
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: HTipDlvdoEx9PuR97BfOQaZ3fiiJJRnKOQQj6fIXc74=
Subject key identifier: 8B:F2:58:CF:64:75:DC:0F:4C:61:23:BE:BF:70:FF:F3:8D:1E:26:F3
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 0199FC8F236FCC317A891E65D3A2CC6E9E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 1384
Signing time: Sun 19 Oct 2025 13:01:02 +0000
Manifest this update: Sun 19 Oct 2025 13:01:02 +0000
Manifest next update: Mon 20 Oct 2025 13:01:02 +0000
Files and hashes: 1: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: BHG0N+/EHwiCjpr+j6CaQTlZbzFF0UVMjNHhIda3hSw=)
2: wW2KE3gY8QjEsnXJFmwHDL7WH6g.roa (hash: rYujNDXyFY6K7NmLNp1LWeOiCz0Qh+l0K7mCOQxVp3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:23:6f:cc:31:7a:89:1e:65:d3:a2:cc:6e:9e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Oct 19 13:01:02 2025 GMT
Not After : Oct 20 13:01:02 2025 GMT
Subject: CN=8bf258cf6475dc0f4c6123bebf70fff38d1e26f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:a6:d6:7f:a9:ad:e0:ca:cd:ea:d6:08:4f:
b5:07:7b:20:42:ce:0c:b4:4d:65:61:48:40:c5:3b:
99:9a:1d:5b:6e:92:84:c6:b3:54:29:7e:5d:83:65:
db:97:97:de:dc:0d:04:aa:e6:dc:93:53:b0:b5:95:
f7:4b:00:1f:12:c9:12:b7:e8:0f:05:3a:9e:ba:d6:
72:5f:4d:83:7d:7b:7d:0f:ad:2d:be:33:62:65:1e:
75:79:07:d1:4c:ca:e7:98:20:e2:fb:55:e2:b9:04:
bf:a8:11:dd:91:36:70:56:cd:2f:19:20:44:cb:52:
58:55:25:d2:b7:da:e1:c9:07:56:3c:81:b4:fa:70:
50:4e:f5:b5:a3:3e:9e:26:ba:6a:f8:1a:38:e6:5b:
7a:85:74:00:c2:68:4f:13:6c:9d:2a:0d:f1:b6:e8:
4d:57:70:0c:14:84:3c:78:07:c0:7e:8e:2a:12:ed:
5e:bb:16:fe:7a:ea:fb:ca:0b:d1:a2:af:a5:da:93:
d5:eb:52:f7:0a:14:36:77:5d:fd:88:30:ed:3b:76:
7d:79:2a:5d:ca:4d:67:9a:74:0f:91:cd:4e:57:41:
18:49:15:b3:4e:11:26:7e:3c:4d:de:10:ef:2b:25:
ea:2a:fb:74:17:02:48:2a:2e:49:e6:d0:2a:20:20:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F2:58:CF:64:75:DC:0F:4C:61:23:BE:BF:70:FF:F3:8D:1E:26:F3
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:41:78:ab:44:1f:d3:ee:e5:9b:bf:d7:e6:e9:a0:73:c8:df:
81:96:eb:8f:a0:32:2c:eb:86:03:b9:42:93:77:72:13:4a:67:
40:5a:e8:b0:ca:62:6d:86:28:4d:39:98:7a:59:0d:e5:cb:df:
f1:c7:65:7c:d9:10:89:bc:29:f3:bd:54:cf:1c:99:31:15:22:
9e:b5:35:60:5c:10:7e:ce:d8:48:ec:63:e9:32:31:5a:d2:4c:
c4:f2:7e:3e:77:7b:cd:1b:8b:e8:4d:50:ad:30:5a:98:b5:34:
31:cd:cc:32:b3:9c:ff:c4:bc:38:0d:a9:b6:ca:08:ce:0c:7c:
55:98:f9:fa:ae:78:99:3b:fe:45:59:c5:6b:af:a0:66:85:a0:
5f:7b:17:20:70:80:3e:f3:c8:19:ed:47:a5:88:29:a8:cc:4a:
41:cb:8a:70:ef:29:90:ac:b0:ce:6b:2f:87:34:47:88:31:f5:
7f:30:35:34:07:0a:13:78:0d:71:05:f6:55:08:58:b2:63:d5:
99:c1:9b:10:e0:a2:45:91:52:c0:85:ba:79:59:0b:55:6b:d6:
c0:6b:98:3f:89:90:ae:e7:9e:62:e4:24:02:a7:5a:1e:65:0b:
ac:ed:6a:2e:6a:06:d4:50:43:62:a4:ee:1d:de:95:90:0e:11:
10:b3:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:22:13 2025 by rpki-client