Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: hKUE4N92e/ChWWidVKq9pVj8uJX/jEfO5S9R0zg6s+E=
Subject key identifier: 2E:51:3A:D3:11:F5:F7:39:86:24:D8:EE:9F:35:EE:48:E9:6D:B0:2C
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 0199FC21D04C22F48DB9101DC4C001333004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 116D
Signing time: Sun 19 Oct 2025 11:01:38 +0000
Manifest this update: Sun 19 Oct 2025 11:01:38 +0000
Manifest next update: Mon 20 Oct 2025 11:01:38 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: MN8mfXaQvIxZbUicRw/hDU0BggryyEh9bY/2uwZ41H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:d0:4c:22:f4:8d:b9:10:1d:c4:c0:01:33:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Oct 19 11:01:38 2025 GMT
Not After : Oct 20 11:01:38 2025 GMT
Subject: CN=2e513ad311f5f7398624d8ee9f35ee48e96db02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:93:33:59:bb:2d:26:e4:bf:b7:02:42:ae:ee:
6d:31:31:4d:e5:a6:6d:a6:10:37:e8:ff:37:76:63:
42:3d:98:84:77:4f:f9:2e:73:1a:20:ee:bc:93:45:
d9:a7:12:31:cc:2e:65:a2:16:1a:dd:96:56:bf:89:
aa:d5:5d:90:93:71:9a:86:e3:1a:5d:fb:d7:00:e7:
5e:89:7d:ba:c7:c3:f1:dc:2a:0c:bf:42:32:e1:3f:
9d:89:99:18:8e:ed:b0:67:46:a6:b5:66:69:f2:07:
05:fa:2c:01:3e:e7:d3:83:3c:b9:6f:a2:15:5c:a4:
d1:bd:e1:f6:45:fb:8a:1d:2b:cb:e3:0f:18:17:92:
b0:b7:81:f0:15:10:6c:25:f1:c1:2c:b3:d8:70:0a:
02:8e:8b:e1:d2:74:84:34:ac:68:b6:f0:42:a4:de:
e4:79:9b:ba:6a:09:2c:16:15:05:1f:2a:61:04:c9:
b7:27:39:be:cd:95:91:f4:21:57:51:a6:a4:ed:b0:
b5:26:b5:9b:8f:9f:2f:60:e8:96:4d:e2:be:0d:12:
ec:73:5d:24:5d:d2:e3:20:1b:3a:34:9b:0f:6c:56:
ea:0a:1c:2e:1f:86:1c:79:27:ab:fb:99:ff:53:ea:
28:59:50:ca:f3:53:bc:0f:7a:fd:e8:3b:5c:ae:98:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:51:3A:D3:11:F5:F7:39:86:24:D8:EE:9F:35:EE:48:E9:6D:B0:2C
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:18:eb:21:c7:34:d6:6e:71:a2:8b:38:0e:11:d3:d8:47:2b:
41:ac:6c:2f:94:0b:36:25:76:fb:38:43:97:e1:8b:bf:bf:30:
c0:a4:26:56:98:1f:89:31:5c:2a:ae:80:66:20:76:64:51:cd:
6e:5c:81:24:06:c6:55:e0:e1:b1:5e:a2:c0:b2:4a:42:20:89:
77:d2:52:ca:ff:dd:66:bc:fb:fb:69:ed:56:22:08:47:ac:49:
88:ba:93:36:6a:33:ee:6c:2d:53:40:d0:f9:5b:96:a0:3f:22:
26:3a:e8:98:03:17:0b:63:85:73:df:d3:45:e4:ca:fe:be:be:
82:56:58:27:10:3e:bc:60:e7:7e:8a:7d:59:24:79:68:74:12:
13:0c:62:95:07:99:c9:c4:6b:28:b2:95:a0:1b:73:30:e9:86:
d8:80:a2:fa:22:e3:41:26:a4:63:bc:e4:e3:60:97:51:31:eb:
45:76:df:1c:ea:ec:d1:ef:5d:15:c3:0a:ba:0e:ca:13:60:75:
4b:f9:b3:f3:31:fc:8c:cb:1b:c7:9d:08:b5:53:44:6a:95:fd:
a6:ca:32:95:6d:01:17:df:1c:ab:b3:27:90:f4:ae:60:4e:4c:
86:31:03:e5:6e:d2:a5:83:5e:2f:22:c9:c9:bf:88:54:8c:90:
65:64:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:46 2025 by rpki-client