Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: bZq163/E002Y9F6ybDd/umidleDVQ5LPJwATKMqyQz0=
Subject key identifier: 51:37:7B:3B:6F:37:C6:A1:A3:23:F2:6A:EE:DA:61:A0:69:F8:96:75
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019A0892EE367B789445D0CA317A5D7FC342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 1084
Signing time: Tue 21 Oct 2025 21:00:38 +0000
Manifest this update: Tue 21 Oct 2025 21:00:38 +0000
Manifest next update: Wed 22 Oct 2025 21:00:38 +0000
Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=)
2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: SoWiEfvz4985tKwH0x+BgoSkcpfEAbtUfVh5YuX/JPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:92:ee:36:7b:78:94:45:d0:ca:31:7a:5d:7f:c3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Oct 21 21:00:38 2025 GMT
Not After : Oct 22 21:00:38 2025 GMT
Subject: CN=51377b3b6f37c6a1a323f26aeeda61a069f89675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:e4:7a:4d:63:19:8a:db:50:2c:35:e5:d9:
f2:30:9b:4a:43:d7:d3:e5:48:7e:02:cb:30:11:31:
74:68:63:1c:e5:4d:dc:96:a5:0f:02:1c:e9:92:43:
9d:49:72:d1:03:99:aa:ab:04:ec:ff:1a:c2:06:d4:
cd:99:e4:06:51:63:06:15:b4:04:5c:4e:4b:90:58:
9a:33:31:87:b6:5b:08:ce:49:37:5d:b1:74:76:1d:
5c:ba:da:b6:2f:a4:5b:7f:32:68:f1:f5:b8:d9:57:
e2:b2:25:ad:45:7b:6e:38:db:d8:22:ca:56:1b:de:
64:3c:22:44:14:a2:a7:b2:45:90:22:64:67:92:ec:
10:65:08:7c:bd:db:7c:b2:83:b3:08:65:76:76:4d:
39:09:e0:46:44:a8:9b:ee:e1:e5:93:b7:6c:12:00:
5d:fa:d9:c0:f0:23:0f:a7:c3:53:de:a2:cd:db:b3:
71:e7:40:e9:e0:d0:a3:01:18:1a:e5:a2:37:2f:5c:
b9:fe:5c:c2:7c:78:19:47:bd:08:76:46:48:bc:ce:
71:a3:52:c7:7c:04:78:4a:11:a9:9a:45:5f:ea:5b:
b5:a3:33:9c:0e:08:f2:cb:00:23:ff:aa:dc:2e:48:
eb:e7:09:a2:2b:bc:02:29:78:85:a7:99:18:3d:a7:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:37:7B:3B:6F:37:C6:A1:A3:23:F2:6A:EE:DA:61:A0:69:F8:96:75
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4f:2e:70:85:13:1e:ad:82:30:6b:60:92:f1:a0:e7:e0:7a:
c6:e9:d2:3a:ca:f1:3d:d1:46:5f:71:1b:30:df:66:1f:18:48:
bd:90:d2:d5:cb:27:0e:ac:54:1b:85:44:ca:27:0e:22:4b:37:
d4:46:fc:99:e1:9d:35:d6:0c:0f:1f:44:18:f2:66:c6:56:46:
ea:cc:80:75:8f:cb:93:14:e5:0a:3d:6b:97:2e:2b:a0:1d:72:
79:59:45:df:63:30:c8:1e:7c:d9:ad:48:67:54:6e:04:36:4b:
92:25:7e:07:6b:c8:18:5f:8d:9c:22:07:ba:da:ab:a0:d4:72:
03:a6:26:61:6f:d0:01:66:72:2a:ae:61:58:f7:ee:ad:49:aa:
f7:ba:07:18:cc:91:d6:30:af:e7:9c:e7:07:a4:82:69:e6:52:
5b:2a:5f:52:32:a0:9a:6f:c5:90:6a:4e:be:20:d2:e9:fa:85:
65:6e:c4:58:cb:f5:c2:03:54:2a:2a:64:a5:6f:b3:b6:b9:bc:
5c:e9:ab:d8:19:6d:09:2f:6e:c7:9c:63:d3:af:4b:82:03:5a:
21:71:0d:36:b9:03:24:5b:e5:b3:10:6d:18:ff:db:65:ae:94:
50:68:33:92:79:39:57:ec:7d:20:84:1c:a1:71:4d:13:7e:c1:
33:60:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:47:46 2025 by rpki-client