Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier: log93KoF3uFUX04/me2tDb8lKey8hRcMnbt2TZW6AkY=
Subject key identifier: 63:52:A8:91:33:58:DC:E1:7A:CA:77:4A:4B:4F:03:F5:68:EF:FD:A6
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 0199FC219A7BC9E6E170D179EF3521C6C38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number: 09C4
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: od2xvjWk59QBIYMfzDRtRjww2P6oVBFzQlX65sbGa1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9a:7b:c9:e6:e1:70:d1:79:ef:35:21:c6:c3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=6352a8913358dce17aca774a4b4f03f568effda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:0f:96:01:bb:8e:a1:dd:68:f6:26:c8:65:
f6:4e:c3:e3:e0:59:90:79:56:27:1c:45:95:1e:c7:
2f:71:c9:3b:8d:02:e3:2e:05:00:4f:08:d4:c2:9c:
d4:03:87:70:4b:d9:62:5c:7d:10:23:7d:d0:a6:02:
a1:59:2c:c7:53:4c:16:80:d6:57:e6:b4:e7:d6:46:
6a:7f:b7:6b:62:cc:c1:fc:a2:2d:2b:d0:2a:27:e4:
10:fb:70:a8:1e:c0:3d:a6:18:99:28:5a:00:1f:5b:
f1:05:fd:b4:95:54:16:e7:2a:47:0b:08:aa:61:f3:
88:8b:cf:1d:6e:58:1d:b0:32:a7:6b:3e:9d:10:2c:
35:f7:4f:de:c4:09:e5:1b:31:8d:c3:e4:22:0d:ce:
c6:32:f9:5b:cc:b4:79:69:ba:5a:b2:ba:4b:75:3a:
f6:d1:7a:97:91:bf:ef:cc:8d:e1:e3:5f:c7:93:d8:
3f:34:fe:f7:c0:1e:cc:d7:96:a8:90:17:32:1c:1c:
27:0e:0b:06:fe:9d:04:1b:c4:3d:63:65:2f:29:2d:
6f:36:ef:68:bc:06:e3:22:3f:19:aa:dc:de:f0:be:
24:65:4d:17:5c:3d:9a:04:9c:74:ff:30:fc:9c:38:
15:e8:1a:f2:da:38:fc:5c:3f:3d:c4:57:92:78:45:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:A8:91:33:58:DC:E1:7A:CA:77:4A:4B:4F:03:F5:68:EF:FD:A6
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:df:72:9f:a3:db:f8:11:f4:de:46:73:7b:72:3f:42:79:17:
c0:c1:b6:5e:d9:75:5b:32:d0:6e:9e:36:5c:d0:b6:a4:25:0d:
5a:17:57:72:d8:f2:b6:55:76:7b:05:19:49:69:ea:d0:ef:9b:
f5:65:0c:b6:3d:85:5f:a7:4c:ba:bb:f2:69:b0:a9:a7:4d:05:
0b:b1:11:10:36:03:1a:24:39:26:b8:ce:00:69:f7:67:30:d0:
ff:9c:cc:a6:13:2d:10:3c:3a:70:6b:fb:0b:be:9f:14:08:de:
12:f3:2f:31:aa:2f:49:dd:8d:2a:fd:a1:23:2d:b6:77:75:ce:
d3:89:f6:a1:7c:8e:fc:99:32:df:78:5d:45:cc:d8:63:37:65:
57:ae:37:fb:48:01:ab:2e:9e:dd:93:c4:70:62:03:89:88:da:
ba:3b:4d:8e:bf:77:2f:0c:e2:7c:bf:fd:19:4a:14:20:84:7c:
b0:fd:02:0c:c0:cc:82:e7:0f:0b:ec:e3:e7:16:d3:f0:8d:63:
e6:59:1f:9d:31:19:2c:21:a9:a2:0c:46:5b:09:76:a7:be:73:
a7:90:39:8f:ea:9c:f3:12:55:b5:15:8b:d4:32:16:e7:0e:82:
67:9e:f6:53:2b:f2:4b:51:70:71:c9:48:f5:32:85:ee:8e:64:
37:5a:4c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:33 2025 by rpki-client