Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: 8m6dxC63QGsikeB+nIsY/k1ttoftcYqxnhqaVbEr1Bw=
Subject key identifier: 44:00:D2:93:F8:91:67:F4:3C:18:09:F2:AE:00:09:6B:B3:87:36:1F
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 019956E88ECA3342EDFB417C74ACA6F4F430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 090F
Signing time: Wed 17 Sep 2025 09:01:45 +0000
Manifest this update: Wed 17 Sep 2025 09:01:45 +0000
Manifest next update: Thu 18 Sep 2025 09:01:45 +0000
Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: 0Ph/F4xa1HQEv8J2rThPa+wMIpRbMhBl0M3IX4dP08s=)
3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:e8:8e:ca:33:42:ed:fb:41:7c:74:ac:a6:f4:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Sep 17 09:01:45 2025 GMT
Not After : Sep 18 09:01:45 2025 GMT
Subject: CN=4400d293f89167f43c1809f2ae00096bb387361f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:31:c5:82:6f:3c:cb:fc:00:08:7d:38:4d:
e1:38:1b:c5:a7:b3:e3:ae:3f:a5:1a:1e:ac:89:ea:
9c:b5:bf:1b:0c:23:8e:b9:53:4f:99:50:36:57:66:
a7:96:cb:3d:81:05:01:44:1a:69:94:66:7a:01:61:
c3:ac:91:48:51:9c:2d:4f:74:12:7b:81:d0:eb:95:
b6:3f:72:b5:6a:ea:84:ce:62:35:6a:d1:72:7c:14:
fd:0d:ec:a5:95:fb:06:e7:c8:bc:20:65:e6:a9:18:
86:d8:13:2c:83:90:26:c3:2c:40:04:76:48:cc:fa:
0b:4e:35:77:64:3a:0f:40:57:5f:aa:ea:72:56:87:
c8:dc:37:13:cc:44:16:74:9c:ef:87:5e:b6:d8:a0:
f9:d4:f4:28:c9:4e:d2:ca:fe:0c:07:7d:e3:93:61:
40:0a:5a:bb:16:b3:bc:1e:46:b0:b7:a0:72:c3:11:
14:48:56:0e:c5:b2:dd:5d:93:90:32:b1:0e:d9:8b:
18:33:56:7b:6a:54:fa:ec:f8:dc:7c:58:49:4c:b5:
b8:2b:b8:76:79:0c:33:ea:d0:5a:2e:7c:c2:02:ee:
71:0f:22:b6:51:56:ab:c4:80:5b:7f:29:b3:9d:fd:
27:ec:a8:6d:88:78:77:30:d2:12:98:ad:bc:8d:e1:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:00:D2:93:F8:91:67:F4:3C:18:09:F2:AE:00:09:6B:B3:87:36:1F
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:44:47:27:af:a9:f6:09:4b:9e:a9:d7:19:b4:77:35:78:5f:
f5:2a:cc:18:b7:85:db:9a:1b:94:a5:ee:2b:e7:24:a0:07:04:
9d:0a:65:ea:0c:f5:0f:ba:db:a7:94:42:8f:1e:df:b0:7f:03:
99:28:c3:2b:4c:9c:0d:4a:71:40:f3:20:e2:5a:37:d1:e6:7c:
9a:5b:92:b2:d9:b3:d7:c2:44:25:15:77:6e:cd:ab:ed:68:74:
83:1e:2b:e1:40:6a:b9:03:44:79:e3:22:3c:88:15:ea:94:48:
df:1c:bb:90:96:4a:27:00:dd:ae:9b:e3:a7:20:38:c2:ba:5b:
9d:47:6f:e6:ad:13:c6:82:34:cf:1c:1b:b6:e2:3c:f7:0a:05:
b8:d0:f2:1b:fb:61:fc:af:a8:86:9b:b8:a4:73:79:bf:93:1c:
13:01:9e:ab:3b:a7:7a:14:08:20:14:6b:39:0c:e6:2f:5c:a5:
db:4c:8d:73:ef:2d:51:74:b2:11:79:5a:57:ef:e4:18:f3:08:
06:3b:3f:06:17:67:c7:85:1a:23:62:e2:fd:b2:89:41:98:20:
0a:f3:69:29:bd:40:5c:3c:9a:03:dd:cc:d4:35:85:6e:40:82:
80:10:c7:98:ea:cb:20:ff:84:b0:92:0b:76:1b:44:a0:08:6e:
23:0b:ac:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 15:37:52 2025 by rpki-client