Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: WE7KiBaQlACRW4C+SUoL22UEBaZFqPh9eHDQflJhYZ0=
Subject key identifier: 5C:61:B1:5A:A4:52:9A:04:2E:16:CD:A9:83:A7:62:B9:55:B0:5E:45
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 0199FC8F25FBFEE5535E1DAE7AB1E07BBE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 0C7C
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: 6y2PxXoNf17k752-h-Vh6181ybg.roa (hash: /D4LWQIJRMeiTsLLzqJFb6QygqeaBkt1FMx26cAAcmk=)
2: Uxq2zaQ3C0F2KaVo_-rxCUMMpzU.roa (hash: VbEHRBQ6CnI3V57/ypd9YP2tAsM8cgW+F1+a7XG3s5Q=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: Zi9e6ExeZO76kp5jsrVhpFEtRKilfec3FnRz8+Hcw7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:25:fb:fe:e5:53:5e:1d:ae:7a:b1:e0:7b:be:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=5c61b15aa4529a042e16cda983a762b955b05e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:88:62:d6:d1:d2:b6:b1:60:06:25:6b:3b:
0f:47:b8:ea:96:33:3a:b8:45:c3:64:1b:98:67:b8:
84:b6:27:c6:ee:35:e0:f4:34:32:4a:29:a0:4d:84:
fa:43:b0:07:12:18:50:d5:9d:97:be:bb:e2:c6:bf:
75:57:cc:c5:a8:ba:50:f5:21:26:62:8b:b3:39:84:
96:55:81:52:0c:64:9d:9b:16:02:c5:d2:93:d8:55:
6f:d3:32:e4:ea:c7:53:58:44:16:19:9e:54:22:26:
6f:c5:72:4e:9e:c6:24:00:a6:f4:3d:bd:57:49:11:
fc:6c:04:fb:84:c2:5f:e6:c0:e5:3f:96:9f:7e:cf:
a1:0a:d7:97:3d:1f:a4:e8:48:b7:2f:66:b3:f7:14:
8e:9a:17:ed:b2:a4:f2:7d:1e:37:bf:17:c0:23:aa:
dd:a6:58:c1:e0:c8:8e:3a:82:80:ce:e9:61:20:f4:
fc:b5:2d:46:46:c8:58:f1:dc:d9:48:e2:4f:0b:89:
95:a3:76:3c:8a:da:8a:ab:51:b7:83:34:e8:ea:35:
ab:3a:1e:e9:88:a0:da:9f:a7:a6:9b:ff:c9:45:0e:
a8:e1:50:a5:48:25:fd:e1:6c:0d:f9:3b:0c:1b:d0:
ab:97:3c:d2:46:bb:69:b4:94:9b:e0:a2:10:e8:a9:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:61:B1:5A:A4:52:9A:04:2E:16:CD:A9:83:A7:62:B9:55:B0:5E:45
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:08:12:5a:23:19:6b:c4:0e:49:6a:c5:6d:44:1c:f1:a5:ab:
65:a4:ff:be:ad:c0:ab:e5:94:0b:c3:09:0c:1a:bb:1d:e3:a9:
65:12:55:71:fe:ef:38:03:5f:3b:2e:7a:6a:ea:ca:7a:bd:6b:
83:51:83:ac:e5:52:b1:44:05:cd:14:3b:ed:89:c6:df:e2:07:
e7:2c:03:09:4a:33:78:96:c1:fb:f7:1e:a9:73:02:5b:b5:0a:
81:c0:0c:70:2a:46:17:aa:2d:f9:02:29:29:c8:71:24:52:4e:
44:da:45:fc:47:ab:b8:1d:a3:f5:ba:24:71:c5:f6:cc:da:d9:
e0:b5:91:53:4a:3c:3e:0e:90:4b:78:30:0d:e4:72:f2:10:39:
e9:12:60:0c:64:8f:76:c4:73:9f:09:20:24:a7:d1:e4:ec:12:
6c:8d:c2:ff:68:d6:47:2e:52:53:dc:8c:8d:63:ba:f6:f2:81:
26:59:b0:f4:d2:3c:43:d7:03:b8:02:0e:1d:b8:8a:fb:00:bc:
c9:38:d0:77:c1:93:83:0c:4b:1f:c5:f9:cc:5d:12:27:d6:3a:
5a:d3:96:4f:f3:84:3e:4d:fe:fd:4b:0a:e3:0b:87:51:d0:9c:
7b:a7:2b:3d:9a:27:20:dc:03:53:37:19:64:6c:0e:21:3f:0d:
5b:b7:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:21 2025 by rpki-client