Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: 0nvU0srB4owf3ivVkeJn/coeoCufKgBw+AiLhbjT7kM=
Subject key identifier: 6B:D6:64:C6:1A:16:58:C5:0A:C6:06:E5:9C:2A:0B:0C:28:24:F3:D0
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 0199FEB500DC288C5D9B9F3EF5E0122300A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 0377
Signing time: Sun 19 Oct 2025 23:01:38 +0000
Manifest this update: Sun 19 Oct 2025 23:01:38 +0000
Manifest next update: Mon 20 Oct 2025 23:01:38 +0000
Files and hashes: 1: aU9nU6J43VKML7pOttC9ZY6jQ98.roa (hash: FbRy0Mzafv2hiOEuNsxPoMw70K3GoSJZXHuz7LnmQeE=)
2: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: 1kNMgsDs/JYrhRODbI1GLRQFjMmyJAvdd9Zh/nmH25c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:00:dc:28:8c:5d:9b:9f:3e:f5:e0:12:23:00:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Oct 19 23:01:38 2025 GMT
Not After : Oct 20 23:01:38 2025 GMT
Subject: CN=6bd664c61a1658c50ac606e59c2a0b0c2824f3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:bf:a3:17:46:f3:e1:a7:06:c6:a0:1e:73:
08:5f:f8:ea:69:d7:1f:9f:60:4d:89:16:6a:64:a0:
62:0c:3f:80:33:db:f9:4b:1a:ef:fd:81:a7:cd:77:
3e:e4:25:9c:7d:0d:06:26:da:d1:79:d6:de:52:a8:
10:4f:50:c0:20:36:88:be:52:47:57:22:56:a0:5b:
66:8c:be:3c:a0:f0:e2:4e:7d:00:aa:77:45:4a:53:
33:37:55:48:e6:49:12:ca:56:6e:57:d8:ea:26:8b:
26:e3:0f:59:c8:4e:f5:89:20:07:9b:ba:64:71:15:
4b:e1:2e:d6:b4:67:cd:16:23:66:7a:3b:d3:d4:34:
42:43:96:83:0e:d5:4d:9b:1a:d2:f3:7c:38:ba:e9:
5d:98:d0:2b:52:cd:fe:c8:1b:58:1b:eb:64:2b:48:
af:0e:75:bf:2c:49:6a:7e:6c:b2:da:f6:62:5a:c0:
33:99:29:fa:2c:2a:9e:d7:d7:80:ec:0d:ef:2d:73:
a2:7c:a0:c9:53:de:d9:1e:7f:17:3d:7f:15:e0:df:
ed:fa:3c:5f:9e:34:ac:8b:96:a0:ac:80:67:5d:8e:
61:9c:91:c6:0d:b4:18:a2:96:86:e0:be:4f:d7:84:
e0:f1:4e:1b:c4:db:ad:05:9f:b9:95:d2:c1:73:9a:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D6:64:C6:1A:16:58:C5:0A:C6:06:E5:9C:2A:0B:0C:28:24:F3:D0
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b5:e9:82:38:1b:68:b2:69:51:bb:9c:8c:cb:c2:6f:ec:7f:
29:e5:a3:56:38:32:84:b2:17:58:3a:7e:38:42:2d:83:d0:84:
b2:e7:2f:f7:99:06:eb:bf:64:48:6a:b2:6e:fd:53:88:25:3b:
93:68:0e:84:cf:62:29:ec:67:4c:0e:0b:6f:ed:15:e2:a6:70:
f5:ed:69:35:90:af:80:0a:fb:60:66:70:66:26:78:14:73:7e:
3e:bb:aa:18:2c:aa:f7:be:b5:bc:ec:4e:f3:76:b5:bd:a8:c1:
f3:c5:21:e2:b0:5e:b7:6f:41:66:cb:54:0a:d1:0e:4f:06:1b:
a8:3f:3e:a9:9e:5f:8e:16:25:f5:d4:8a:45:9c:08:cc:b0:92:
43:ed:16:6f:1b:07:e9:d2:d5:1d:d2:03:6f:7b:a4:1a:44:90:
e3:97:f3:9d:a5:f5:ad:ee:7f:cc:7c:cb:55:26:3f:82:bf:10:
91:39:41:0e:dd:4a:e7:bd:c1:86:f5:94:8a:2e:2e:79:5a:1c:
f8:9e:10:4d:d2:78:49:51:09:cb:dd:99:cd:fe:02:ac:91:ba:
25:b4:e9:7b:b7:20:95:be:c5:5b:5b:fa:14:f2:9f:c9:f1:80:
b9:dd:73:cf:61:9b:b7:9d:97:4c:5a:cb:a2:61:d4:d0:47:79:
50:d3:a5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:54 2025 by rpki-client