Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File: PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier: hZnFEm3RJEr+oTeUExx48yf6fjFgR5iHrZ3l3Lsc89M=
Subject key identifier: BC:B0:72:FD:23:A2:8D:2D:F9:E0:BB:41:63:6A:FA:7C:40:DE:04:B1
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 0199C4C4EBBA3B4D7E3C18DE9897274BEE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number: 0ACD
Signing time: Wed 08 Oct 2025 17:01:03 +0000
Manifest this update: Wed 08 Oct 2025 17:01:03 +0000
Manifest next update: Thu 09 Oct 2025 17:01:03 +0000
Files and hashes: 1: GQiJ6A3TQvBKFhpquOxaF9eGGSM.roa (hash: 6erLpsgMI9bO4qfOCcfgJUCMEDYhGzxWY2AMUbeslCE=)
2: IHvKxmr3uwpJKwkutA9nKfip_F8.roa (hash: E257yWlPmy47lDQ49F17JotJ+RKeZHzV+AfLNrTNJCw=)
3: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: ibehdEptI6auajooYdj6kzHX1K5sZpt9Y0dCFORRN0g=)
4: pqLRP6br3Tf8MSpYzZpv7JQJdvI.roa (hash: t46mDE1wE8ruzgJ1jDR113WnhduQHovpLeyn+ltLQ0w=)
5: sS3umUajXXmqMBA_9lX5Ye0iJuQ.roa (hash: IM/xG6YgVa2blydnHEIN0rcU5aCmvFCbaiZgSErPPdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:eb:ba:3b:4d:7e:3c:18:de:98:97:27:4b:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Oct 8 17:01:03 2025 GMT
Not After : Oct 9 17:01:03 2025 GMT
Subject: CN=bcb072fd23a28d2df9e0bb41636afa7c40de04b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:79:22:4e:21:e4:bf:de:7c:52:2a:3d:d3:
79:7a:55:d8:21:a0:03:1c:2b:08:b8:59:15:5b:0e:
51:8d:9b:17:00:f2:ec:1f:f9:e8:f3:88:09:9e:de:
bf:11:08:94:bf:40:94:2b:b0:e3:aa:24:a4:a3:e8:
75:5c:bc:3e:56:9c:13:5e:07:33:b9:d1:e4:df:3d:
d3:80:90:15:4f:5b:a0:6f:e5:46:d0:de:5c:01:d1:
62:83:ac:b6:c9:9b:03:e6:47:4f:95:10:45:b6:7a:
56:e5:df:58:ee:f9:a3:af:80:b6:03:7d:65:71:f3:
da:f0:cd:66:23:24:0f:90:84:e5:eb:06:c7:15:10:
82:cf:c5:03:29:01:bf:59:09:f1:1a:c8:90:05:0c:
64:70:11:cd:62:eb:24:6f:d8:25:1d:e0:0b:b8:5b:
6c:8c:f5:94:2d:ba:72:a1:2f:45:0d:2e:4f:e6:1d:
85:85:da:2e:a9:00:20:0f:84:9f:99:d2:2b:80:e8:
a2:6a:6d:3d:d3:d4:aa:eb:9e:c9:de:36:e1:64:26:
7a:dd:d9:55:33:d0:ff:61:35:a7:ad:b9:81:4c:e9:
72:0b:5e:69:f6:65:d1:9b:7d:2a:17:44:f3:e2:ef:
2e:ff:f1:0f:c6:cb:88:b4:8e:73:d3:85:cf:31:af:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:72:FD:23:A2:8D:2D:F9:E0:BB:41:63:6A:FA:7C:40:DE:04:B1
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:25:bc:b7:d2:fb:ec:ad:20:de:2e:5b:d7:4f:ab:d2:9f:51:
37:fa:5c:fc:32:40:41:43:e2:98:07:3e:5b:ed:71:71:5c:46:
70:95:24:87:a4:3d:52:9d:ff:55:af:1e:f2:7c:fc:40:5a:f7:
82:97:eb:37:ae:00:0a:a8:42:ae:03:16:50:74:2a:0b:6a:23:
6e:12:05:15:76:0e:1b:09:ad:48:cc:93:bf:88:9f:c3:47:62:
a6:62:17:99:61:f4:e9:3d:b9:a5:05:6d:d5:5f:23:57:aa:4d:
d9:9c:8b:e9:82:0b:1c:c9:42:60:3b:cb:39:92:81:1b:bb:88:
53:d4:72:df:69:6a:b3:78:d4:2b:e0:2e:30:9c:66:b2:6a:4c:
e2:1d:71:5e:5a:a2:40:cd:56:3c:e3:42:e9:47:fb:00:66:eb:
f8:97:81:ac:07:ac:d6:00:53:9f:e6:2d:2b:ff:fc:a4:72:fc:
7e:79:cc:f8:f9:b2:d8:c5:f1:06:2f:77:a2:3f:a5:b9:ba:c4:
02:d9:bc:a1:68:a4:d0:79:39:6d:4f:f2:c8:33:61:01:ef:67:
5c:ed:32:a9:e9:64:0a:29:1d:f0:78:52:e1:21:f3:27:67:e9:
05:05:e1:9f:9a:cb:9b:f7:b8:79:ad:0c:a9:ac:40:6e:15:a0:
6b:46:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:22 2025 by rpki-client