a19a15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:72:db:37:92:1b:dc:86:2c:a2:10:ae:b6:
68:ce:1d:e1:82:c1:1f:09:c1:cb:bc:28:e1:aa:e5:
fc:a0:25:e7:dd:41:ce:d1:bf:58:a3:a1:c0:16:5e:
eb:5c:ff:fe:1a:d9:21:34:cf:3d:0a:08:33:2b:4a:
97:e9:3a:a1:90:93:e0:43:90:67:73:fa:16:06:36:
5e:12:13:a9:5a:eb:49:85:a4:44:63:04:23:9c:f9:
7d:22:f0:df:43:0f:91:e4:f6:db:bf:1c:da:e1:b3:
50:58:e6:31:0a:51:f7:2e:8d:9c:6a:e0:f4:e9:7f:
e9:87:82:44:01:cd:30:bf:0d:f1:21:1a:99:0d:51:
60:42:b7:50:dc:d5:01:09:db:88:9d:78:39:2d:a0:
fc:23:81:25:44:7c:a1:50:5f:0d:38:9f:cb:d8:68:
c3:67:c2:bb:ae:52:44:2c:bd:52:b7:37:ae:98:63:
1e:7a:21:8a:a3:5e:cc:16:f3:e9:92:86:0b:81:d4:
63:18:17:a8:be:9c:a7:8a:91:a1:87:35:39:74:6b:
51:be:72:df:cf:c3:bb:2f:75:cc:c8:54:8a:99:3c:
bf:14:ec:8b:5b:b9:72:3f:32:d7:bf:81:f8:18:b9:
c5:0b:08:83:d6:8d:c5:80:8a:e4:fc:97:76:cd:0d:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:81:5E:05:E1:63:C0:F6:7B:36:03:9B:7C:2D:8C:89:9A:19:A1:5B
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6d:c9:b0:a2:cf:0b:e1:9e:e7:27:82:24:69:92:2f:f6:ad:
e9:e2:09:7b:42:5c:77:35:69:10:67:e0:99:9c:48:81:8a:1b:
2f:8a:57:ed:e0:e1:48:e8:5f:68:e1:f5:ad:0e:a2:13:e0:64:
09:bb:b4:1f:2b:79:3d:f7:30:fc:ae:40:bf:45:74:4e:ce:71:
59:bb:bc:31:e7:1b:5f:2b:60:7f:84:8b:92:fa:7a:cc:ba:17:
ee:0e:54:60:b2:73:3f:d4:5f:39:a6:50:cc:58:77:6f:bf:d5:
dc:78:46:57:67:04:0c:35:83:e8:89:75:3e:06:1d:f1:c7:72:
57:fe:bd:a5:ce:bb:b2:43:99:70:8f:16:fd:14:c2:ef:74:e4:
20:95:6f:2e:04:07:a7:7e:ea:e7:21:91:42:55:62:8b:2e:81:
3c:ce:7d:28:07:89:b8:b6:8a:64:45:e0:bb:b8:25:52:54:11:
e0:41:b8:ff:a3:b0:19:32:dc:08:91:01:51:5d:93:45:cf:d6:
5c:ed:88:3a:97:1d:aa:e8:81:e9:54:8a:32:00:57:e3:a9:65:
e5:f5:42:96:78:be:25:be:8a:3e:49:45:59:f4:1b:0c:9a:62:
3a:b1:f3:34:36:33:40:15:d0:95:df:30:80:63:ff:12:a5:6c:
fa:ad:4b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:58 2025 by rpki-client