Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File: Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier: T+/oqmOgfroNNRfGM1oJ+yxGt0b5Aa9fJeFug5AhNoQ=
Subject key identifier: 8A:56:41:50:E4:8E:5B:EC:D4:B3:95:34:AF:24:C7:71:AD:02:C1:5C
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial: 019A4F2B0F7EDF7721DB808AA3A70439622A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 14:00:13 +0000
Manifest this update: Tue 04 Nov 2025 14:00:13 +0000
Manifest next update: Wed 05 Nov 2025 14:00:13 +0000
Files and hashes: 1: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (hash: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=)
2: 9ZGSbvVWGJA03vrSyQUEVarRr-4.roa (hash: cPvp9kLsR1g5wI6QgkJQ/4iEUD2cM7N5TL8rSHXBr1c=)
3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: 091P/Z+2sdQx+dYIKc+L4beUvd/arcO7Q+O9+9j7S5k=)
4: k6_D03YidxIC349EjXRq0tAB-Qo.roa (hash: EeEY/m7OL+tVaal0Hy7U3tDs+glAoHmKchjSxGhakus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:0f:7e:df:77:21:db:80:8a:a3:a7:04:39:62:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Validity
Not Before: Nov 4 14:00:13 2025 GMT
Not After : Nov 5 14:00:13 2025 GMT
Subject: CN=8a564150e48e5becd4b39534af24c771ad02c15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:3e:96:c7:c8:78:45:48:e5:1c:3d:82:57:
11:61:11:21:8d:b6:b7:d0:6a:77:0b:88:3d:e7:8a:
0f:2e:99:43:ff:30:aa:05:0a:ae:53:d2:54:0e:0d:
5c:4f:b7:e3:6f:5d:91:c5:f5:ed:7d:85:77:f4:a1:
b1:a7:01:50:66:dc:d4:5e:5f:26:c5:74:0c:e1:4a:
fb:40:c9:65:eb:ee:fe:0a:11:48:52:b2:6a:01:6a:
e2:d8:fe:fc:90:21:69:13:18:35:b3:3f:4f:28:35:
9b:f6:24:f6:77:9e:31:57:1f:f7:6f:e3:4e:3a:c0:
73:c1:f0:ac:b0:44:26:40:35:f1:74:9d:41:fb:75:
d9:9d:4b:f0:d1:45:e8:31:e4:89:5b:c1:ed:a4:89:
e3:c1:a7:ba:3f:39:6b:de:4c:f6:e3:aa:30:e0:5f:
37:ed:95:96:53:7c:56:55:9b:7f:d5:06:65:7c:85:
02:4b:2a:2d:c2:da:ca:a0:9d:ab:f3:c2:aa:88:d7:
08:a5:21:60:dc:f6:87:b9:5b:8f:09:07:d5:35:f0:
12:e9:ff:0f:4d:65:2e:3a:b1:a7:ea:cd:b8:6b:4e:
a4:ff:82:30:60:3f:4c:1e:d0:fc:d4:fe:c0:df:57:
c7:6d:17:77:f5:8a:7a:4a:ab:f3:af:81:49:06:2d:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:56:41:50:E4:8E:5B:EC:D4:B3:95:34:AF:24:C7:71:AD:02:C1:5C
X509v3 Authority Key Identifier:
keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:87:2d:94:b0:0e:5c:d5:27:25:e6:12:92:df:3a:e7:73:da:
c4:8b:4f:12:6d:f0:88:50:8f:01:fa:dd:3b:57:82:d4:9c:7e:
f3:a7:05:9d:db:82:51:8b:01:6c:27:98:81:d9:c7:90:dc:41:
54:13:fd:f0:0c:6f:b4:38:c9:b6:3a:04:1c:25:0a:f7:2a:8d:
a5:7a:1f:40:41:4a:d4:26:5d:3a:32:5c:57:6e:6d:9e:f0:e1:
b3:c9:43:4e:47:c7:3a:94:17:21:a6:5f:dc:90:8e:c8:ab:aa:
70:f3:08:d3:cc:ae:26:8f:5e:79:ae:b6:7d:e2:0d:75:9c:ce:
79:0e:fa:7f:9d:9d:3e:84:5c:b4:53:b7:74:22:32:da:c2:a0:
a8:26:fd:40:9d:a3:42:a1:24:28:7f:ca:c2:f5:0b:f6:4b:3b:
8c:93:f7:cd:c4:04:c8:9f:3b:f1:93:98:98:30:72:ab:3f:57:
a6:39:0a:4c:ff:3c:f0:ce:7e:57:3a:a3:7f:3e:a0:ee:f7:82:
78:aa:01:bc:94:09:5e:ad:5a:76:9c:12:99:53:70:ea:59:b9:
b9:d3:7a:5b:61:3b:c7:78:c5:7b:ac:40:f2:d4:fa:3c:bb:1c:
43:81:44:4b:dc:d1:ba:f1:0b:36:14:f6:98:9f:c5:28:81:7a:
75:1b:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:25:21 2025 by rpki-client