Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier: /9LOFZ2rR4LwBsb9H6KFFVq/BhRH/kmchYSKGiOmj6U=
Subject key identifier: 20:68:9A:B8:E5:38:C5:35:F6:5F:46:A6:4B:0A:DA:7A:51:E9:3A:44
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 0199FBEBB05C70EDB6EE5D5A3C4FF8BBE5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number: 0F5F
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: PUpMBlY3y3LiEyvtN3mwZr7fC6o.roa (hash: 83wzwEaj6Lu4SVxQ13wsJpRArhNJgziukBIbApzP3jM=)
2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: vcIssykVvms5h6YSt7zhDwzL887KjzZUzLVJn9jNnMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b0:5c:70:ed:b6:ee:5d:5a:3c:4f:f8:bb:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=20689ab8e538c535f65f46a64b0ada7a51e93a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:bb:82:c3:d8:46:87:8a:2c:2c:5d:f2:73:
9b:35:4f:96:07:9e:bd:00:7b:74:a6:e8:54:ba:0c:
00:82:c3:98:60:b0:4e:74:86:ac:64:ad:a4:65:79:
ff:b8:69:35:7e:4b:91:a7:0e:6d:48:1f:e8:b5:6b:
83:19:8b:57:2c:84:fe:61:ca:29:02:3a:6b:17:55:
26:b6:87:88:86:6d:69:a1:b9:9d:e8:4c:83:c5:64:
f0:b3:61:d8:b2:bb:4c:d4:55:b8:2b:b3:43:f6:e4:
06:20:1e:87:e2:86:63:09:50:6a:ff:f5:54:5e:7f:
1c:91:30:8e:e2:c1:26:55:cc:bf:ae:22:6e:77:3c:
b9:6d:78:48:2b:c8:56:cf:0c:b6:6b:02:31:62:14:
18:b3:48:63:e9:38:bf:d4:19:63:e9:66:41:ff:fc:
cb:8f:aa:b1:d9:d7:d9:c1:2b:70:7f:72:92:b1:42:
ce:cf:23:73:c8:58:f8:19:ce:1c:b2:c3:43:07:55:
99:05:46:2d:9a:81:95:48:ee:80:1d:c7:39:f3:65:
49:7d:7c:24:e9:ce:db:87:1a:df:17:9e:dc:37:ab:
d3:ce:30:ec:a6:fa:e7:7a:81:5f:a8:ef:6f:c2:0d:
de:cd:71:42:6a:38:eb:cd:e9:e8:30:a2:a6:0e:2f:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:68:9A:B8:E5:38:C5:35:F6:5F:46:A6:4B:0A:DA:7A:51:E9:3A:44
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1c:b8:07:8c:63:e7:92:c2:e9:22:8f:cc:dd:2a:5b:c5:04:
9d:9a:44:9a:28:55:0e:3a:ff:05:e3:c6:16:42:be:05:a2:bb:
e4:11:cf:a8:e3:63:1b:33:57:48:72:2c:24:23:ab:cf:87:7c:
b4:40:10:94:13:93:28:d7:a7:02:fd:64:f6:81:c3:a7:53:24:
90:39:c7:67:f7:74:2e:68:e3:e5:dd:f6:ff:fe:5a:d1:bb:aa:
e5:a6:82:ec:cf:aa:ae:7c:45:73:75:fb:59:fe:d5:cb:2e:0e:
31:c0:f3:9e:ab:dd:03:18:34:46:ad:83:da:ca:c8:b1:84:fa:
40:2c:27:ed:4f:3d:4a:8f:f1:36:62:22:f9:6e:8e:a4:22:e4:
51:a3:ad:e0:9d:f2:8e:0a:c0:54:e7:2f:4a:d9:18:ec:92:f6:
f8:eb:0b:02:45:1e:a7:e0:12:6f:55:9b:35:72:f0:7c:87:c7:
ec:20:88:41:42:96:24:bd:05:8c:94:9f:4a:12:8c:33:e2:14:
a5:65:30:ff:60:ce:78:b5:79:ca:be:2c:5f:a8:4d:3a:af:c8:
65:01:4a:a3:4d:1d:45:50:53:47:50:bd:9c:71:3a:d4:c9:08:
4d:9b:74:f2:d4:10:28:b8:4d:80:56:61:23:52:bf:62:f0:83:
ab:96:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:09 2025 by rpki-client