Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json)
Hash identifier: GLRmBjzyj5VhnsogmQBHumfDPKWa8ZcHTQdfR3YcDS4=
Subject key identifier: 4B:36:A0:9D:9F:D6:10:2D:07:F1:F2:DB:CB:B0:20:65:64:30:75:1F
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial: 0199FC59007D8B2BD092C7A65B45E5BAF4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
Manifest number: 0B95
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: 6jOAX6ZKooyhgzG3-RXUavHtejc.roa (hash: zAiUnOceYAANogRzQmsXCXZI4dk5OulIUSwMR15rFvs=)
2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: 9mb9+qzQoZQ2K3lnZ5DjyMAuWmZwqr3OoIlxSAy16uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:00:7d:8b:2b:d0:92:c7:a6:5b:45:e5:ba:f4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=4b36a09d9fd6102d07f1f2dbcbb020656430751f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:ea:fc:5b:6a:cd:19:3f:c2:0e:fb:a5:1b:
3f:3d:fa:08:f4:41:27:ad:4b:5b:c8:d5:cb:4a:34:
1e:48:e9:94:8a:53:a1:9a:0d:58:16:8a:63:10:fa:
cd:3c:b6:ad:20:24:50:56:2e:a4:6a:15:7a:81:e2:
bf:54:fe:72:93:d7:a9:53:f2:b2:9c:e7:31:30:e8:
f7:df:94:55:23:1e:b7:13:44:1b:d5:aa:40:a4:2a:
88:38:3f:15:4e:97:47:dc:93:f6:51:f1:d4:35:f3:
e6:3b:91:23:48:ca:d4:bd:cf:e9:d1:32:e5:fa:71:
13:20:f1:f5:f4:a9:c9:2a:ae:69:1c:44:22:cd:f7:
bc:9f:ac:bd:64:41:64:5a:26:c7:c6:90:78:bb:fb:
86:0b:e7:f0:a8:10:00:8d:fb:09:3f:07:39:62:e4:
f7:92:6d:92:a2:41:61:89:e6:d1:a9:17:6a:71:19:
1b:b7:25:c5:cb:cb:74:56:df:8b:ad:33:02:94:99:
f3:01:d5:7e:1d:bf:3a:31:85:ec:29:92:85:3a:dc:
a1:15:62:3a:75:e6:17:c8:5c:7b:2c:46:7b:dd:55:
64:28:fa:49:15:99:24:47:29:66:5e:ae:72:b6:ac:
fa:21:97:f3:7a:14:4b:a6:2b:d5:17:20:a9:c8:08:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:36:A0:9D:9F:D6:10:2D:07:F1:F2:DB:CB:B0:20:65:64:30:75:1F
X509v3 Authority Key Identifier:
keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:5b:0c:e9:59:ad:a0:05:cf:55:cb:9f:ef:9e:1a:2d:4c:
08:43:4a:ae:e4:1e:1e:fe:77:ab:7c:ac:40:a6:46:dc:1a:e8:
23:7c:30:07:a1:a2:40:1f:cb:99:06:1c:6d:98:af:c6:87:71:
77:e4:04:02:e9:1d:da:78:15:4a:77:a5:b1:35:a7:e8:f9:ab:
95:4b:e0:41:45:d9:83:7a:73:c9:c2:f6:5f:a8:69:f7:a3:53:
15:a9:7b:68:b8:b4:58:2c:55:de:4f:f4:24:e4:5d:f2:3c:74:
17:dd:4a:a4:b2:7e:85:66:d9:ee:8e:59:74:50:d1:23:af:08:
9a:24:4a:71:68:d6:28:4a:99:21:0c:23:a0:bd:c6:4e:df:ed:
19:cd:bc:ab:d2:7c:4c:34:0d:22:d2:28:30:f9:2f:f5:a6:18:
d4:a0:16:d0:3c:bb:5d:92:ec:5f:4b:2c:92:12:29:6c:f6:4f:
f8:7c:29:f0:b3:fe:33:5b:a6:67:06:d9:ca:fb:dd:81:06:20:
af:2e:33:e5:28:be:22:6e:5f:a1:2a:d8:40:f4:73:1b:6c:31:
60:5e:3e:bc:06:fe:19:2f:67:a2:66:c4:37:47:79:8b:4a:e6:
84:7c:c9:43:e8:ef:cd:e1:5e:e8:06:71:f8:fe:9c:49:84:24:
de:42:96:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:40 2025 by rpki-client