Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier: joSddziTllUs7ad9XmxC8P4/2PGjJPS7MflZXigzzTo=
Subject key identifier: 2A:E8:E0:AC:82:14:75:58:35:FD:96:F9:5F:5E:15:B9:72:1B:3C:18
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 0199FC8F56D3C3761FB71BEB5F0D7AEB973B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: U7nNEW5XGU3Qw3Z5TlXa8n1A0Xo.roa (hash: El8KNdvpLmelwHnPspzpd+ZkXP2SnewzZSQOjMbCymQ=)
2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: G8RUP1eAkmv9qbwhOnboEsjcH3mVTTY/mnA1l9clNv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:56:d3:c3:76:1f:b7:1b:eb:5f:0d:7a:eb:97:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=2ae8e0ac8214755835fd96f95f5e15b9721b3c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:f1:1e:c7:c2:48:09:fa:7b:f1:26:55:1a:
c9:cd:a1:77:33:3a:0c:68:2a:63:be:1c:3f:2b:f8:
5c:9b:96:29:3f:5b:dd:14:f9:28:a2:6b:8f:44:56:
88:67:91:51:a8:24:40:48:46:70:7b:9f:73:c3:04:
91:5b:11:73:55:84:2b:01:d8:00:61:a9:46:17:7f:
b0:b6:03:a5:4f:09:99:95:ea:9b:6b:da:74:70:ff:
73:e0:d4:6c:0f:0e:e3:74:eb:40:8a:75:ea:2a:8f:
7e:e5:bd:2a:a3:8d:4b:f4:60:30:f4:98:53:4a:f0:
c7:a9:b8:d3:87:0a:16:fd:0c:96:3d:bb:14:32:bb:
c7:72:d0:02:3e:95:6c:c0:20:bb:89:cf:0c:f9:95:
4f:0c:f5:5d:23:29:33:a1:58:93:e1:dc:89:41:f0:
e2:34:30:92:d9:3e:49:3e:ff:25:06:d7:96:ca:fa:
2d:e9:e2:84:97:bc:ee:90:3d:14:06:01:58:42:da:
f1:b3:3c:9b:14:58:6e:03:83:2a:93:00:5e:b5:1e:
02:4c:f0:de:18:da:d0:d7:8c:a0:27:aa:f7:8b:f7:
08:84:1b:7e:2b:d4:56:22:f0:ff:f3:cf:22:de:c6:
b2:3e:f8:92:80:be:dc:97:15:a7:08:d5:b2:e7:fd:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E8:E0:AC:82:14:75:58:35:FD:96:F9:5F:5E:15:B9:72:1B:3C:18
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:17:0e:20:e6:cc:66:bf:2f:3b:72:89:96:ff:c3:77:5f:5d:
ec:24:bc:0b:9c:f7:5c:88:cb:04:6b:5e:d9:4c:12:62:b3:f4:
44:95:d4:4d:52:70:4b:7b:29:ed:48:5a:a8:ea:fc:f3:1c:53:
40:27:6f:c3:b0:0c:9e:70:96:1b:06:ac:7c:c4:9a:b4:69:e6:
bf:5a:82:9a:4d:c4:d5:73:82:41:b7:b1:50:20:cd:74:5a:e7:
5b:c7:1d:d0:1d:26:26:c3:4b:61:d7:e0:a0:c5:ae:29:a5:ad:
e0:1e:07:81:e4:73:4b:cb:a6:bd:2c:89:28:ef:f4:d9:4a:f8:
00:3c:ae:88:d2:21:4d:13:7b:3e:a5:3f:56:97:53:86:6c:43:
cb:1b:28:85:aa:99:6d:f6:69:53:c1:ff:b7:43:f9:2b:25:e6:
ce:ab:3b:a8:57:a1:90:e2:46:57:e6:fa:89:b8:bd:1b:44:29:
b4:a3:2b:62:4b:7e:d6:22:e2:04:75:36:2c:8e:75:54:d2:5a:
be:60:87:14:85:ae:20:46:8a:2f:98:6d:13:7f:f3:0e:ab:10:
7b:65:14:a2:d5:2c:c5:ca:35:cf:04:b6:b3:02:68:fa:70:f3:
0c:bc:97:50:0f:fe:38:d4:21:02:12:74:ef:7d:53:b2:c8:b8:
bb:cd:d0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:06 2025 by rpki-client