Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: dwdDoCgniXFhUBfzds3vkcFvHwDEc1LbnZDWE5Lrpfw=
Subject key identifier: 1F:97:CC:17:C7:46:7F:8C:57:21:F9:44:CF:56:5F:33:08:3B:2F:43
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 0199FDD8FDFD4F19A588125DE8ADB2334243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:20 +0000
Manifest this update: Sun 19 Oct 2025 19:01:20 +0000
Manifest next update: Mon 20 Oct 2025 19:01:20 +0000
Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=)
2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: NWY98tpI3L2l7P7CS1z2HXCKPFQDjfMmKDWiYVqyc/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:fd:fd:4f:19:a5:88:12:5d:e8:ad:b2:33:42:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Oct 19 19:01:20 2025 GMT
Not After : Oct 20 19:01:20 2025 GMT
Subject: CN=1f97cc17c7467f8c5721f944cf565f33083b2f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:a5:b7:38:74:79:aa:f7:78:26:48:eb:09:
ed:32:a1:81:10:27:b1:00:9b:1f:68:65:47:38:ff:
6c:fc:69:42:41:96:1b:34:f7:81:14:76:09:18:e7:
e3:ec:c7:58:bf:26:16:51:37:99:ba:0c:91:9e:c4:
5c:0b:45:42:41:b5:af:65:4a:2a:9e:13:45:be:e0:
1b:40:d4:f1:43:11:c0:7a:41:f0:6a:8c:cc:3f:fa:
30:a2:fe:a6:d3:48:1b:3f:97:67:49:9e:58:42:3e:
bf:2f:b9:68:41:82:9d:0c:07:fb:df:1f:b0:7b:bd:
b3:a4:03:07:1a:e2:03:f1:64:d2:06:77:60:6c:1d:
b1:ab:85:1e:52:74:4c:3b:cc:23:a4:db:db:5c:f6:
83:d1:ea:3e:c4:36:2c:3c:c1:71:85:1d:5b:46:d4:
3c:f6:80:9d:6c:b6:43:1e:64:61:39:7f:24:fb:8f:
dd:6f:3d:51:b0:31:ec:51:2d:2b:f5:b6:a7:36:ca:
00:52:fa:64:21:f0:4e:76:a6:bf:e4:72:5b:f1:96:
60:aa:7c:d4:8c:c6:89:50:34:b9:1a:01:67:9c:e3:
b3:a5:4d:f8:a4:9a:2f:e3:6d:3b:10:14:54:c4:f9:
ca:6b:ca:ea:50:4e:a3:4a:36:f1:76:d8:4e:c7:97:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:CC:17:C7:46:7F:8C:57:21:F9:44:CF:56:5F:33:08:3B:2F:43
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b9:2b:53:3e:d4:0c:5a:84:46:ac:6d:4a:75:27:f2:bb:d1:
08:ef:b4:e6:1b:66:a2:64:a4:33:10:71:37:93:23:bf:07:b1:
b9:e6:52:d6:49:4e:60:6f:77:02:d3:49:a8:a1:f0:01:47:3e:
33:c6:11:4a:05:cc:cd:e0:87:83:47:20:ca:b5:f3:41:d5:12:
17:24:cc:48:f0:d8:c7:b1:ad:5e:82:85:ef:59:f1:76:c7:98:
76:a9:4b:b5:b0:48:6f:82:1d:33:30:50:81:4f:ae:4f:df:6e:
e1:d8:a9:73:3c:2d:44:e0:b5:bd:a9:7d:50:7e:7f:b3:a1:f5:
1f:65:ae:19:61:ac:36:ce:ff:f3:d8:00:af:b1:dd:67:38:71:
8a:74:5a:cc:59:e3:2e:d6:2a:bf:9d:d6:16:28:f0:d2:da:49:
aa:22:bb:56:a6:0e:83:1f:d9:34:91:7e:92:46:8f:33:51:6f:
07:1e:f9:bd:b8:30:9c:03:3a:ac:c9:2e:8b:fb:ea:88:a6:5d:
dd:d6:74:c6:96:6b:05:73:e8:9b:d3:71:c0:1a:7e:14:96:44:
f7:fb:7a:65:03:c9:1b:5c:19:40:d2:ba:fe:3d:59:5c:3c:e7:
85:e5:cd:6f:96:c1:95:32:d3:18:61:a8:4a:b2:ad:f1:87:d1:
75:1d:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:39 2025 by rpki-client