Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: dKwWB+5oe9TY3vQmtsj87sINASRz8tQQM3TaXSoLfaE=
Subject key identifier: 60:9E:9A:85:11:A8:DA:70:7A:6F:CD:2A:E6:44:63:94:1E:3B:26:7A
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 0199FAD8348F6C80DEE796CCDF9AF7D17098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 044C
Signing time: Sun 19 Oct 2025 05:01:37 +0000
Manifest this update: Sun 19 Oct 2025 05:01:37 +0000
Manifest next update: Mon 20 Oct 2025 05:01:37 +0000
Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: 4xTbMOQCnh1QcG3YNS42UTPA19SfUBcosVeWsGp6Nak=)
2: tHHfiSksDZsfZV-Vj9_kGC4h-Ro.roa (hash: EIcBQ1/xG4TmRqAx5pqcLS0viz8fwAhZIDtmSkzjKwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:34:8f:6c:80:de:e7:96:cc:df:9a:f7:d1:70:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Oct 19 05:01:37 2025 GMT
Not After : Oct 20 05:01:37 2025 GMT
Subject: CN=609e9a8511a8da707a6fcd2ae64463941e3b267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:35:61:13:67:b4:76:32:e6:52:db:e8:16:
3e:11:6a:e4:8e:aa:76:8f:db:d1:3f:5c:25:9c:f5:
fb:b5:b2:88:8a:6a:a3:68:4f:74:3b:d8:55:22:d2:
81:26:57:97:6d:e0:36:10:6f:71:ac:bc:c6:79:25:
af:51:6e:c6:e6:92:3c:c2:7c:e5:1c:75:a9:4b:be:
1a:ea:3d:c1:a7:ba:9c:b9:06:0e:fb:1f:2a:c7:1d:
b8:55:36:94:b5:fd:59:f1:6c:8f:9d:17:d2:88:2a:
16:7e:39:4c:8f:b5:f6:dd:31:9b:62:00:d1:e1:6b:
87:31:fe:01:e5:8e:5e:66:77:6b:f4:b6:08:85:0e:
26:99:73:a0:f3:bc:5f:ce:b3:a4:19:53:8e:8d:37:
d4:64:2a:25:b6:7b:fb:33:fb:ec:1b:90:ec:23:df:
dc:d5:3d:81:cd:f1:c8:2c:4e:41:6b:f9:99:c8:a0:
33:80:8c:c2:cf:ea:99:b0:09:08:c6:7c:2d:31:73:
6b:5d:db:aa:13:e5:2c:67:75:26:ca:01:60:97:e8:
16:25:e7:b2:a4:9b:c9:37:61:41:a7:c5:23:f0:22:
0c:49:70:a2:47:be:dc:2d:37:f2:d4:d4:4f:a9:7e:
23:60:8e:63:c7:df:ff:6e:38:fe:b3:27:2a:2b:9e:
1b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:9A:85:11:A8:DA:70:7A:6F:CD:2A:E6:44:63:94:1E:3B:26:7A
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6d:03:6a:59:10:50:cb:fc:be:8f:b3:0f:f0:b4:7c:80:16:
70:4e:84:04:00:e8:f0:4b:18:2e:5f:b1:87:28:34:5a:f9:51:
a9:02:e8:90:17:bf:0a:17:dd:b5:90:00:23:05:6a:db:d7:55:
6e:27:9f:db:e2:3b:84:81:60:10:81:ad:aa:2b:65:94:7e:da:
12:e8:47:4f:5a:ae:d1:5b:a8:34:2d:bf:9b:24:ac:04:67:61:
dc:26:4d:71:18:44:33:2e:e9:15:2e:67:5f:51:3f:c3:c4:28:
03:c3:58:3b:16:9e:15:08:50:9f:14:e6:b8:16:32:d6:cb:cc:
f9:72:ae:28:01:a4:24:b3:16:50:79:d8:03:74:e3:01:92:96:
49:7e:ac:88:a0:bd:9c:3e:bf:c9:be:30:bb:ff:85:2e:31:8c:
ca:38:f2:53:7f:0b:02:b0:32:de:bf:4e:ed:33:7a:c3:ca:78:
cb:a7:01:b3:c6:da:49:aa:5d:96:98:df:f7:ab:71:90:ca:fa:
12:29:06:18:01:7e:03:f7:89:26:48:42:c6:f6:15:f5:d2:36:
59:e5:82:0f:f5:0b:04:35:be:27:dd:d0:b9:29:6f:6a:d4:b7:
e7:f4:80:dc:a6:f9:12:e5:10:84:75:ba:67:27:65:25:93:85:
89:11:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:06 2025 by rpki-client