Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File: pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier: sw7MUGLOeIjnZ8ZCPosYnXLXG84kvwIbRkCDH8atw4k=
Subject key identifier: AB:3B:38:9D:C7:DC:6E:43:64:B3:2C:AC:94:37:CE:50:E3:44:F2:AD
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer: /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial: 019A006BEBA096C5631BA2C05B9BD6138CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number: CA
Signing time: Mon 20 Oct 2025 07:01:03 +0000
Manifest this update: Mon 20 Oct 2025 07:01:03 +0000
Manifest next update: Tue 21 Oct 2025 07:01:03 +0000
Files and hashes: 1: 23JWsnJj-jb8Wa8yxWmE89jRhEc.roa (hash: hyRLz7Lb6AY/XCQzJ69T02ZWEp1ZBMf9ccg5gtbuPtQ=)
2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: 5qR2Xwxm2fiequSJ5TtEw6rnJVCwhxMj30kXse2Edio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:eb:a0:96:c5:63:1b:a2:c0:5b:9b:d6:13:8c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Validity
Not Before: Oct 20 07:01:03 2025 GMT
Not After : Oct 21 07:01:03 2025 GMT
Subject: CN=ab3b389dc7dc6e4364b32cac9437ce50e344f2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:4e:e7:08:11:5a:0b:4f:5e:73:3f:91:a3:
e4:b1:e1:33:65:9f:bb:83:02:0b:db:6c:07:28:26:
ef:89:cf:41:c9:93:3c:52:8c:60:c1:eb:cf:be:fc:
70:69:85:85:b2:8a:bc:ad:90:7f:be:c6:db:dc:45:
0e:18:90:1a:8e:1d:9c:d7:d1:82:51:cb:31:c5:0c:
bd:1e:63:8d:b9:44:ff:c9:c0:33:50:8f:a8:65:e8:
63:e5:75:a9:6a:97:06:4c:1e:2f:6f:00:7a:54:5f:
3e:67:e8:dc:fc:36:18:4d:0b:fa:86:c4:64:05:3a:
6d:8f:ed:e6:5b:19:ce:e3:05:3d:5a:f8:c9:bf:01:
5b:31:b1:d1:69:31:c5:f1:08:38:db:89:1f:91:07:
1e:fa:5c:bc:5d:ce:98:69:c3:e0:3a:68:17:0b:05:
d2:16:7f:51:cd:e8:5b:4a:a7:6c:d0:28:bd:3e:85:
f7:3c:17:6f:0b:cc:59:72:9d:ef:4c:d6:4b:30:b6:
3a:df:ff:02:47:d3:48:9e:d6:42:78:f3:cd:a6:a7:
4a:e0:c9:4a:cf:2d:2d:20:a5:de:ae:67:d7:c1:27:
ce:39:a9:3c:b9:70:b3:be:eb:bf:3b:90:e0:14:fe:
a6:6f:b1:61:de:fd:4b:09:14:87:34:35:a2:c6:aa:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:38:9D:C7:DC:6E:43:64:B3:2C:AC:94:37:CE:50:E3:44:F2:AD
X509v3 Authority Key Identifier:
keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6d:a0:3f:d9:61:f9:aa:d3:44:de:e0:7e:91:ea:47:d9:ae:
17:e8:f1:4d:21:db:f3:b2:77:d3:ae:37:94:f6:a0:06:f2:32:
9d:45:e5:e2:c5:a9:4f:44:15:23:ee:94:73:74:e2:43:92:15:
c4:d2:23:83:5b:e8:f7:94:ab:30:2e:76:01:e2:04:7b:8a:05:
d6:7c:35:33:aa:66:97:3c:57:f3:13:f4:9e:9a:14:17:47:9e:
c6:6e:97:ef:b6:36:aa:cf:11:86:33:45:4a:2e:e8:07:75:b3:
89:8b:d4:00:8e:1d:ce:a5:ae:49:29:ec:a3:be:71:e3:24:25:
f2:7a:b8:73:98:ed:b7:17:0c:fe:73:bc:db:db:00:f9:1b:f9:
6d:d0:50:c5:f7:db:95:d3:07:db:56:1b:08:43:a0:3b:89:8e:
71:a6:72:b0:ab:82:a7:99:38:24:7d:f8:d5:de:07:b0:05:e5:
09:7d:0f:84:ea:8a:7d:7d:4d:64:e3:99:b5:91:ad:ad:2c:12:
d6:4b:81:53:3a:18:15:b9:69:77:b6:6e:ff:ee:7c:8c:50:f9:
41:7c:58:d7:2e:4d:8e:b6:07:4b:b7:e2:f4:7a:60:c7:94:1b:
08:9a:2c:97:b7:79:93:57:3e:56:ab:3e:2a:eb:76:0c:42:de:
ac:b6:b5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:35:20 2025 by rpki-client