Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: l/5PJOPBP76sgJ+N/8J5ocQBjC/2BeXtDsiGcDW5/8o=
Subject key identifier: F8:E5:7A:AC:19:27:5F:F9:5C:53:1C:06:CF:E3:50:41:71:B0:6C:5A
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 019A7149F8E556225FE56E29AC92A3A6A614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 09AC
Signing time: Tue 11 Nov 2025 05:01:04 +0000
Manifest this update: Tue 11 Nov 2025 05:01:04 +0000
Manifest next update: Wed 12 Nov 2025 05:01:04 +0000
Files and hashes: 1: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: 75wWPQK3zEQfD36Emeg6j+/Y5feBzsm1RxYURP8zHp8=)
2: _-WfGC5BAnZg40YHw-xkJtMu1y8.roa (hash: fBNuXZvCsQYQGG7z7gRAz8VOFKDx2N1N7BNPe/5ZuRI=)
3: quGmI9u7kZ_srTH3LAyxtNKvCAo.roa (hash: RhLYYew4zXRTIVHsFT/3lhPwJj/c1cXNf2IyJ1qOi6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f8:e5:56:22:5f:e5:6e:29:ac:92:a3:a6:a6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Nov 11 05:01:04 2025 GMT
Not After : Nov 12 05:01:04 2025 GMT
Subject: CN=f8e57aac19275ff95c531c06cfe3504171b06c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:5b:aa:ed:6b:08:a6:e2:18:cc:a7:bd:30:
c6:9f:84:17:31:d3:7a:ab:b8:32:48:4d:6b:2b:82:
85:ff:48:7b:fe:5b:1c:8d:da:c5:61:e3:70:af:04:
b9:c7:f8:f4:14:64:99:2a:ff:20:7c:bd:c7:3b:a6:
fa:73:2c:38:6e:64:5d:84:38:85:8d:f9:df:03:f5:
93:e0:76:cf:3b:c1:67:55:9a:9f:d4:8c:34:1b:ed:
f4:f1:3f:ce:e3:b1:d5:59:99:24:9e:5c:52:11:87:
d3:06:5e:3b:b0:72:b9:ac:a1:06:9a:da:fc:d4:11:
ba:68:33:1c:18:f8:cf:b1:22:a2:61:96:a3:af:1b:
2a:cf:64:fd:e9:1e:7c:ea:ff:54:7e:c1:24:d4:d5:
9b:a7:49:c1:4e:37:0a:aa:3d:69:d2:1c:b2:bd:3f:
e5:b9:2f:f1:d4:fb:36:b4:ea:ba:88:6f:b7:f1:ee:
21:e9:12:a8:19:5c:b0:4c:35:8a:b5:ab:c9:48:32:
f5:e3:4d:bf:23:91:4f:b2:6b:99:04:8f:31:e5:57:
d8:88:aa:5c:f3:38:2d:c0:9b:b9:e7:09:6f:f8:dc:
1e:9a:96:c1:f1:de:a2:ef:13:df:b9:9e:9f:cb:09:
57:8d:21:9f:b6:f6:2e:ba:8a:0a:e6:70:95:bc:88:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:7A:AC:19:27:5F:F9:5C:53:1C:06:CF:E3:50:41:71:B0:6C:5A
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:40:19:df:af:70:d1:cd:66:30:61:e1:4d:65:06:fa:9b:6c:
c2:a2:b2:48:5c:72:f7:1f:c7:43:27:34:83:17:7c:fe:d7:f2:
b8:44:18:18:e7:86:43:81:97:82:96:42:b0:3c:6b:f6:e3:be:
99:6c:8a:65:3d:f2:01:cc:3c:c4:ed:71:0c:48:42:e6:d3:25:
41:ab:80:f2:db:f8:e3:99:d1:fb:55:c1:17:ac:c6:89:4e:6f:
56:26:7c:35:8f:0c:05:1e:c6:fe:8d:ae:95:a7:e5:97:e1:f8:
65:fc:72:c6:a2:77:39:61:72:20:f3:a2:42:3a:7d:62:c6:4c:
d3:12:8a:d0:12:1d:7b:56:52:ca:68:7b:92:89:c2:63:52:a7:
1a:d6:e6:eb:c6:ce:d5:b9:e6:6a:f6:d0:9b:ab:da:ae:1b:b7:
49:9e:33:40:76:ad:d3:56:bc:20:ad:9a:6a:b3:73:1e:19:eb:
d1:27:23:c0:dd:44:f9:a6:79:c5:10:28:3c:79:65:82:fd:6f:
47:a7:a8:5e:5d:95:1b:a7:d5:d5:cc:da:d5:99:05:22:28:80:
0b:dc:71:ae:f1:d6:31:04:c6:fc:61:b4:99:df:78:39:1e:67:
fc:b5:c0:bc:c9:ff:74:58:a6:ec:95:72:7a:48:28:95:e4:d5:
bf:60:49:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:46 2025 by rpki-client