Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
File: pNyKTpFqo_eO94BHrCDQ0PipUPk.mft (raw, json)
Hash identifier: wvaPZsXteDq0rlg5EYUwLNzSopjyJQR0EvTjwkZUukE=
Subject key identifier: D5:68:9F:4D:49:4A:13:90:85:C7:71:7F:11:AA:3E:6E:8A:7C:8F:60
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial: 0199FBEBA6437C43D0ACCBA21BE99858277F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
Manifest number: 0D5D
Signing time: Sun 19 Oct 2025 10:02:28 +0000
Manifest this update: Sun 19 Oct 2025 10:02:28 +0000
Manifest next update: Mon 20 Oct 2025 10:02:28 +0000
Files and hashes: 1: UTvK6gSJU03H7EOW3gSzFazwB7M.roa (hash: fFNxwITyp66ny+cQJs93d3VRTa/z6HUTvmCKvoybY9I=)
2: pNyKTpFqo_eO94BHrCDQ0PipUPk.crl (hash: 0pq8OakM6Uwd6gAklsjVtvWQce4fLKtM7C2OmiFmzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a6:43:7c:43:d0:ac:cb:a2:1b:e9:98:58:27:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Validity
Not Before: Oct 19 10:02:28 2025 GMT
Not After : Oct 20 10:02:28 2025 GMT
Subject: CN=d5689f4d494a139085c7717f11aa3e6e8a7c8f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:46:0f:bc:34:4d:f7:34:ff:e5:f9:f3:a7:
ba:9e:54:0f:9b:4b:43:88:c7:06:48:8a:9b:d9:e0:
39:b1:04:4d:eb:f1:dd:4e:72:2c:df:6a:4a:80:31:
2b:2a:cf:23:87:dc:56:39:51:12:b5:21:86:34:7c:
ae:3b:ea:d5:62:83:1f:04:d2:2c:51:d2:bf:2b:02:
e7:0e:15:2a:ec:37:7d:b3:53:a3:07:0a:80:56:85:
40:7b:31:ff:45:0f:d2:c9:01:85:14:88:c0:b7:de:
5e:98:be:05:af:98:9d:b5:e7:f8:81:30:d0:43:f9:
c8:bc:be:1b:cd:2d:3f:78:d8:60:b8:b4:39:48:ea:
cd:54:32:38:23:4e:7f:91:15:95:28:0c:6a:0a:22:
1f:f7:31:8a:b5:cf:f7:32:f0:db:87:71:0f:15:b1:
d4:cb:3e:bc:9f:82:3d:1e:79:dc:50:00:e5:d1:93:
1b:a0:34:1c:3b:f1:f9:1e:19:f7:4a:b2:f1:34:c3:
6c:4c:5f:d2:ae:dd:68:9a:99:93:d1:43:19:11:cb:
b8:4b:f2:f5:a2:bc:da:7a:7b:86:d3:c2:7a:a3:a5:
a6:77:5c:3f:b0:98:07:05:9a:f6:f6:f5:1a:14:85:
d8:f1:b5:2d:20:78:70:55:52:db:90:35:d6:ee:84:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:9F:4D:49:4A:13:90:85:C7:71:7F:11:AA:3E:6E:8A:7C:8F:60
X509v3 Authority Key Identifier:
keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:dc:d5:48:22:bb:e8:91:c5:c5:b0:c4:15:8e:50:32:c2:2f:
7a:54:a1:bd:65:3c:bb:ca:ac:c9:8f:f7:8e:af:c9:ea:55:34:
9d:dc:e7:5a:f1:58:41:2b:7c:d0:6d:ac:3e:4f:14:d9:cf:6c:
57:90:98:bf:15:38:d7:5d:33:d7:1c:4c:58:ff:af:ff:e1:51:
40:e4:eb:df:c7:ae:09:05:67:01:09:32:e0:ff:7b:97:75:71:
dd:f3:1c:9d:ed:38:c6:e3:64:48:ad:fa:d7:f8:20:87:24:89:
e9:54:d6:87:dd:c3:20:67:00:6d:2e:69:a2:1d:c4:bf:f6:26:
b0:96:14:54:46:15:da:12:ac:29:55:6c:4e:a1:ad:bf:9b:c2:
d2:4d:41:67:51:51:aa:87:fd:9e:13:7d:7c:e5:e2:f0:84:66:
e7:6b:77:8e:05:2b:a6:3e:51:48:b6:20:f7:46:a2:88:42:76:
c1:5a:fa:0c:0d:de:77:75:b9:a3:8f:9f:44:ed:2a:d9:25:8c:
fb:60:31:7e:f6:7e:95:7f:8c:23:eb:33:26:67:4e:8a:1b:6c:
28:ec:3b:4f:2a:cc:15:b3:40:fc:f0:03:07:d7:eb:6a:40:5b:
27:b5:bc:4a:9e:2a:da:86:8a:27:68:00:7d:39:b9:93:b4:a5:
7c:ac:89:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:54 2025 by rpki-client