Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: laBA+ePnPNXkbeMgKHOHBoaErjK2quZhA6JIWRqWk8Q=
Subject key identifier: F6:F9:42:87:A4:36:6F:E1:EE:5D:F2:9A:54:6C:27:88:5C:43:AD:63
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 0199FB0ECFC3B634B096FE10132BFD9FED50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 7C
Signing time: Sun 19 Oct 2025 06:01:15 +0000
Manifest this update: Sun 19 Oct 2025 06:01:15 +0000
Manifest next update: Mon 20 Oct 2025 06:01:15 +0000
Files and hashes: 1: alAqnpdWmlZswzu0_tz6FMnDdhY.roa (hash: M7Rrc8n9kYkHNkPjYV4H2sgmRO3YC2Zds6sffNzRLow=)
2: nDjykDgCRY5PJeZrLhezjP3d1sg.roa (hash: f6z3v4pV6tnSGxv48rgOnvHwC9qgyyjVMA6AIzAEA7k=)
3: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: 0+n264DrEzYYrDw2tAwq9QjKSyq0PEhHxNy2hljrhFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:cf:c3:b6:34:b0:96:fe:10:13:2b:fd:9f:ed:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Oct 19 06:01:15 2025 GMT
Not After : Oct 20 06:01:15 2025 GMT
Subject: CN=f6f94287a4366fe1ee5df29a546c27885c43ad63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:d8:82:44:71:ca:39:2a:32:7b:52:d7:cd:
93:d7:ad:79:f8:3d:8c:49:89:bd:95:74:0c:36:f8:
57:e7:77:1c:e7:96:fb:6e:5b:9a:a9:0d:ef:46:34:
e4:cb:91:2a:3c:3f:f4:cd:94:c0:e3:cb:ba:b6:79:
58:6f:ac:8f:6d:01:3e:55:ea:23:5c:7a:1e:2e:80:
3b:7e:65:99:72:c8:f2:bb:5b:9e:59:0c:28:9f:f0:
4c:10:4c:8c:92:90:a9:bb:99:a3:f9:03:81:f6:94:
5a:f5:ee:ff:99:ac:65:91:bb:bd:3e:97:3e:b5:98:
ee:2d:a2:52:09:29:c6:43:c8:fb:c6:b7:1f:b9:ca:
89:7a:1a:86:76:56:f3:97:4d:51:62:aa:9e:7c:a5:
4f:39:48:2e:44:ef:1b:e0:b7:4f:15:4a:af:73:0a:
c3:97:54:f2:c6:4a:b3:71:a0:53:f3:78:36:d4:e2:
f3:ac:fb:62:7a:46:08:e9:6b:1e:5d:8b:c8:c9:af:
64:d7:ad:b9:04:c9:03:d0:ed:e9:c0:1f:90:17:7f:
70:c2:85:7a:11:40:54:9d:58:99:7d:e4:5c:e0:8f:
b5:29:4b:aa:e1:d0:f1:27:ec:c6:82:0d:ce:fb:e7:
ab:0c:fe:56:ee:9e:f2:8f:89:00:1c:f3:22:dc:7a:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F9:42:87:A4:36:6F:E1:EE:5D:F2:9A:54:6C:27:88:5C:43:AD:63
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f0:3f:3d:40:14:9d:ff:ae:ac:40:7f:b3:9d:88:63:18:6e:
9b:24:8c:7d:2a:8f:6d:9c:f7:e0:70:9e:26:08:2e:1b:37:2b:
16:20:e5:b6:ee:cd:88:a0:cc:10:36:fc:e0:64:67:2c:ae:7e:
e5:9c:bd:a4:fe:d7:5a:92:85:36:4f:59:c3:0c:c0:b1:c3:5a:
03:c5:5e:b9:5e:f2:d7:0e:49:74:61:d9:06:99:3a:5c:b4:be:
df:17:db:05:1d:36:3f:8d:0a:d4:9e:20:eb:09:c9:e9:02:d9:
d5:4c:5d:f7:4e:44:7a:65:fe:46:a8:33:c3:0a:19:cd:e9:3b:
3f:6a:71:99:dd:21:de:e9:14:98:cf:00:20:f1:6f:cf:87:ed:
bb:e0:00:8d:79:7a:3a:22:b0:34:fb:72:54:a3:45:ec:75:d4:
ec:d8:38:73:81:08:cc:fc:05:18:62:20:52:11:51:10:6d:31:
ad:61:83:90:2f:7e:e8:5b:d9:2f:8b:7e:1d:22:86:32:fa:44:
74:a6:d5:0d:a4:02:8c:84:45:f5:24:61:ea:27:b5:ab:bd:ee:
2f:fd:1e:e9:66:94:12:85:6d:74:07:4c:6b:9c:c4:90:b9:61:
c6:f8:f8:d1:b2:83:d8:83:8e:2e:29:bf:07:66:bb:99:19:2c:
5e:7d:9f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:03 2025 by rpki-client