Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
File: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft (raw, json)
Hash identifier: mJRfO9cvVGfxW4wxAq1gccuHzl5eVTImDbB8NB7vDgU=
Subject key identifier: 14:F7:A3:0F:3F:3C:F4:2F:B6:C3:58:51:84:DA:DD:56:30:59:B9:B2
Authority key identifier: 3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7
Certificate issuer: /CN=3d3ed8a62ee859bce68d4016319e082a204845a7
Certificate serial: 019A725C85D375836DC48CB5C0B3882ABE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
Manifest number: 01E8
Signing time: Tue 11 Nov 2025 10:00:57 +0000
Manifest this update: Tue 11 Nov 2025 10:00:57 +0000
Manifest next update: Wed 12 Nov 2025 10:00:57 +0000
Files and hashes: 1: H1o_SCjiFLHrkWrzG2YBUqyvibU.roa (hash: wUnzCOO08Zj5zj+Xms5OeZCPttJSOF6uH3iX57ElDhc=)
2: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl (hash: /qig0Y9wzj26DhfhaN+ZLNK8haK3sKNnfdnNGCmIG60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:85:d3:75:83:6d:c4:8c:b5:c0:b3:88:2a:be:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3ed8a62ee859bce68d4016319e082a204845a7
Validity
Not Before: Nov 11 10:00:57 2025 GMT
Not After : Nov 12 10:00:57 2025 GMT
Subject: CN=14f7a30f3f3cf42fb6c3585184dadd563059b9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:d0:83:2d:3a:da:b8:6c:f9:c5:8a:cc:d6:
3e:49:2d:54:61:ad:33:28:95:57:88:21:f5:81:3c:
b6:7a:12:d0:29:51:a5:5f:a8:f4:48:d5:94:3c:e3:
ca:8c:ae:75:0a:8a:98:60:01:6f:af:3b:39:33:ea:
94:b9:af:6a:a3:43:ea:d5:16:b5:5b:8b:af:11:c7:
69:8f:b0:26:41:c8:8e:7a:16:7b:ce:c3:ec:34:79:
93:14:d0:dd:8f:94:8d:82:4f:92:c5:e6:64:1d:8a:
0c:c5:44:33:9a:cf:cd:5d:46:38:84:5f:41:ce:9f:
ce:ea:34:6c:4f:23:a3:73:89:ac:d4:90:cf:cf:5e:
ed:f3:54:4e:59:c1:db:d3:89:b3:90:1e:99:82:82:
ba:a6:31:ff:83:20:d9:9d:e5:d9:cc:8e:c3:25:a1:
4b:b4:e6:c3:9a:f1:0b:fa:71:65:9c:d2:f3:79:b7:
73:3d:8a:2f:6a:78:12:20:19:6d:15:14:c8:37:d6:
eb:5d:a1:ba:0b:01:41:16:65:b6:1e:d9:6f:76:ce:
90:76:65:9d:29:1e:85:74:c0:bf:3f:c7:3a:db:37:
20:a9:0e:f6:ff:44:49:49:73:66:68:05:4e:f5:f4:
3e:6e:d4:ef:e1:97:fe:cc:47:ff:d4:fc:20:57:bb:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:A3:0F:3F:3C:F4:2F:B6:C3:58:51:84:DA:DD:56:30:59:B9:B2
X509v3 Authority Key Identifier:
keyid:3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:13:03:7d:65:55:08:d8:25:d7:02:7d:4d:6a:7c:0f:59:ca:
7f:a0:e7:33:c1:40:35:31:c5:72:2a:ea:1d:12:8c:07:e0:d1:
c1:d5:65:ad:94:da:e3:f4:de:e9:55:0c:a9:b1:c8:05:91:d8:
3e:c1:2b:fa:4d:e5:34:07:c1:8f:2e:3e:6f:e1:5c:86:71:98:
89:cd:d4:02:3c:e2:21:bf:4f:96:e9:ca:c4:ad:91:0f:e4:12:
3b:7a:8b:aa:ac:33:37:b4:26:7c:05:7c:0e:64:1c:c0:6a:d5:
62:23:83:c0:32:ab:ac:b6:f4:e8:a2:22:4e:26:df:ec:a8:75:
b2:f6:99:03:80:7d:7f:1b:aa:3d:1b:3d:4b:a6:70:1b:a3:0b:
b4:11:a7:67:29:4e:bb:28:e4:2c:62:f7:3b:c1:c4:e8:9c:65:
29:4c:09:0f:8b:d6:70:82:ed:28:1f:1b:67:41:ce:74:86:30:
fc:ed:3b:0b:e4:07:36:ef:e5:55:8d:c2:3f:4a:ec:a5:92:bd:
81:0c:e3:f2:02:e7:fb:8d:18:1a:47:77:1f:f4:50:26:00:a0:
cd:5a:ad:3d:33:3c:62:3d:9b:7f:c7:bc:11:6f:0d:98:27:b8:
01:21:db:c9:e8:a1:45:c8:a8:b8:9b:c6:e7:f6:49:f0:21:9f:
f1:bc:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:33 2025 by rpki-client