Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: Aw90CR+ZuFBmAShpIoVjZh8qSKXb3Mj+LTkaqx67IEY=
Subject key identifier: 97:69:3F:BA:C4:73:AE:DC:83:83:96:B2:8D:85:BD:18:8E:88:8D:4E
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019A05C8EBD26EE631695C8D8A9AA93D89F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 1068
Signing time: Tue 21 Oct 2025 08:00:44 +0000
Manifest this update: Tue 21 Oct 2025 08:00:44 +0000
Manifest next update: Wed 22 Oct 2025 08:00:44 +0000
Files and hashes: 1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=)
2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: 2MYfIq1qCQJnznPla9RRcnMgfhkBIo/pqOqNT2cRHws=)
3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=)
4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=)
5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=)
6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=)
7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=)
8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:eb:d2:6e:e6:31:69:5c:8d:8a:9a:a9:3d:89:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Oct 21 08:00:44 2025 GMT
Not After : Oct 22 08:00:44 2025 GMT
Subject: CN=97693fbac473aedc838396b28d85bd188e888d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:3e:8c:9a:52:3f:de:6d:ad:1c:83:aa:b8:
86:cf:cc:75:9b:dd:4b:07:c1:c1:f7:c9:5e:f1:7a:
41:55:13:c8:e3:12:9d:37:76:54:d8:c0:55:99:30:
8b:62:ee:bd:79:25:09:17:2e:4a:e3:e1:c1:27:f6:
20:1b:02:49:d7:a1:de:1a:3a:13:9d:26:bb:4c:2f:
2b:24:65:df:e0:d3:1f:c4:80:a8:e5:19:9f:dd:61:
8b:b5:85:ef:0d:c7:99:da:4f:82:e6:37:14:df:8b:
49:3d:62:c6:0e:93:0d:43:57:d6:6a:c8:27:64:07:
bb:e8:70:31:11:f3:23:07:2d:df:05:0a:2a:1f:b2:
7a:cd:0f:71:8b:03:0e:7c:63:38:41:da:90:ed:5f:
42:03:05:63:ab:84:70:bb:e6:ce:a7:1f:e9:ce:d9:
3d:ff:a0:f0:58:70:9c:91:55:3d:69:4c:83:30:ae:
0e:5d:e5:c5:40:81:7c:3e:44:65:46:99:2a:50:b3:
ff:e6:76:94:4d:f0:16:ee:2b:d8:02:a6:98:8a:f3:
29:75:5b:30:79:b7:88:aa:bf:e0:24:3b:f5:77:d6:
40:47:67:7b:a2:27:81:98:cc:34:3c:fa:23:da:52:
0b:02:b5:3b:13:2d:1d:c7:e4:14:8f:42:85:fb:12:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:69:3F:BA:C4:73:AE:DC:83:83:96:B2:8D:85:BD:18:8E:88:8D:4E
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bf:b3:60:11:21:6e:f2:42:db:18:8e:7a:f0:b7:7b:e4:b0:
ea:c8:f5:59:6f:e4:b3:64:1b:70:cd:67:78:4a:02:a0:5a:2a:
62:00:48:6e:5d:7d:a1:92:d1:22:f8:44:b5:ae:ab:44:ac:30:
7e:e1:b8:28:6a:e4:eb:8d:c4:ab:d2:a4:fe:05:e5:eb:96:36:
0b:e8:69:c1:65:83:65:df:04:57:c7:52:55:03:fc:86:1e:04:
f3:5e:c6:47:d9:9e:09:be:34:23:fe:46:13:b8:eb:16:61:59:
a0:58:1e:66:ce:52:3e:36:65:07:10:b5:b6:bd:f8:f0:e7:a7:
59:d4:2e:98:2d:75:a6:88:da:54:2c:4b:69:7b:5d:ec:b1:af:
61:5f:34:2d:c4:33:96:a5:7b:13:8f:55:42:b1:83:55:c8:f5:
be:5e:9e:2e:75:96:d3:34:93:6c:0d:69:f0:43:e1:61:cf:c0:
8b:6c:66:ee:8c:d2:48:97:25:a4:4d:44:f2:26:33:01:51:76:
86:f2:e6:7f:f8:05:e5:53:71:b0:07:c8:8d:ea:37:8b:88:4c:
da:a7:2e:ab:7b:d5:46:c3:a7:35:1f:27:44:a3:98:17:40:4e:
67:e9:20:fd:1a:50:2e:57:6e:ae:e0:85:9e:e7:be:a3:25:b4:
89:4a:a8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:41:59 2025 by rpki-client