Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier: ERT68MGqiSw1+vGBcpVsB5xo516tp/kP0JZH1wHXnRA=
Subject key identifier: A5:02:9A:70:44:66:3A:C8:11:37:B6:5E:08:2D:A1:E7:40:F4:DD:30
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial: 019A01EBEEA19FDBC51373904B4CD9C8301F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 14:00:30 +0000
Manifest this update: Mon 20 Oct 2025 14:00:30 +0000
Manifest next update: Tue 21 Oct 2025 14:00:30 +0000
Files and hashes: 1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=)
2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: 55Rtn6qw+49ohCA+vcEWq0e5cAC+0pV5I4znQgMRy4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:ee:a1:9f:db:c5:13:73:90:4b:4c:d9:c8:30:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Validity
Not Before: Oct 20 14:00:30 2025 GMT
Not After : Oct 21 14:00:30 2025 GMT
Subject: CN=a5029a7044663ac81137b65e082da1e740f4dd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:99:a4:bb:2a:4d:e6:58:c1:ed:23:96:49:
94:84:c4:b1:85:85:11:29:d5:28:4c:52:f1:38:68:
0b:ff:95:51:61:1f:fb:1c:57:ea:e2:bf:70:77:6c:
40:2a:af:37:2e:2b:02:16:48:58:07:ff:6b:38:a6:
09:f2:a3:71:1f:d0:a2:a8:77:68:fe:01:af:d1:13:
c4:92:5b:05:49:3c:4f:dc:20:b4:e1:52:ef:0c:c4:
e4:a6:68:1d:2b:a6:54:b2:aa:a5:5e:0a:c3:ac:44:
b0:85:4c:b9:9f:13:6a:cb:bb:19:0f:3a:98:d3:e8:
bd:7e:10:c8:2e:0b:2b:6d:90:c1:a7:be:42:eb:a3:
bd:75:8c:c5:e3:32:e1:23:59:3c:b2:37:94:fb:8f:
c7:c7:51:5f:50:e8:04:6d:c6:5d:8b:e2:a5:e2:4c:
87:1e:2e:e0:fc:b8:3a:39:9f:7d:94:1f:fd:0f:97:
ac:91:b5:81:cc:8e:f9:3f:63:21:e5:37:66:ae:82:
94:c2:a0:6d:1d:f3:f1:da:0f:dd:6b:00:61:c8:62:
d7:99:51:0b:a7:b8:5b:ed:34:76:b0:85:79:26:61:
e8:e5:b1:5c:2a:07:b7:ab:b7:42:e5:2e:54:dc:78:
37:70:2a:c1:2b:c1:2b:5f:e9:d0:c3:0b:e1:dd:be:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:02:9A:70:44:66:3A:C8:11:37:B6:5E:08:2D:A1:E7:40:F4:DD:30
X509v3 Authority Key Identifier:
keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0d:b2:70:7b:ab:a9:ab:82:5a:b0:84:82:31:3b:f4:07:31:
f1:a8:74:3c:73:d1:38:38:66:ba:8d:a6:6c:25:d1:5c:16:9a:
a2:5c:bb:0f:84:ca:29:d1:7a:e8:9e:52:18:97:fc:bd:ae:4f:
d9:b7:20:ee:9b:6f:07:54:aa:7a:af:d4:6d:cf:9e:2b:a4:b4:
a2:ec:28:3b:4f:62:b1:f7:18:63:39:2f:21:a2:33:2a:b4:c7:
a5:46:72:4a:5e:1d:4d:1b:97:bc:be:c6:aa:18:f0:f7:b9:11:
b1:4f:73:53:32:50:5b:8d:09:49:14:8e:3a:69:c3:23:b0:41:
2b:e6:57:a6:6e:a4:d8:d5:78:a2:f8:ce:45:ee:aa:28:15:0c:
fe:4a:a9:6c:23:93:22:b1:d3:f2:0e:19:50:92:ba:96:b6:d8:
3e:22:41:50:56:28:0c:6f:ae:11:20:52:73:29:d2:cf:ff:b5:
44:68:49:48:48:2c:74:78:da:62:98:4a:ce:5f:41:40:62:bb:
cc:49:ea:20:3a:93:24:03:1a:18:31:36:54:36:7f:23:e6:5c:
88:de:9d:18:fe:b8:21:e2:f6:90:a8:33:02:fa:95:ff:1d:75:
c0:39:c2:43:0e:fa:0c:3b:8f:b7:8f:0b:b1:d7:77:72:81:83:
38:3c:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:36:21 2025 by rpki-client