
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: s+MWXTRP1l2JrGrVT7Py+55D8W3iKdMMv2KvdCDAL10=
Subject key identifier: 15:73:BE:AC:8F:B9:08:48:76:28:57:61:15:52:5D:08:C7:85:FF:BA
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 0199FC58766A6ACBF428421E8283756F6C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (hash: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: DNMIPlcW96fRGN2pDdZZIvxFlYf1tJpR4ssW3CrOd6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:76:6a:6a:cb:f4:28:42:1e:82:83:75:6f:6c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=1573beac8fb908487628576115525d08c785ffba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:75:b4:ea:1c:5a:42:cc:85:6f:aa:2e:9e:
a4:aa:37:fa:46:97:8f:70:36:8e:3c:5b:b9:9f:a8:
cc:65:60:90:11:f5:05:ba:53:94:40:0d:f1:c9:de:
7a:af:87:92:eb:f2:54:bf:db:6a:ee:e4:1e:d7:d5:
9b:8b:e3:c2:b2:75:d9:dc:6e:bc:9c:e0:ad:66:15:
99:ec:0b:86:d5:1c:02:b5:16:bf:46:a2:52:95:f7:
56:48:66:4d:8b:69:64:13:ac:e2:fb:f1:22:78:cf:
ed:19:98:da:e7:93:33:36:2d:54:4d:e0:00:25:b6:
a2:35:6b:e0:62:f5:61:4b:3c:08:1c:3a:69:d5:ed:
59:89:6b:a4:dd:bb:6a:72:81:ac:d3:76:bc:86:dd:
09:d1:e0:d0:e8:65:59:8f:f5:2f:ab:c2:d1:ed:f6:
dc:1e:0d:ce:c7:5c:9b:a6:a8:26:9a:ba:e6:ec:e7:
bd:ed:de:5c:68:81:23:8d:5f:85:a7:98:6d:6e:7b:
34:64:e1:aa:1a:fd:b6:6f:94:40:04:94:06:e0:02:
fa:8b:0e:59:18:90:d5:dc:50:4f:5d:0f:6e:55:ce:
70:68:99:9d:8e:97:6f:56:b6:4b:65:2e:4b:ec:a8:
5d:44:25:2d:1c:5f:1e:cd:ab:5d:3a:f0:83:af:13:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:73:BE:AC:8F:B9:08:48:76:28:57:61:15:52:5D:08:C7:85:FF:BA
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ec:c7:ea:a5:29:8d:ad:77:a5:eb:e9:c4:8e:5f:69:8f:e2:
68:1b:b2:d4:a9:b8:9d:59:d9:03:36:6d:fd:66:00:e0:f6:62:
ef:5b:98:8d:8b:2a:d6:75:f1:d4:7e:d2:06:fa:86:0e:7f:21:
5e:fe:ce:7c:75:f6:b1:ea:72:4d:17:aa:a9:51:48:3e:62:b6:
fc:1b:ed:8d:fc:68:29:3e:1a:6b:97:5f:45:35:9b:a3:bf:56:
b3:5e:52:fb:e2:ba:13:db:73:79:d4:de:b1:67:4d:00:16:4a:
0b:80:15:bd:50:24:58:c8:96:de:1b:e9:49:b6:9e:fa:6e:08:
d4:5c:57:c5:71:64:f3:93:a1:24:cf:0a:14:77:c0:7f:25:64:
cd:28:81:e2:99:8a:b8:ee:33:49:0a:c0:e6:c9:59:7a:5f:63:
45:1e:e0:54:07:43:01:5d:a3:6b:af:53:08:86:09:b4:6a:7c:
f3:68:2d:79:14:e2:57:ca:0b:10:8f:d1:75:95:9d:49:38:f2:
7e:21:80:3c:db:4b:dc:3a:50:fb:fb:26:c2:a1:16:61:3e:c7:
84:af:08:2a:d1:57:e2:29:d9:92:65:e4:8c:3c:82:25:49:6c:
a9:11:4a:9e:38:f6:01:e7:67:df:ce:b8:4c:08:e5:d4:d3:23:
c0:7f:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:16 2025 by rpki-client