Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: EBwrKQaUQUaMuA3vQQBbln1O0Vw9Kg+GvD1PqmkE4uY=
Subject key identifier: 46:96:01:5E:44:36:68:F5:C0:34:F3:A0:82:20:3E:9F:C5:EB:43:06
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 0199FCFD618D6D5613D92694C335AF8B54D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:27 +0000
Manifest this update: Sun 19 Oct 2025 15:01:27 +0000
Manifest next update: Mon 20 Oct 2025 15:01:27 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: UGmHtVgCNAqfA9kp2nrBPTHCH0a9h13GCvvi1SQleIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:61:8d:6d:56:13:d9:26:94:c3:35:af:8b:54:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Oct 19 15:01:27 2025 GMT
Not After : Oct 20 15:01:27 2025 GMT
Subject: CN=4696015e443668f5c034f3a082203e9fc5eb4306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:37:4e:b2:99:0f:65:2a:61:f7:1b:85:b0:
81:47:70:2f:e9:a2:b4:01:f9:66:96:55:71:26:bd:
74:f3:28:b4:0c:a9:72:ee:97:86:51:56:bb:05:b6:
6b:84:ac:df:88:05:f7:be:5a:0d:6e:a6:da:98:15:
e0:c1:cc:59:f6:7a:29:4f:0c:e3:5b:44:69:ef:75:
99:bf:54:22:ff:15:69:86:27:d1:21:09:d7:83:41:
77:2c:9f:ba:54:ad:79:a7:71:66:ee:e5:c0:ff:47:
df:91:af:07:2a:59:bd:3d:e0:03:34:f0:16:71:af:
f9:5a:01:d4:42:41:45:5d:6c:01:0b:81:a5:c1:60:
1c:32:5d:6b:29:34:3d:21:5c:f4:ff:94:74:5b:40:
40:ae:03:43:7b:e5:bd:92:0c:0d:23:a9:e5:11:07:
a5:dd:31:f2:02:cc:d0:9a:60:2b:86:10:0d:4b:cc:
ec:28:db:8d:71:68:e0:89:c4:8d:06:3f:d0:4f:25:
75:b6:dd:ee:32:20:ec:a2:07:e1:dd:69:95:9d:60:
ed:9b:32:67:fa:35:e8:37:b9:a4:a3:e6:d0:a5:9d:
a3:48:ea:a4:77:ef:d0:65:9f:5f:c7:41:a7:04:42:
53:e0:bb:ac:d4:5b:22:3d:cb:dc:c6:5a:5c:28:21:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:96:01:5E:44:36:68:F5:C0:34:F3:A0:82:20:3E:9F:C5:EB:43:06
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2b:b8:1d:21:4d:3a:4d:e2:eb:53:63:55:9d:c0:92:b9:9e:
b3:0e:11:88:18:9d:a5:36:b2:7f:55:d3:0b:b8:c0:54:a8:6f:
3d:ac:76:6c:cf:6b:b8:c2:98:3b:62:c6:47:f9:82:2b:31:5b:
62:9a:f2:23:2c:b5:fa:b7:67:92:b3:65:0a:86:e1:96:5c:84:
d6:38:b0:37:a7:62:9e:85:0d:12:af:7a:b8:7d:c9:c8:bb:6a:
c7:8b:cb:41:86:ca:82:70:94:33:44:17:92:bb:8c:30:bb:45:
4d:48:aa:48:cc:d8:5e:e9:d3:7c:74:68:39:8d:6f:9b:1d:b2:
af:b4:cf:68:1b:b4:89:dd:24:97:33:fe:77:1d:4e:ed:25:dd:
d8:6b:a1:64:5a:29:e9:5a:ee:a9:20:99:f4:2b:87:39:2a:0b:
1b:86:ee:2d:10:c1:65:09:8e:13:97:c4:5e:a5:84:0b:59:52:
7c:d8:ad:b0:8a:ee:cd:85:63:5d:5f:2a:1a:f7:18:09:29:3e:
f9:ab:9c:20:5c:0c:46:5c:21:b9:4c:8c:78:a5:55:65:c4:3b:
04:c3:c8:78:83:63:fb:70:35:94:25:da:1b:8d:8c:6f:21:05:
0a:0d:07:ca:12:d5:95:41:32:be:b0:06:a4:e9:19:6b:85:88:
de:1e:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:08 2025 by rpki-client