Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: MpuHZJs6KEtHf+0ZG6dzZ/uACXLEcndua3C1P8cOE7w=
Subject key identifier: 6D:E2:D3:60:16:42:FB:19:11:FA:CB:48:B7:AC:2B:FF:F4:0A:CE:B5
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 019A4E866BB9858091015F8AED03189EC126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 1236
Signing time: Tue 04 Nov 2025 11:00:23 +0000
Manifest this update: Tue 04 Nov 2025 11:00:23 +0000
Manifest next update: Wed 05 Nov 2025 11:00:23 +0000
Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: jfeG1hVQIlPtWR4v/9LEt6tZVdU56+Zx+xj19RQ2ZnA=)
2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6b:b9:85:80:91:01:5f:8a:ed:03:18:9e:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Nov 4 11:00:23 2025 GMT
Not After : Nov 5 11:00:23 2025 GMT
Subject: CN=6de2d3601642fb1911facb48b7ac2bfff40aceb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:2a:ce:17:f4:e1:e7:19:49:15:96:f4:26:
be:1e:74:72:b2:52:2f:72:3d:12:a0:6f:b0:70:35:
d9:83:3a:90:9f:16:34:b4:95:7e:e3:b9:10:f4:43:
21:a8:ff:a5:60:54:4b:7d:cf:bb:c3:b8:5d:f6:e0:
1a:a7:3b:be:3e:f8:3f:1c:f0:4a:2b:31:98:b5:0b:
53:d7:a4:21:02:1e:3d:e3:b7:7f:24:2c:4a:c7:f3:
58:ac:75:18:e2:b9:bc:26:f2:0e:d9:58:bc:39:76:
05:d0:32:40:0d:d0:da:4a:b3:2d:4c:53:9d:26:e8:
87:99:7b:ad:8f:08:0a:f7:56:b3:6f:da:d2:bd:5f:
07:60:49:5f:ed:84:f0:c3:c6:e1:e8:de:bf:49:33:
5e:5a:3d:fc:d1:e0:a9:9b:b5:5f:01:9c:0c:28:6b:
fa:06:6c:fb:ea:4b:96:1a:9e:f2:89:ee:80:b2:9c:
10:4e:11:ae:42:75:d5:bd:b2:87:74:c4:f5:0a:66:
53:7d:bc:07:cf:5c:96:ea:2e:6d:c8:ea:50:0b:5d:
95:52:f6:bb:57:74:39:28:91:67:fa:f0:91:88:36:
d2:0a:e9:95:84:2e:19:fe:7e:10:28:ec:e3:50:29:
fd:4d:01:39:7b:98:05:71:a1:d0:3c:fc:ae:b0:93:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E2:D3:60:16:42:FB:19:11:FA:CB:48:B7:AC:2B:FF:F4:0A:CE:B5
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:22:9d:aa:5c:89:33:5c:c3:28:e2:b7:b5:f2:28:cb:5f:a1:
84:f9:22:47:66:fa:d3:02:13:af:3b:71:29:1c:72:76:2b:87:
3d:4a:2a:0c:9c:9d:ca:67:da:13:81:83:5c:c4:ff:f3:9b:66:
d8:4b:55:df:c8:51:fc:8c:52:c2:1e:23:92:6b:ba:44:8e:cf:
c5:ba:af:fe:1e:3d:e8:b3:1e:fc:60:76:b9:23:a2:d6:07:c1:
7c:36:a8:9d:1a:6e:3f:a5:33:b9:d9:7a:56:bc:6d:9c:f9:0b:
b2:56:52:21:f3:b6:5d:0c:2f:a7:fa:82:c5:fd:f7:43:a2:8a:
b1:59:d7:56:fd:30:bd:0c:ae:9e:12:4e:ec:c9:13:ef:f6:9a:
46:31:7d:cb:14:41:ed:4c:83:e8:34:bb:81:4b:9d:b5:f2:6f:
fd:a6:2c:b8:34:37:73:f5:da:3d:ae:b6:7c:7f:d4:45:92:38:
08:ca:f7:ff:93:ea:a9:bb:80:38:93:80:f0:0d:e9:54:4a:a2:
b7:e9:8a:21:41:60:00:b2:fb:2c:3b:37:d7:a5:75:f2:bc:f8:
82:5f:00:a2:16:df:d2:ba:0c:ff:62:89:6b:51:ab:f8:c9:a9:
e3:8b:b5:21:38:3d:d2:0a:47:b6:98:72:7f:23:13:a2:a4:29:
6b:e6:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:10 2025 by rpki-client