Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: QlH+hRvUufNEwFh8YDQ9UzVGk4WYwuXIWoOg+rzVmVg=
Subject key identifier: 84:5A:DE:73:0F:4D:A9:FE:79:30:3D:A7:9D:67:EA:DF:FA:FE:71:81
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 0199FE7DD6CF3CEC5EF150E2A7C55D6DA19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 05A9
Signing time: Sun 19 Oct 2025 22:01:23 +0000
Manifest this update: Sun 19 Oct 2025 22:01:23 +0000
Manifest next update: Mon 20 Oct 2025 22:01:23 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: ZPLQIZRkvPes+bvgxi3/Lupzs0mWjTtPU1tPnlsp0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d6:cf:3c:ec:5e:f1:50:e2:a7:c5:5d:6d:a1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Oct 19 22:01:23 2025 GMT
Not After : Oct 20 22:01:23 2025 GMT
Subject: CN=845ade730f4da9fe79303da79d67eadffafe7181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:17:e0:79:e0:c8:62:7f:57:0e:17:bf:4a:
f6:04:48:a0:72:31:7b:5d:19:b2:a5:d6:39:a0:83:
fe:26:14:9d:ff:d5:da:b4:49:96:19:bf:33:84:fc:
11:69:99:c0:00:21:74:75:df:7f:53:16:6e:3f:4c:
22:50:c5:b8:a9:ab:d2:2a:e5:6f:82:22:af:62:4c:
3b:55:b5:57:0b:e2:d0:8c:12:b7:51:26:09:dc:6e:
80:b7:94:9c:ad:bb:b8:cf:f2:09:45:15:82:30:a8:
a9:2b:38:98:30:8d:c2:29:a3:4f:d7:c7:02:95:4e:
e1:29:51:01:9e:be:c5:1f:80:2c:66:3f:94:4d:1b:
43:42:d6:f3:74:84:f5:69:e4:78:84:6b:41:a5:82:
9a:bd:1f:10:d4:c3:31:8f:22:41:2f:e4:c3:c4:3f:
1b:32:77:b0:fc:df:59:90:ae:7c:a0:8b:bf:56:40:
c1:a6:cd:97:6b:25:53:57:5b:18:c0:c9:86:26:42:
04:f8:1e:3a:ff:a9:92:8f:5b:73:ba:4d:86:7e:83:
6c:36:ea:1d:f7:70:3f:c0:bd:7b:92:f2:34:01:f8:
80:d8:20:b9:37:7e:6b:71:0f:08:b7:f0:f2:c0:97:
bb:d6:b7:64:43:1f:fe:b4:71:34:a3:34:b4:6d:df:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5A:DE:73:0F:4D:A9:FE:79:30:3D:A7:9D:67:EA:DF:FA:FE:71:81
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:88:b4:af:13:d3:cf:3a:22:da:d0:6f:af:45:87:69:35:48:
01:0d:59:c5:18:58:be:5d:86:da:7b:c0:bc:5a:85:cd:7a:3d:
2a:8a:bf:45:ee:47:24:e6:f9:6d:33:87:86:26:54:35:a3:39:
19:a3:b1:a6:61:a5:3f:b7:5b:9d:61:6c:2f:09:9b:93:a1:ee:
79:3f:82:45:d2:18:5c:95:22:82:3a:b1:e8:16:72:98:fa:bf:
cf:c4:f3:23:c3:28:81:23:85:86:ba:6f:cc:53:a0:03:cf:e4:
30:88:2f:d7:ca:b2:1e:b0:16:a7:66:ca:2e:ac:eb:6b:b1:49:
55:b1:02:d0:2f:1c:88:ab:2f:76:47:2d:a1:49:ab:ef:fc:76:
ad:10:db:b1:55:c5:d7:b1:a5:95:41:6d:b1:91:cb:d9:09:f5:
50:3c:93:cd:9a:4e:66:54:51:4b:17:9c:e3:19:70:02:7b:39:
c1:50:7c:a7:1c:d8:bb:47:cd:84:fa:c4:b6:6d:98:69:5c:16:
eb:18:9b:c3:b2:3f:97:99:ba:9f:ee:e4:24:60:1e:42:ab:bb:
a4:07:c9:01:ce:9a:cc:3e:7a:ec:74:b5:7a:41:fc:50:49:a9:
a1:a3:24:f8:d5:55:fa:3d:f1:9e:80:4f:a4:dc:b7:89:d7:cc:
e4:a4:07:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:43 2025 by rpki-client