Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: UW+zsLcs1u9DRl20tyY47Z1RyReFyd2DbvB3LNH2zPM=
Subject key identifier: EE:2E:B4:D1:50:CE:1D:D8:8C:BA:CD:9B:13:E4:E7:78:73:D4:42:05
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 0199FB45CF071CD54FEF03B5DB23D7E4DA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0BC3
Signing time: Sun 19 Oct 2025 07:01:20 +0000
Manifest this update: Sun 19 Oct 2025 07:01:20 +0000
Manifest next update: Mon 20 Oct 2025 07:01:20 +0000
Files and hashes: 1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: s+pCSqSbz7AG2lfgXpWNhvzhlLMQwipkMI9SNFPvx7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:cf:07:1c:d5:4f:ef:03:b5:db:23:d7:e4:da:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Oct 19 07:01:20 2025 GMT
Not After : Oct 20 07:01:20 2025 GMT
Subject: CN=ee2eb4d150ce1dd88cbacd9b13e4e77873d44205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:02:3a:a0:86:4e:97:56:4e:2f:21:be:6a:
97:d1:6e:70:13:49:54:b2:78:61:0c:31:d1:b0:80:
55:a4:57:77:3b:92:7f:0a:eb:d2:cd:e7:d4:e1:8f:
cb:78:a4:96:ca:d5:26:26:29:7a:58:31:d5:23:22:
ff:83:1f:1d:9b:14:1c:43:2a:17:e8:04:e9:3c:e7:
d8:18:13:9d:35:10:84:e8:ba:2d:bc:26:26:ac:db:
b5:56:44:ce:3e:9d:b2:27:a4:cf:27:5a:7e:d2:3b:
77:51:8d:39:33:a9:1f:4c:c6:eb:99:6b:a1:69:76:
d1:de:f8:a3:f8:8d:35:15:d3:c4:d9:ef:56:15:ab:
6d:8e:18:b5:64:58:43:ce:70:be:32:35:79:f4:90:
94:64:0a:e6:28:b9:42:a0:4a:b4:47:23:55:14:77:
db:11:1d:db:18:c2:0e:e9:ff:b6:9d:9e:18:f1:82:
73:aa:ba:75:a2:51:49:b8:df:73:aa:94:c2:eb:d7:
ed:6b:37:8c:e0:38:97:43:81:25:ce:e9:62:62:13:
f5:78:7f:68:c4:33:ed:5c:db:2b:cb:d6:27:d5:e3:
76:ae:8e:42:72:30:44:f3:b6:87:1e:8f:ee:44:6e:
7c:12:e9:85:0c:73:66:31:c9:20:ec:a2:fd:1b:ac:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2E:B4:D1:50:CE:1D:D8:8C:BA:CD:9B:13:E4:E7:78:73:D4:42:05
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ac:cd:49:e2:4f:47:5a:2b:6a:c8:aa:33:9d:39:1a:ca:b9:
3f:91:fa:49:2f:49:e8:97:09:2b:26:47:cc:aa:80:8f:76:56:
d4:78:5c:15:c7:0a:e4:f5:9b:3f:c0:ba:f0:6a:ff:a8:f6:75:
d7:a3:08:38:33:fa:86:92:f2:08:f4:5a:5a:d6:85:4a:e6:96:
43:5f:d0:16:e5:2a:22:4c:3b:70:c9:fa:9c:fb:d6:c6:8e:8b:
68:eb:0e:81:43:89:59:f3:9b:e4:99:82:f7:4b:4b:e3:fd:98:
34:8d:78:82:8e:b2:bf:7e:88:91:5a:dc:2f:61:21:75:b9:80:
52:86:4b:f9:62:f3:c7:ef:35:29:3a:ef:a9:a7:eb:36:26:cb:
98:33:ce:42:99:45:a0:67:fb:d7:4a:eb:f8:2a:a1:92:a8:b6:
b5:9c:7b:6a:e5:6d:46:c4:28:f2:d9:52:26:f7:bd:48:d8:a0:
33:63:fd:17:13:52:68:42:d7:7d:a7:9e:9c:ad:6c:9a:9e:78:
17:9c:b7:b9:5b:ce:a6:38:f9:20:a5:85:65:34:63:cb:f0:62:
7b:3e:d4:6f:96:07:40:50:c7:c9:4b:cb:01:7a:50:65:14:ee:
4b:a6:5a:fe:ef:42:0f:cc:ed:71:b0:6a:f5:93:a5:6d:ad:b7:
c3:e2:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:49 2025 by rpki-client