Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
File: pW_3HkuOwkscYysvoiSHOcxXIgU.mft (raw, json)
Hash identifier: Mmrcl6En0RlxCEXX9vWJmL0Aqt867TzWYW2GEfAw4yQ=
Subject key identifier: 4F:3F:B4:2A:87:76:7A:F9:D1:51:B1:1F:B0:09:A9:55:87:5E:59:20
Authority key identifier: A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
Certificate issuer: /CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Certificate serial: 0199FAA10B20E78A0C4BB11A070FA8B1B3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 04:01:21 +0000
Manifest this update: Sun 19 Oct 2025 04:01:21 +0000
Manifest next update: Mon 20 Oct 2025 04:01:21 +0000
Files and hashes: 1: OFSTTzksg55XbuxYGxE0hWRveAU.roa (hash: lXdcJExrwcp2ElmTmNwfYLaK9X6rCxY+t+cA+ok9FKo=)
2: pW_3HkuOwkscYysvoiSHOcxXIgU.crl (hash: OEYyGYLDl5wn2JA2IiAcWJc17s6nbh34tbhBzGgIdjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:0b:20:e7:8a:0c:4b:b1:1a:07:0f:a8:b1:b3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Validity
Not Before: Oct 19 04:01:21 2025 GMT
Not After : Oct 20 04:01:21 2025 GMT
Subject: CN=4f3fb42a87767af9d151b11fb009a955875e5920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:03:89:d4:fe:77:ed:a8:88:37:af:81:90:
af:ad:86:d8:4b:d3:f4:d7:15:45:bc:28:fe:b7:b2:
b0:e3:9f:cb:2f:f2:ae:e6:b9:ab:45:52:6a:03:fc:
7c:f6:a8:d2:8d:9a:b5:5f:fc:70:5d:00:5f:76:0e:
2f:32:a1:46:f4:b9:e4:45:66:ee:42:8b:bd:df:4e:
b4:d3:2a:90:04:84:25:4a:34:5e:bb:77:16:7b:72:
78:cd:52:0f:24:a9:79:be:12:39:4b:b1:1e:1e:dc:
5a:c7:0a:86:49:b1:4b:c8:e1:01:8b:67:af:f0:19:
86:d3:8a:99:45:e0:38:6c:cc:7c:21:cd:f5:46:62:
d2:eb:9f:08:42:2b:07:b6:e0:11:4e:8a:1c:3f:a5:
b4:84:55:48:2a:43:8e:fd:42:6b:a8:a1:dc:5c:6d:
63:ba:c8:f9:9a:b6:dd:c5:7d:04:bd:dd:70:4e:46:
57:e0:63:10:66:a2:97:4d:19:52:34:9f:6e:e1:0a:
2b:4f:99:50:f6:72:c0:32:1f:49:1f:92:23:85:bd:
6f:a2:c0:ca:73:7e:0c:e7:77:24:aa:49:d3:aa:1d:
40:8d:3b:c3:73:0d:dd:80:98:7e:d8:81:cc:a1:f1:
a5:80:44:89:e3:a7:af:23:2a:c5:44:46:4d:c5:2e:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:B4:2A:87:76:7A:F9:D1:51:B1:1F:B0:09:A9:55:87:5E:59:20
X509v3 Authority Key Identifier:
keyid:A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:82:61:fb:07:30:6e:d5:d9:1d:c1:cc:63:1e:18:39:55:85:
b4:f9:43:7f:f4:bc:fa:b1:62:a8:bb:a8:b9:53:9b:dd:26:5f:
1c:2e:c9:e6:60:1b:c9:34:2c:43:d4:09:70:62:b7:c1:f9:7b:
77:f9:3d:82:76:4c:a4:57:ff:c2:fb:d7:e0:3b:3b:9c:4f:ca:
7b:fe:46:2c:d4:bc:1f:35:7d:b6:b3:8d:4e:bc:22:04:74:0f:
b5:9b:65:c8:6e:a0:5a:f3:37:f0:42:42:96:cc:c7:ca:70:db:
d9:27:15:d4:1b:11:53:69:88:6a:3c:f6:58:76:fc:04:4e:03:
fd:b2:1c:35:ac:5c:7b:6d:2b:44:30:10:9c:4c:62:79:9b:ec:
39:10:43:54:75:19:13:4a:44:1f:9a:2b:37:a3:60:13:77:da:
0c:3d:d6:59:93:53:52:6f:58:b7:7b:a2:63:11:3f:96:ec:5c:
a2:b0:b8:b3:f6:8d:33:54:de:60:31:5f:bf:c9:d6:d0:9d:4d:
e5:6f:9c:10:4c:b6:05:25:e6:64:d4:6e:6c:b3:e5:9d:cf:2c:
27:f1:ca:6b:b2:3e:c2:a8:72:c7:0d:1e:70:bd:24:5e:37:83:
cd:94:a0:8b:f3:de:b1:ab:c3:4c:05:49:48:a5:3e:e2:79:72:
87:d0:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:26 2025 by rpki-client