
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier: GKYk527M+4CdQpU7oHjrKu+Ffy3CDeD9bwDbRBA2YPI=
Subject key identifier: 8C:CA:E2:9A:56:0C:33:A9:BC:64:43:9B:87:B5:31:77:5A:B7:26:35
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial: 0199FB7CE2572E7258E108F997418CB77026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number: 0D30
Signing time: Sun 19 Oct 2025 08:01:29 +0000
Manifest this update: Sun 19 Oct 2025 08:01:29 +0000
Manifest next update: Mon 20 Oct 2025 08:01:29 +0000
Files and hashes: 1: 1LXoG8lIrfkrrE3BvhbCNRs7Cyg.roa (hash: qehfEzu5pVPdqrtkKPnNAj43cdjEk3H8LlXqlcvxhLI=)
2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: 5Fa0NN6h5IIG2rz93LnUgXRP7djTrZM6l8cu9/DACpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e2:57:2e:72:58:e1:08:f9:97:41:8c:b7:70:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Validity
Not Before: Oct 19 08:01:29 2025 GMT
Not After : Oct 20 08:01:29 2025 GMT
Subject: CN=8ccae29a560c33a9bc64439b87b531775ab72635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:2e:de:66:36:2d:58:2a:ad:22:49:36:d3:
19:cd:0b:3f:0b:46:54:73:14:8a:6c:51:af:8f:a2:
f3:7a:0e:4f:12:9a:15:2f:05:0c:09:95:b2:f7:d1:
9d:14:8b:18:df:dd:77:d6:d9:79:8c:f9:fd:3d:26:
e4:9c:5a:5c:b1:3d:6c:05:5f:46:79:1f:60:b2:48:
81:0a:87:fe:93:3b:ab:2d:9c:97:bf:db:29:a9:99:
37:18:e9:c7:1e:0e:00:ca:a8:7d:d2:43:33:61:2b:
c5:4c:70:41:24:79:ff:59:72:4e:8f:15:cf:f9:0a:
b7:6a:e0:6a:60:2e:90:36:52:d8:e1:f8:9e:e5:eb:
1f:56:05:4b:a4:35:73:16:30:de:3d:13:05:1e:2b:
a9:14:93:e9:38:c8:18:fb:8a:ca:a4:70:3d:20:04:
34:32:4c:66:d5:4d:cb:f3:d4:fa:4c:e7:e8:93:61:
87:d0:4e:43:2a:78:b3:e6:03:1e:88:24:ae:1d:86:
38:97:17:8d:43:e2:a4:f3:f5:ee:51:8f:a5:3a:87:
18:bc:1a:a7:d7:27:08:2b:d4:1d:2a:c6:8d:ee:74:
87:7d:b0:ef:e0:23:26:36:06:a5:8a:f9:93:a0:65:
6c:cf:33:73:85:ed:ab:7f:50:4a:13:a1:ea:f0:61:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CA:E2:9A:56:0C:33:A9:BC:64:43:9B:87:B5:31:77:5A:B7:26:35
X509v3 Authority Key Identifier:
keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b0:b8:23:c2:47:24:3d:df:91:98:ce:c5:1d:8c:7a:d5:ee:
4e:ee:a4:de:b8:26:c4:e7:06:d1:05:8c:42:5c:bb:7f:37:9d:
83:5a:73:ff:81:77:49:7c:24:9c:31:e9:3d:de:47:cf:69:39:
2c:5f:d1:39:06:bb:e3:35:d3:28:b6:3a:7f:a3:ae:96:47:17:
f7:b1:a2:03:87:c5:58:42:37:5d:f5:f1:3e:e3:6e:b6:6d:87:
7c:35:c5:ca:5c:bc:f6:2f:64:b0:59:d5:37:06:f3:ae:cf:c7:
e0:26:89:35:2b:da:bd:12:fb:aa:c1:5a:dd:4f:80:f0:57:e0:
02:08:db:ef:f6:b1:b3:1c:4b:c2:1d:12:2d:a2:ed:26:f5:62:
ab:91:df:8f:1f:c4:5e:9e:ce:bb:df:c7:87:34:6f:95:8b:6d:
48:80:4d:8a:92:22:93:ef:48:a6:4c:c5:10:81:2d:06:e5:25:
51:ae:0f:1f:9e:59:86:f3:02:da:e9:e2:eb:31:3e:48:a4:cf:
8f:c8:e2:e4:78:7c:1d:53:24:aa:77:89:38:31:56:5e:f2:4e:
6f:c3:b4:c4:32:3f:aa:f3:30:c7:2a:09:5c:f2:b2:e5:7d:89:
5c:db:48:b7:98:ea:24:c7:9a:33:15:c6:0e:dc:46:cd:73:1c:
37:9a:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:45 2025 by rpki-client