Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: NaEXyLVBw2EHTibWkrSY2vtOO5vBdcnWCetxlHIqs0I=
Subject key identifier: A1:1E:B6:5B:AE:08:EB:08:60:0E:CA:4C:8E:32:AC:2C:4F:34:90:35
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 019A5006E72395177D9E1EB67E6E08AACF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0AFE
Signing time: Tue 04 Nov 2025 18:00:20 +0000
Manifest this update: Tue 04 Nov 2025 18:00:20 +0000
Manifest next update: Wed 05 Nov 2025 18:00:20 +0000
Files and hashes: 1: J_w-klg8Fz7usxtg6f6kBplmW2Q.roa (hash: wSUiP/GQT3afkhYb4zAVk2weNrXx80BBBUvY2crSbB8=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: t0n5ZeeAJQW7CYuxl1ABgbpuxYx1ens0SijVCQeS6sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e7:23:95:17:7d:9e:1e:b6:7e:6e:08:aa:cf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Nov 4 18:00:20 2025 GMT
Not After : Nov 5 18:00:20 2025 GMT
Subject: CN=a11eb65bae08eb08600eca4c8e32ac2c4f349035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:ed:e4:29:a2:15:d5:3f:f3:a0:ee:31:d0:
4c:9d:ad:cd:5e:2a:35:62:11:20:31:e7:4c:b3:68:
27:83:77:2d:f3:fc:00:73:72:a1:c4:77:3e:60:3c:
f2:1f:53:aa:4f:f7:7d:28:5a:37:7b:da:7b:4c:6c:
d9:a8:47:5d:52:51:a9:a4:ba:81:4f:e7:e6:f5:73:
22:d6:9d:01:f4:03:5b:f7:4e:e6:62:be:cc:27:44:
66:27:b7:36:3a:f6:25:44:d1:c4:70:41:39:68:73:
5c:9e:7a:40:98:bb:77:54:1b:16:85:06:89:7d:2d:
9e:7a:60:80:16:a4:96:b8:7e:0b:2c:c4:6b:93:6c:
f7:00:71:9e:4b:5e:ca:29:45:8e:d8:b8:85:82:05:
42:8b:66:f2:ac:e8:06:b8:2d:3c:9e:87:0e:56:31:
3d:62:05:4f:62:6b:e0:45:95:66:96:0a:ab:23:ff:
44:e9:f4:4b:c4:6b:d7:69:f3:e0:dd:9d:a0:fe:f6:
7c:be:1e:fc:a0:1e:80:0a:78:df:45:ff:4c:f8:02:
55:b8:bd:1a:49:36:46:61:0e:d7:cd:50:8f:34:a1:
d2:fc:fb:02:cf:49:6e:a7:43:3d:90:59:e9:62:bd:
63:a6:ba:25:b9:73:75:cf:97:6a:57:fc:0b:38:34:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1E:B6:5B:AE:08:EB:08:60:0E:CA:4C:8E:32:AC:2C:4F:34:90:35
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a5:05:c3:57:da:bb:04:db:cf:ce:5e:c7:8d:dd:a7:c0:f4:
d2:e8:70:60:76:00:76:23:d2:55:d8:12:7f:3b:fd:d1:d1:18:
4d:4d:8b:93:c6:5c:40:a2:f3:8e:c9:49:b8:ac:a2:0f:01:69:
05:81:03:4f:d1:bc:a2:f3:61:60:89:8f:eb:9f:f6:69:ca:d1:
73:c4:19:67:ea:0b:57:49:ee:f9:40:07:8d:45:ca:b3:6e:c4:
0c:b8:4c:82:13:99:6e:87:2a:ff:3d:0b:0e:dd:01:32:69:a7:
54:53:89:53:00:92:40:e1:2e:95:6a:b3:11:41:4b:f0:bd:9f:
66:77:c4:53:e8:4e:98:d2:81:7e:b5:fe:6e:1c:b9:1f:0f:47:
40:b6:e1:bc:db:0e:bd:e5:9d:a3:b1:a0:d7:09:0a:15:4b:ba:
a0:3c:20:ea:aa:01:af:a6:cc:0f:98:93:bb:5f:50:d7:a6:21:
bd:1c:2b:4f:a9:c3:90:03:c8:63:12:0e:83:0e:ef:21:29:1f:
ac:60:6b:52:39:7a:38:94:b3:b7:1e:2a:bb:8a:fa:85:08:e3:
3c:68:f6:ed:cb:bd:84:85:ef:52:06:4c:e9:0c:15:84:ac:3f:
a0:0c:57:fa:3d:5a:c2:b4:86:cf:ec:d8:3e:bc:fa:3d:d0:c8:
0a:ac:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:37:59 2025 by rpki-client