Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File: d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier: pf9O0SjR+JAtpJh73IRmZHxbwZw7qPKnL+a37H1zXwU=
Subject key identifier: 81:06:04:E0:1A:8D:86:35:45:41:FB:74:17:7F:44:E6:9E:06:BD:3B
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 019A7293B3BC821656C59F8D03CF792B64DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number: 0E71
Signing time: Tue 11 Nov 2025 11:01:13 +0000
Manifest this update: Tue 11 Nov 2025 11:01:13 +0000
Manifest next update: Wed 12 Nov 2025 11:01:13 +0000
Files and hashes: 1: 6FBdm52HrIwxns50lJrMCqThYUM.roa (hash: Fb4owa3jjdnAYqjY2HP/KocZ2u55DXUdS4g1VNhxtCk=)
2: 8V29SLLHHHPak0CW_pb1i9F5mpI.roa (hash: hNuKjceR9DAU4JupE05WFNYQ/cRQ1qbfm397GXwMfeU=)
3: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (hash: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=)
4: Y51duMvjV_OQZmOCJBSIZCmhcrk.roa (hash: Q0RhIzzfhASN7KdMAgmx0KpJTYttwJFhhPb1OGIDnNA=)
5: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: 6oSK/qhsFpXvM3+YxCB4DQUDjUpCwOdb4rDZ1THS4dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b3:bc:82:16:56:c5:9f:8d:03:cf:79:2b:64:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Nov 11 11:01:13 2025 GMT
Not After : Nov 12 11:01:13 2025 GMT
Subject: CN=810604e01a8d86354541fb74177f44e69e06bd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:bc:e3:e4:08:cd:27:17:ab:9f:d5:5c:0a:
c3:33:cb:e7:16:ac:e3:e2:53:4a:16:35:e9:92:10:
a1:e6:d4:b2:c5:14:10:ae:81:47:d1:5c:86:88:40:
5d:1c:15:25:3d:d0:fe:f2:2b:96:ef:7a:f9:97:48:
ce:4b:17:9d:8c:0e:48:3e:61:b4:94:a5:23:af:dc:
a1:b2:d7:39:1e:bc:4a:82:12:d2:56:92:1e:c9:11:
97:79:91:0a:63:8c:b4:0d:eb:56:a4:39:9d:53:1d:
53:d0:34:91:9e:54:55:49:c0:0e:02:eb:1a:51:29:
a1:c9:82:aa:48:4d:0f:0a:9e:71:03:9c:13:94:5c:
73:b1:6b:f0:81:ee:89:e5:82:28:14:93:92:54:5c:
75:e3:d2:f2:b7:ee:a7:02:63:3c:f1:05:e8:73:6b:
d9:49:b7:80:4f:91:5a:2c:dd:91:38:8d:92:39:d0:
06:5a:02:23:60:c6:96:8f:0a:ef:fc:6f:80:e8:af:
43:ae:af:d5:d4:89:4e:75:e9:f9:62:17:fa:26:45:
02:29:cc:19:f0:cb:78:20:41:f8:dc:2b:25:8e:d0:
31:f4:e3:0c:3e:c6:61:4b:7a:2c:b0:04:e6:f7:85:
86:c3:da:cc:d7:d1:fe:b3:a1:3e:ee:64:f7:24:2e:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:04:E0:1A:8D:86:35:45:41:FB:74:17:7F:44:E6:9E:06:BD:3B
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dd:fa:51:9b:12:ad:7b:27:bb:33:9d:ad:f8:42:a8:ee:c7:
45:08:47:00:4f:82:ce:49:1d:37:0e:d6:57:ec:22:37:b5:54:
97:4f:f5:b9:62:b5:8c:c0:15:21:36:bd:8e:2f:d3:2f:42:fb:
c7:d3:93:a1:3f:1f:1b:f3:5d:1b:90:4d:a0:9b:0e:69:ab:f3:
d7:ba:e3:81:74:ba:01:73:7d:9e:23:c1:09:81:ae:b7:03:a4:
57:a8:d0:15:fc:bf:ef:f6:e9:3f:c1:9a:c4:cb:23:8a:70:6a:
e6:09:46:b9:af:55:83:21:42:7d:20:fe:63:01:2f:04:6c:20:
86:f3:d0:0a:59:c2:c3:a2:16:78:98:e1:50:d6:ad:6d:a1:a3:
b8:cb:4c:de:14:a1:a5:a9:3a:fa:4d:7f:32:9e:ff:49:07:d4:
65:8e:f5:e3:20:e2:c6:17:20:fc:d3:cc:56:44:90:d7:a0:1c:
c4:b7:ac:10:13:06:f9:44:26:11:f9:cd:f0:00:79:a6:9c:23:
33:76:4e:ac:3b:2a:61:9b:a6:76:4b:8e:92:22:b1:21:39:a9:
74:d8:3c:7a:81:08:a5:39:c5:f0:11:c0:e6:80:16:d4:2e:e7:
07:89:db:d3:42:f6:ed:e0:f3:99:33:4f:4e:aa:90:31:f2:1b:
46:ca:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:51 2025 by rpki-client