Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json)
Hash identifier: 5Ze7wh7xnGtm8OQj2fp6H29lMNp4CkIc81xyOpXV/IA=
Subject key identifier: 48:17:19:2F:7B:80:D1:DA:0A:E3:DF:C3:FE:15:C0:9F:BC:F4:78:6E
Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Certificate serial: 0199FDD9604FFD35896768A5D7D4731BB4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
Manifest number: 0FEA
Signing time: Sun 19 Oct 2025 19:01:45 +0000
Manifest this update: Sun 19 Oct 2025 19:01:45 +0000
Manifest next update: Mon 20 Oct 2025 19:01:45 +0000
Files and hashes: 1: H8Jh3PByPsoaxftF1Y0qeL6qk8M.roa (hash: OGYujsfjZeJUcMVXbqDzP8dUuHxSfUAIJn1ll6T06LE=)
2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: He9SyDl6KpQi2I3zASfV3fvYiIsbp7W8SYaz6tQmWAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:60:4f:fd:35:89:67:68:a5:d7:d4:73:1b:b4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Validity
Not Before: Oct 19 19:01:45 2025 GMT
Not After : Oct 20 19:01:45 2025 GMT
Subject: CN=4817192f7b80d1da0ae3dfc3fe15c09fbcf4786e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:75:91:27:fa:a6:27:e2:29:ad:0a:01:0e:
61:7d:ed:3d:b3:4c:d7:a6:4f:ac:76:a1:6e:0c:49:
ba:45:8d:9c:fa:ce:81:c7:31:37:21:03:39:0c:d6:
61:c5:93:c5:76:92:06:27:f3:d0:bd:81:4e:64:7c:
74:23:49:e2:4e:c9:05:6c:d7:dc:7b:79:f3:3a:5a:
d1:58:c7:63:69:57:0d:e1:7f:12:1e:c3:6a:f7:c6:
9c:02:47:04:23:11:96:7d:67:c0:08:af:ef:c5:ed:
8e:d3:a0:74:d8:21:29:3e:6a:ad:13:9c:d7:67:53:
78:3d:01:b9:6d:82:cf:81:4f:53:44:dc:c1:94:cf:
d0:d3:ff:23:18:74:77:b4:f5:08:09:0e:4f:ff:67:
b9:96:3e:fd:c1:b6:4d:ca:b0:f6:69:2d:66:fa:02:
90:3c:31:de:45:50:c4:55:fd:57:ff:a6:14:fc:c2:
76:1e:74:ef:e6:a7:a8:03:ef:65:b0:34:a7:b2:98:
83:45:69:49:f7:ea:be:7b:30:20:b0:a3:89:9d:2c:
5f:a4:e3:62:47:90:83:7b:db:98:84:a2:7e:64:23:
8e:4e:6d:68:bb:5a:5c:21:1c:fb:5a:01:05:6c:3e:
22:56:1f:a7:9e:50:08:9b:2b:43:12:90:dd:7f:9f:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:17:19:2F:7B:80:D1:DA:0A:E3:DF:C3:FE:15:C0:9F:BC:F4:78:6E
X509v3 Authority Key Identifier:
keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:61:36:5b:d7:68:91:b7:7e:79:de:de:85:9c:63:c2:c6:
93:96:46:87:20:4f:3e:ab:75:48:61:97:3c:66:8f:e6:3b:95:
93:37:ce:0a:43:c2:e1:ce:76:70:3e:6e:06:a4:01:c6:06:a5:
d6:2b:0b:76:61:a4:9d:00:c7:6a:79:23:d8:df:3f:5c:56:25:
af:76:7d:ea:1c:63:d8:b4:9b:3c:3a:55:a9:39:21:ee:f7:40:
ef:ae:a9:32:28:1d:10:aa:65:e1:01:fe:ca:bb:ce:b3:51:cd:
00:0f:2c:f0:91:fa:e6:a7:15:90:22:ec:82:ea:8e:50:fc:c1:
bb:72:4f:00:50:1a:b5:0a:a7:5c:4c:62:3e:64:63:cb:67:49:
a9:fa:cf:9c:62:24:06:98:32:bf:bc:09:c8:8f:8d:04:9c:1a:
d6:8d:5c:f8:8d:3b:61:cb:e6:a8:a2:33:47:76:8e:8d:bf:b4:
b8:b2:26:cd:5a:01:f3:13:32:1c:32:87:34:03:bc:da:2f:b7:
e4:46:a8:8d:7b:8e:e7:16:81:ac:34:7e:52:49:f8:ad:d2:39:
a3:c5:4b:5f:82:14:93:7c:dc:8e:57:63:39:49:f4:7f:2e:d1:
6e:26:55:bc:c4:a3:93:e7:2b:70:9e:83:03:92:5c:86:de:23:
40:85:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:18 2025 by rpki-client