Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: 59bf5aNuamSteN/P21T3yW1IzhD9O1cTGDDRMEaxChk=
Subject key identifier: 74:12:73:CF:E6:0A:DE:4C:50:41:63:4C:F3:A9:79:B9:3C:AD:54:B1
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 0199FFC82080E9EBC50E20C24F919139D4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0AD7
Signing time: Mon 20 Oct 2025 04:02:09 +0000
Manifest this update: Mon 20 Oct 2025 04:02:09 +0000
Manifest next update: Tue 21 Oct 2025 04:02:09 +0000
Files and hashes: 1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: sOtfg0ugP/LVrr31nU3L9ovpvF45gIBKVqoOJ/gff74=)
2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:20:80:e9:eb:c5:0e:20:c2:4f:91:91:39:d4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Oct 20 04:02:09 2025 GMT
Not After : Oct 21 04:02:09 2025 GMT
Subject: CN=741273cfe60ade4c5041634cf3a979b93cad54b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:1d:26:86:fa:29:48:8c:39:13:5f:75:20:
b6:7c:50:c7:87:28:e9:bf:53:06:e6:f0:f3:61:6b:
51:27:4c:17:84:af:22:fa:77:ae:f3:df:3d:c5:fe:
22:0e:87:cc:03:f2:5a:48:c9:02:19:0b:95:b0:52:
95:10:1f:a6:4a:31:62:29:36:bb:54:4e:3d:2b:45:
65:22:bf:50:34:15:b3:bc:cf:f1:76:71:1f:a2:7f:
2a:0a:2a:c2:6d:ff:ad:06:79:b8:e2:8f:27:ef:4b:
2c:92:df:68:23:39:48:84:ac:16:4c:b8:18:69:42:
3e:d5:24:a4:db:fc:97:fe:7f:0a:66:ae:84:3f:5c:
92:d2:99:b2:19:92:30:26:5d:8d:ec:3a:e2:75:11:
31:8c:6c:71:66:9b:1e:3b:2c:85:21:39:96:2e:7a:
af:9c:9b:e7:59:44:84:c7:d2:83:88:cc:39:ac:16:
b4:8b:f3:01:9f:df:19:d4:e4:51:db:d7:57:1b:8e:
6c:01:6d:d7:30:61:c1:73:90:b7:24:ac:18:39:c5:
0e:23:9d:13:93:2a:5a:8d:f3:99:5b:91:d2:8c:4d:
c3:a7:ef:a8:2f:3d:1c:df:5f:2c:d8:4f:c7:ae:cb:
4d:8a:bc:6e:99:ee:bf:c7:77:95:89:3c:01:39:4a:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:12:73:CF:E6:0A:DE:4C:50:41:63:4C:F3:A9:79:B9:3C:AD:54:B1
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1d:64:b2:03:98:26:f5:ea:0a:71:eb:cf:eb:66:35:52:45:
6d:af:d9:2b:33:95:a2:2d:6a:db:b6:66:46:8d:aa:f9:5d:e2:
bb:6b:25:04:27:05:4c:5c:70:70:70:e8:e2:d6:f0:63:62:f4:
6a:a4:87:10:1d:17:ed:3a:e5:81:2d:f6:a8:c1:c4:41:d6:cd:
2d:4f:ec:d5:72:46:d4:15:d7:88:fa:cf:df:01:0b:bf:da:70:
40:0d:f5:cf:c2:41:91:f6:1a:d5:b8:d4:17:d0:7c:2e:4a:ff:
fb:49:d6:ad:92:74:31:6b:25:02:23:b4:f7:3b:ae:ec:09:27:
55:5f:fb:f5:33:40:f5:be:ff:60:e2:ab:3d:0b:b5:02:f0:86:
84:a9:16:d7:b1:cb:ec:27:41:ec:7b:58:9b:cc:bc:de:49:93:
25:8b:5b:80:d4:0f:1e:f7:3a:6c:da:e4:da:a2:5f:c6:a6:07:
05:f9:b3:1b:e6:f6:67:3c:aa:9a:56:a7:db:b4:98:47:01:00:
52:b4:6e:58:63:22:c7:2d:43:e8:de:8e:db:32:12:8c:c8:92:
7b:13:6a:a1:87:4c:0f:61:2c:53:d2:a9:e2:92:78:ed:8e:7a:
ae:7c:1a:4e:b0:63:18:c1:78:d6:8c:53:48:a6:50:1d:87:81:
46:74:91:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:33:44 2025 by rpki-client