Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: 5STSWp3bw4pv9L/wFT6yP2v3ZiaVvkRNnR+4Bx9FNeA=
Subject key identifier: 12:A6:FF:B6:85:E1:A8:B4:29:E1:FF:7A:D9:C9:22:D3:FD:61:C8:9C
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 0199FDD97B05798C0F7E7F45397A87DA8D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 19:01:52 +0000
Manifest this update: Sun 19 Oct 2025 19:01:52 +0000
Manifest next update: Mon 20 Oct 2025 19:01:52 +0000
Files and hashes: 1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: WwBSHhcTG3yDjNAexpQ5sDlKQ4S0c6ytWWZtZVSZves=)
3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:7b:05:79:8c:0f:7e:7f:45:39:7a:87:da:8d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Oct 19 19:01:52 2025 GMT
Not After : Oct 20 19:01:52 2025 GMT
Subject: CN=12a6ffb685e1a8b429e1ff7ad9c922d3fd61c89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:0d:4f:e8:a9:3e:8c:6b:4a:4f:c2:e7:43:
e8:bf:77:2d:56:c6:a7:4f:ab:13:21:1c:60:5a:12:
0b:ea:a3:7d:da:ca:ce:19:cc:2f:98:a1:04:0d:28:
82:dd:19:78:de:dc:d5:d4:2b:1b:29:66:e7:eb:a4:
87:20:d8:29:f1:1d:09:8e:e8:61:ac:9d:d9:5f:ce:
bc:87:a4:87:0f:50:40:30:26:77:59:a5:67:00:db:
8e:b9:9d:02:8d:b5:61:fb:51:50:fc:6d:11:d1:44:
54:b0:67:71:ee:7c:08:f0:a3:c6:52:cb:f8:99:38:
00:f8:55:dc:8e:b1:f7:72:a0:5a:56:e0:12:a7:04:
39:aa:27:98:a2:45:af:3d:50:b7:cf:84:eb:ad:35:
7f:94:0d:2b:f1:a5:e7:3f:c8:41:ce:28:8a:24:7b:
1c:a3:d4:56:0d:f3:38:ad:40:ea:36:5b:2e:67:7b:
61:6e:8e:33:41:66:b6:f1:61:99:aa:ab:e3:38:b3:
d2:0a:08:95:0f:88:3e:84:56:2e:c0:9c:3f:f9:7c:
3d:2a:84:9f:8d:5f:f8:7c:63:de:66:71:02:52:5e:
48:ec:b5:9f:3b:5a:ac:59:f0:e4:b9:fa:68:1d:c4:
e0:ae:b7:cf:20:d3:20:e8:0b:a2:d8:ab:80:6f:bf:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:FF:B6:85:E1:A8:B4:29:E1:FF:7A:D9:C9:22:D3:FD:61:C8:9C
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b8:bd:4f:63:ac:8d:a9:4f:0d:ff:b7:94:ae:0f:49:c3:d6:
4e:3b:2f:3c:4e:29:68:4a:75:55:39:a0:98:f0:0a:c5:cf:92:
7e:b2:b5:bc:23:e6:94:a5:16:96:41:61:1a:bf:52:13:bd:c8:
15:7e:01:e2:fd:78:be:1c:99:24:06:0d:b6:9c:b3:5c:74:89:
8b:12:f6:bd:0f:1e:61:db:4d:3d:e6:ea:1c:96:35:50:99:f9:
2f:e7:47:f9:07:2c:ee:d5:64:6c:b9:cd:b6:2f:bd:df:0c:39:
20:58:de:e9:71:b9:17:83:73:65:e3:60:b1:53:64:c1:fe:1f:
e2:ca:d7:22:fe:c1:b1:8b:6f:9f:bf:60:69:ec:4f:39:fe:1a:
12:f2:da:ae:5c:b9:c1:ca:52:8a:96:9a:d2:d9:33:90:05:a2:
df:00:1c:b3:68:aa:26:2c:89:88:82:d9:b2:27:6d:3e:1e:6a:
d4:2d:99:e0:a5:8c:51:a0:11:19:04:83:9d:7f:b6:bc:af:8d:
44:bb:14:47:d9:a4:cd:63:3f:d9:36:39:2d:05:81:51:e0:5c:
b3:2e:a4:8e:68:76:cf:05:b5:e5:b0:f1:8c:a2:7f:2a:e9:4e:
b2:a1:69:50:00:e6:92:bc:88:9b:fc:17:19:ec:83:81:fe:db:
da:96:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:09 2025 by rpki-client