Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File: pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier: K+2jcSylHiG4m6gD0pY1Wsdi3o5yGKF91NcsjAQfkOI=
Subject key identifier: 7E:CD:35:3E:58:30:91:90:40:62:0B:6A:CF:0B:59:E7:B8:F0:37:2E
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial: 0199FB7CEF14AEAE37D378B3CF871ED5F347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: nG8C1XpIPdIEiMd7/dkEl2J6PXspwQlxusE6QUPbB4w=)
2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ef:14:ae:ae:37:d3:78:b3:cf:87:1e:d5:f3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=7ecd353e5830919040620b6acf0b59e7b8f0372e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:5c:ee:f4:cd:69:1b:21:d8:e4:d6:05:8d:
d6:6a:31:96:00:b4:fb:3b:83:1f:fc:81:1e:4a:e4:
af:f2:9b:ce:4b:e2:cc:d5:fb:6c:1d:ce:83:f3:d4:
d4:43:98:3e:d2:9b:ea:f3:d6:ba:15:13:97:01:84:
6f:10:d6:74:fb:81:f8:23:b2:e9:49:62:40:d6:22:
09:8b:d2:82:f9:a4:aa:c3:e9:ed:83:4b:f8:ba:b1:
8f:02:0d:e6:2b:74:99:b8:46:4a:1d:44:f4:6f:d7:
8c:d9:2e:d5:2b:87:6c:5a:a8:74:c1:e4:01:75:f8:
b6:b2:29:7d:dd:e4:cd:35:7a:6d:02:bb:ff:88:29:
16:ec:53:21:a4:6c:1d:c7:d6:d5:c1:40:35:cb:d2:
cf:eb:0d:fa:c0:9d:c2:66:15:5a:0b:39:a7:d9:0b:
65:3c:a2:1d:4e:6b:5a:e9:f7:32:69:44:41:e4:3a:
a0:8b:1e:5d:af:ff:bd:9f:51:76:0e:9f:c9:bf:90:
dc:e1:1e:b7:58:4c:3c:f0:d5:78:74:d8:93:59:ca:
a1:d4:bc:01:73:b7:5b:55:c9:48:3a:26:bc:76:ad:
9f:43:d3:6e:22:78:e5:33:55:eb:1f:3a:9a:87:b7:
8e:67:89:70:a9:29:93:35:3c:18:9d:25:8f:bc:aa:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CD:35:3E:58:30:91:90:40:62:0B:6A:CF:0B:59:E7:B8:F0:37:2E
X509v3 Authority Key Identifier:
keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f3:6d:57:c9:1b:81:03:21:d5:65:5c:5a:cd:ba:22:86:9e:
e0:29:f6:bd:87:67:93:cf:a3:cf:f0:ba:59:f3:4e:f1:81:ea:
57:75:97:a5:0a:e0:40:6a:36:49:7d:92:25:25:75:79:52:b7:
f2:7e:32:c1:03:31:36:b5:5f:fb:b6:bc:af:f8:bc:57:3f:b9:
b2:08:b2:2c:35:32:65:83:13:97:1e:e7:a3:ad:1f:7f:91:1e:
13:8c:27:2c:03:c5:52:84:83:37:9a:b3:18:cc:4c:7c:9d:e6:
8e:ae:5f:ae:e4:82:36:6f:f5:68:70:3f:df:e8:9e:dc:d3:ea:
91:d6:da:3a:04:83:40:29:c7:0a:d8:6b:cc:d7:57:9b:88:16:
18:bc:04:3d:79:eb:7b:b9:f3:8c:6c:b9:e9:2d:11:5d:f3:a7:
31:9d:8e:6f:b8:09:ba:df:2f:e5:d7:28:6e:d1:f9:e8:e3:1f:
94:99:97:49:57:11:2a:46:d8:9d:ab:35:24:d5:68:66:93:37:
dc:4c:23:72:f1:8c:bd:88:79:9c:8c:41:df:49:e5:74:3c:cb:
7d:31:46:90:c0:c3:31:f0:a8:69:79:d9:8d:87:f5:13:a2:16:
75:6c:31:97:cc:b9:6d:1b:f6:6b:fd:40:73:43:35:bf:c5:36:
ec:57:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:14:13 2025 by rpki-client