Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: c8W08mbaDBf74SxW4a1fivEsRFGTcqto8rrY9Q9N1JE=
Subject key identifier: 4C:CB:FC:1D:B3:4A:A9:13:AD:B0:EF:F5:B6:25:24:1D:B1:63:E8:96
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 0199FBEA865A30F34F333FCD7A4DD4173891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 16FA
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (hash: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=)
2: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: OieYPKCZIzF4+e4icZtnSv7gKBs1tiVgTOgIfZcmUIs=)
3: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (hash: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:86:5a:30:f3:4f:33:3f:cd:7a:4d:d4:17:38:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=4ccbfc1db34aa913adb0eff5b625241db163e896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:bf:f0:eb:bb:a0:56:17:07:ef:9a:46:b4:
47:95:cb:36:8f:79:b1:cb:aa:ad:dc:ac:d4:6f:40:
31:08:62:33:da:23:26:53:e4:7a:60:d4:67:13:c8:
18:04:4a:11:d4:ed:48:3f:cb:ec:04:0e:c2:d1:b7:
76:11:38:2c:f0:75:ce:37:cc:94:7b:fd:af:4c:bd:
cc:f6:d6:62:8a:cb:22:c3:18:c8:2f:d0:a8:84:a0:
7c:90:6e:b8:92:c2:27:8b:b7:3d:42:d1:80:78:5f:
31:f4:f4:5e:42:c7:bf:46:ae:9c:a3:17:4d:f2:86:
4f:f9:bf:1f:22:20:cd:18:0c:30:db:1c:fd:40:82:
15:50:65:76:ac:e3:f8:2b:c9:75:f8:9c:fc:e5:31:
3b:4b:ff:b5:4e:39:42:e8:f5:6e:06:3d:f1:b4:ed:
f5:44:5d:97:d7:ee:92:6d:f4:be:99:94:8d:42:c9:
aa:a8:5d:11:28:0f:53:30:d2:4c:d6:21:19:03:7c:
41:5a:f6:98:e1:5b:f9:0a:75:d7:71:2d:0b:a6:68:
1c:96:2a:07:39:ad:82:6e:8a:26:ef:7f:6e:69:53:
c6:72:8d:d6:9c:92:5c:ee:52:99:bf:ff:d2:08:67:
3f:32:24:b7:34:92:55:3f:1b:c5:f6:af:10:3d:63:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CB:FC:1D:B3:4A:A9:13:AD:B0:EF:F5:B6:25:24:1D:B1:63:E8:96
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:56:b5:bc:28:4a:fe:54:47:dd:66:ed:16:76:13:7f:b4:36:
28:0c:8c:67:12:7f:78:20:a0:fe:0e:27:2f:aa:3c:c8:18:46:
48:43:3b:72:e1:58:ca:56:62:44:1c:29:49:b5:0c:ee:43:e7:
ee:65:83:01:ad:7c:f7:57:7c:0f:9b:51:5b:f0:b9:ba:44:ba:
a3:54:3a:d8:62:33:d7:b5:0a:1b:7c:38:d4:cf:4c:90:47:3f:
71:30:35:01:a9:38:cd:f8:c0:22:ba:bc:6f:fb:5f:d2:a9:6d:
69:a7:ba:ad:03:ea:11:c9:71:23:cf:c9:b3:d5:fa:d9:ef:11:
82:30:af:00:ac:7d:3e:b5:92:32:67:ae:c9:9e:cd:69:15:6b:
97:e5:c1:79:6e:0f:52:f7:43:ec:80:9e:21:00:c1:87:f2:67:
eb:64:54:e5:3f:d5:dc:21:14:64:87:e6:0c:dd:d7:e9:ca:4f:
f7:cb:c4:7e:5f:02:f9:f8:82:79:78:ef:6a:58:a8:de:b8:7f:
43:bb:3e:99:ec:56:e3:ca:be:58:12:1a:4f:8d:77:15:3d:65:
2f:6e:2b:6e:70:3c:d6:fc:d4:ec:32:7e:bb:a9:9f:38:9e:77:
9f:a0:72:11:3e:30:5c:de:cc:6f:f4:42:d1:d8:54:f9:39:33:
ff:db:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:10:43 2025 by rpki-client