Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
File: pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json)
Hash identifier: 6KZxzqB9B+0yE6kd6oyJ2OgfiMmGollNSG/wM99uOFg=
Subject key identifier: 74:B4:D3:5D:E0:61:EE:FA:3D:85:B6:CB:DE:8F:89:54:CE:4A:09:D8
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 0199FEB4FD99FACF98FF66A7118AB733EF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 23:01:38 +0000
Manifest this update: Sun 19 Oct 2025 23:01:38 +0000
Manifest next update: Mon 20 Oct 2025 23:01:38 +0000
Files and hashes: 1: DZzf4gixVG1v_XBOTEdiJTCnpgc.roa (hash: EKgVMjgzgQW/dE4uPulEkrnDhBOvFfmwxhJ1zs6dJk4=)
2: PyDzr8WmYcRo05FGb5UzcWZdKls.roa (hash: IYIt11a1r2unTfjZQuVOMhykI3XsxsOfurke5JUMHZc=)
3: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: 4SdV3JX13OJciMJS7o6LwQ1Of+oeGsxS3ahV3SHfAJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:fd:99:fa:cf:98:ff:66:a7:11:8a:b7:33:ef:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Oct 19 23:01:38 2025 GMT
Not After : Oct 20 23:01:38 2025 GMT
Subject: CN=74b4d35de061eefa3d85b6cbde8f8954ce4a09d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:3c:fa:12:e3:ea:59:11:c8:7c:29:58:1c:
65:0e:88:24:f6:d5:96:14:ee:3d:d3:6e:2b:94:d0:
49:7d:f0:65:fb:80:0d:af:2d:8c:59:10:ac:d6:32:
68:32:39:56:aa:2f:7b:c5:f5:1d:f7:67:0d:be:d7:
11:60:7c:dc:29:3a:4e:7b:5d:7c:5a:3c:52:94:ba:
4d:aa:32:c9:b5:05:74:f3:6c:07:94:b6:e8:28:b6:
9e:1c:6b:66:0d:f9:01:d1:05:82:15:64:7b:fc:87:
77:72:01:ec:dc:78:94:25:13:55:f3:e5:1d:56:fc:
c1:ee:bc:8b:89:c0:56:ec:bc:42:e1:bf:ce:f2:b5:
3d:e8:89:2f:c6:a8:22:62:5b:7f:90:81:b3:cb:02:
b5:3b:02:a0:fb:96:9c:98:aa:ef:a7:a5:87:8e:f7:
82:14:cb:d3:86:67:4f:45:c0:37:c5:9d:55:34:88:
6e:ff:76:17:a7:36:4b:ab:9e:f8:49:5d:9d:db:e6:
e9:07:e8:4e:25:cc:79:ee:3f:5b:9f:b2:aa:83:7b:
c8:f8:e4:ed:d4:de:44:65:b7:49:a6:60:67:07:05:
ff:46:97:83:0a:44:06:46:74:ec:ca:ae:d3:31:20:
fc:c7:ee:c5:84:3f:fe:cd:de:64:5b:92:e4:34:6c:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B4:D3:5D:E0:61:EE:FA:3D:85:B6:CB:DE:8F:89:54:CE:4A:09:D8
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3f:ac:ad:bc:81:e3:4c:27:1f:f3:36:f0:35:7b:f8:81:87:
b0:93:c1:d8:4b:8a:90:26:65:a2:58:bb:8a:13:5a:a7:23:2c:
3a:07:c6:ae:23:12:29:e8:2e:6a:b5:26:3c:0c:af:39:f0:b6:
aa:1c:8c:7e:99:f9:07:1b:fe:9c:ad:27:e4:0b:a9:7b:3d:4e:
96:eb:45:65:66:84:de:5d:31:0d:31:fe:5d:6e:9d:df:e2:12:
33:0a:9e:86:45:ba:c1:ec:52:f9:6f:e0:a1:ce:dd:e4:21:97:
26:59:18:00:c4:a8:d7:72:19:24:9c:92:42:ea:78:cf:ef:ba:
22:da:d1:86:f0:ae:f1:4b:d7:53:9f:24:14:90:b2:9f:b4:96:
8c:6c:14:bd:4d:ec:f2:48:ab:13:22:d4:2f:a6:d5:44:de:83:
51:41:ae:0d:c0:80:1d:2b:93:26:e9:77:18:69:52:c0:09:9b:
19:3d:4d:fd:7a:4d:26:df:c8:54:fc:4d:5e:32:5b:f7:6e:63:
88:2c:db:4f:26:02:d9:e6:4c:41:09:53:4d:ab:11:cd:e2:fc:
0f:2f:7f:b3:85:4b:33:cb:87:e4:44:5b:bc:c6:29:8b:0b:15:
b6:a4:cd:9d:3c:e8:2e:b7:5e:fd:2e:38:60:d7:61:26:70:6f:
ec:25:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:15 2025 by rpki-client