Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: b8OTuNrrBR0gqxnJ7pyrNlqSgLc7V2ErXM+yvpkvSfg=
Subject key identifier: 60:D2:DD:8C:72:AD:F6:68:05:16:81:39:E4:E8:30:F0:02:91:43:0B
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 0199FD6B1AE5D213E368BFC6B4E038ED789C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0C3F
Signing time: Sun 19 Oct 2025 17:01:18 +0000
Manifest this update: Sun 19 Oct 2025 17:01:18 +0000
Manifest next update: Mon 20 Oct 2025 17:01:18 +0000
Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=)
2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: Epx2qNkVjtmq+1f7fT+GPqVY3an+OvE/hN3JyAAJ9A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:1a:e5:d2:13:e3:68:bf:c6:b4:e0:38:ed:78:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Oct 19 17:01:18 2025 GMT
Not After : Oct 20 17:01:18 2025 GMT
Subject: CN=60d2dd8c72adf66805168139e4e830f00291430b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:63:6d:a7:c8:0b:f3:d7:8a:c1:d1:10:0d:
78:84:bd:d0:74:bf:89:ed:bc:61:97:6e:d9:63:99:
fc:fb:cd:a4:9c:c6:c3:72:92:4f:f5:f1:44:74:ef:
75:42:bc:ce:02:87:10:7c:38:66:c5:6c:c9:6f:64:
80:02:c4:11:e2:d3:4c:51:c7:f7:aa:d3:e6:4d:99:
88:67:a0:c5:97:ff:f6:c5:f5:e6:46:50:2a:76:2c:
36:54:b7:3f:4f:68:88:df:56:9d:47:fa:83:8d:23:
38:5e:fc:88:00:0b:88:67:eb:6e:47:b2:7c:ee:ad:
45:9e:97:19:03:92:f9:6f:cc:04:e4:27:c1:3a:cd:
85:32:ab:d7:d8:ef:e9:27:fa:13:b7:07:a8:7f:25:
e8:7c:33:01:8e:d3:7f:be:ee:d9:61:7b:ec:f8:72:
f1:a8:e7:4b:54:5b:12:66:0c:da:5b:cc:1a:bc:dc:
9f:c8:22:87:e6:71:06:e3:eb:18:e8:47:8b:a2:3b:
42:9d:1e:32:e1:97:92:89:a9:19:c6:f3:c1:77:14:
0a:a7:ff:7e:07:45:02:a1:f7:13:0e:35:e0:a1:d0:
71:0f:49:fe:10:d4:b9:d0:89:da:b4:6f:f3:b8:e0:
b6:e7:56:ee:34:59:db:af:9c:71:2a:a5:6b:df:bb:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D2:DD:8C:72:AD:F6:68:05:16:81:39:E4:E8:30:F0:02:91:43:0B
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:40:3e:b3:25:67:47:55:7b:fb:f9:03:b2:8c:b0:2a:6c:c6:
bc:d9:13:77:f6:ba:59:69:62:30:59:c5:41:93:cb:6b:dc:83:
a0:a1:49:b1:ef:d1:3a:48:23:ed:91:83:b4:4f:09:db:f2:8e:
dc:df:2d:cc:07:0b:b1:68:b8:dd:15:44:9e:e0:b5:f8:09:5d:
4b:df:c7:3c:99:25:39:43:ff:c6:a0:60:eb:2b:73:1a:7c:1c:
3b:ea:be:c9:55:68:b7:e4:51:bf:c5:1d:cd:12:a7:87:58:af:
35:84:7b:f5:ed:71:00:a2:12:40:4c:ca:73:86:49:50:42:7e:
0b:8d:af:1e:17:e9:09:11:df:69:cb:ee:c0:02:78:9d:f4:60:
83:86:20:5c:f7:5c:e5:f4:1a:e9:37:c2:2b:63:59:1f:02:c9:
91:46:22:42:bd:ce:8c:85:c8:a3:c5:fe:72:cd:81:f2:23:7b:
43:27:d4:3b:92:f0:7c:d9:40:76:8c:8c:4e:a3:07:ef:f5:24:
f2:2f:fc:98:0b:c4:50:7c:07:4c:c8:c6:db:cd:36:71:d1:b6:
9c:32:52:e8:63:1d:d5:b4:88:b0:7c:e9:eb:25:e2:f2:0f:ff:
84:07:47:44:e2:ef:52:03:a4:61:d4:cd:31:ba:6e:da:0d:b1:
37:2d:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:23 2025 by rpki-client