Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File: puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier: xKdkTneHXc5rignbRmPsfCNn1vCWfds+P9dGHaSPnGQ=
Subject key identifier: 7C:54:8A:F6:C9:35:4D:0B:AB:FB:F5:65:A3:3B:10:AD:25:75:9E:E8
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer: /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial: 0199FDD9A7C69D1C190B355BAED60936E51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number: 163D
Signing time: Sun 19 Oct 2025 19:02:03 +0000
Manifest this update: Sun 19 Oct 2025 19:02:03 +0000
Manifest next update: Mon 20 Oct 2025 19:02:03 +0000
Files and hashes: 1: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: YuyMj7aor/rRP197eBKEZa1QtC6vhu4RZgJ3vOsNFaM=)
2: wEf0XFewVLDEH498_3ycA_iLwpA.roa (hash: jj8EG5dFJudLiKXib9hP+9XTMUS6HXp2GHHzc8cEo24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a7:c6:9d:1c:19:0b:35:5b:ae:d6:09:36:e5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Validity
Not Before: Oct 19 19:02:03 2025 GMT
Not After : Oct 20 19:02:03 2025 GMT
Subject: CN=7c548af6c9354d0babfbf565a33b10ad25759ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c9:d0:bb:d8:d7:f0:59:78:6d:92:95:d2:ad:
af:36:2d:c2:56:7c:76:e2:26:9b:b7:f5:52:c0:5a:
94:c4:e5:15:f1:6b:f6:0e:92:3b:d5:b6:60:e0:32:
a9:1a:dc:fc:b9:96:2c:c7:de:e6:19:52:46:45:9a:
31:3b:b5:65:7c:60:0f:6f:02:4b:cf:3c:d5:7e:2c:
54:72:54:44:a1:fd:8d:ac:e7:da:61:12:e2:3b:71:
5a:f4:9a:1b:d6:40:7a:22:49:d5:fa:3b:cd:9f:b1:
36:1d:5c:30:34:a8:b4:2f:6f:6c:74:67:65:b8:03:
dc:c8:71:dd:bd:03:f4:a8:de:b1:30:d7:9e:8b:27:
5b:fc:0b:0e:a5:6d:60:0c:f7:f0:20:99:71:ce:c6:
0b:f5:c0:e5:64:88:05:e6:52:9e:5e:17:4a:37:9a:
72:6e:b8:b2:83:8c:50:17:c1:94:ab:9a:90:33:30:
70:05:66:65:c0:1f:49:e0:d9:33:70:73:dd:ca:d6:
b9:8f:cb:3c:7b:2c:6a:67:f1:30:fd:91:21:48:91:
d0:21:f9:e6:e3:04:75:f5:bb:c5:36:f0:23:ce:f1:
b1:fd:09:f1:2c:79:40:2c:bb:16:7d:ee:d6:12:6e:
b5:d8:a6:4e:95:59:e0:2e:a0:5d:8f:79:72:9d:0a:
89:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:54:8A:F6:C9:35:4D:0B:AB:FB:F5:65:A3:3B:10:AD:25:75:9E:E8
X509v3 Authority Key Identifier:
keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ea:17:cb:e5:3b:3f:20:b4:36:c5:9e:80:9c:cf:e7:a1:18:
84:c3:06:9f:da:31:21:a2:70:ed:93:0c:70:e9:78:b0:5b:91:
b2:40:df:20:44:c9:60:67:56:f5:95:b6:42:df:da:53:b3:98:
8c:8c:ee:8f:5e:c1:80:6a:f4:31:77:2c:e7:31:7e:dc:27:89:
55:66:20:f4:4f:43:f2:ab:b5:0b:3e:e1:d7:be:9a:e0:4a:51:
7f:26:20:61:81:f3:f3:ea:95:a5:e9:1a:f1:35:4b:12:27:c3:
08:59:b4:21:d6:db:0c:8f:50:6f:28:68:42:8a:5f:2f:51:21:
74:10:37:91:29:1f:e2:fe:89:0c:64:71:20:3a:59:84:2b:67:
07:72:d4:08:9f:12:80:b6:40:01:e4:28:f7:e1:5a:2b:5e:0f:
cc:22:c4:df:12:93:0f:07:99:38:8a:6a:80:20:c4:3b:85:ed:
43:95:8f:12:2a:03:75:96:c5:a5:19:8f:78:61:08:10:6b:9b:
1b:50:7c:96:fa:bb:37:42:91:30:25:78:1c:3d:c2:10:8e:46:
84:05:58:90:b0:75:a4:7d:75:9d:55:db:2f:dc:ed:ea:e1:3e:
2f:4e:93:6f:ad:77:22:63:f2:9e:f3:8a:04:07:37:ab:cb:3c:
9f:0a:3d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:50:24 2025 by rpki-client