Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: 5OUMC1OStf5N4Bmk4b86BqiraP7x9mfViyhLP4nZ/mk=
Subject key identifier: 8F:49:7C:D2:59:B7:59:F7:B9:95:C0:34:3E:C5:93:AE:53:2F:E9:9F
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 019925FB9FBC79B32526D8F56729B49A6F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 0829
Signing time: Sun 07 Sep 2025 21:01:11 +0000
Manifest this update: Sun 07 Sep 2025 21:01:11 +0000
Manifest next update: Mon 08 Sep 2025 21:01:11 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: XXv5mRC5x0qSJbSpQQLsW8BoKnCXhtUUcSA8r6PC+aw=)
2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 17:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:fb:9f:bc:79:b3:25:26:d8:f5:67:29:b4:9a:6f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Sep 7 21:01:11 2025 GMT
Not After : Sep 8 21:01:11 2025 GMT
Subject: CN=8f497cd259b759f7b995c0343ec593ae532fe99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:7e:63:b4:23:b9:28:14:1c:24:40:70:22:
1d:f9:7e:fa:61:70:c7:a2:48:64:03:01:91:21:4c:
99:d3:5b:1c:5d:41:7a:d8:e5:aa:47:2d:5f:ae:21:
95:13:67:4e:7c:dc:05:e8:28:a4:a7:dd:ba:20:67:
0d:17:74:7f:33:0f:b7:9f:5f:3e:28:b1:65:df:69:
a2:49:30:c5:34:2a:51:39:55:f3:7d:2b:47:7d:ed:
cd:54:4a:aa:a5:04:b8:0e:cd:e6:b6:80:57:85:f3:
e4:2e:3c:15:61:d0:f3:aa:25:80:3d:5a:c8:2e:bd:
fe:1d:52:e9:4e:84:68:b8:67:d4:2d:83:8d:f0:4d:
a6:f0:83:58:5a:22:77:03:8d:34:da:d3:ed:d8:eb:
28:b9:36:09:d0:55:ae:d9:c4:27:4e:ab:06:22:a1:
80:a5:52:ba:99:ca:50:c2:1e:3b:e5:37:5b:c8:fc:
0b:aa:4b:f5:6b:eb:dc:0b:ce:28:13:7a:2c:23:21:
5e:75:70:17:f8:59:0c:d4:13:3e:66:ec:9f:1d:aa:
40:8c:07:e5:25:6e:32:f1:2c:7a:40:93:f4:6d:bc:
02:49:a6:1d:69:66:4c:70:af:73:79:07:49:d1:0f:
d7:dd:62:2d:4a:7d:4f:d1:98:ec:eb:77:80:7a:b0:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:49:7C:D2:59:B7:59:F7:B9:95:C0:34:3E:C5:93:AE:53:2F:E9:9F
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0b:db:03:be:43:2e:88:3d:ba:3c:fc:ff:a8:ce:64:1d:e4:
65:cf:ca:7e:d3:66:17:47:35:b4:6e:5e:c4:3e:7c:90:43:ef:
16:7d:d6:65:c2:ac:7a:65:ad:72:36:70:78:2d:7f:d5:60:79:
da:5a:5d:12:53:01:bf:48:b6:41:aa:ca:29:ae:49:49:3f:6f:
e8:5d:19:4c:29:0b:de:57:ae:eb:18:f4:af:9b:72:38:cb:55:
d7:32:11:ad:58:e5:86:eb:95:7d:e9:3a:c5:78:ac:dc:4d:da:
8b:19:ca:f3:3c:fd:5a:42:bf:08:15:16:ae:5e:50:0a:a6:34:
c8:33:86:b2:e7:0d:c1:b0:47:e8:49:79:23:0b:07:e4:6a:a2:
ae:d8:80:92:94:66:22:51:8d:d2:6e:40:e9:4e:8b:98:ef:74:
7e:e4:7c:43:40:fe:9f:dc:c4:33:4f:fc:2b:b7:8e:27:72:37:
49:ec:92:fa:f8:d9:aa:b0:37:91:31:d3:34:98:6c:ab:c9:a8:
5d:cb:eb:86:6c:e0:d6:de:fb:4d:13:6b:c0:e4:67:0f:48:8c:
91:59:2e:1b:64:80:3e:62:94:ec:c4:81:ce:31:8a:71:4d:28:
54:34:19:4c:69:8b:12:1f:17:a8:30:8b:ed:61:b4:2a:80:a6:
99:9e:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 02:15:56 2025 by rpki-client