
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
File: PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json)
Hash identifier: 7MvTBoExTW9Ni78Qm0KdN825EKXeSN6RxLMWDcVPpCg=
Subject key identifier: B7:F6:30:99:2C:E2:28:47:1D:F2:7A:28:FF:F6:D5:F7:93:0D:4B:30
Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
Certificate issuer: /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Certificate serial: 019A71B89A919AE35DFE298454CFF3E7753B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
Manifest number: 0E90
Signing time: Tue 11 Nov 2025 07:01:54 +0000
Manifest this update: Tue 11 Nov 2025 07:01:54 +0000
Manifest next update: Wed 12 Nov 2025 07:01:54 +0000
Files and hashes: 1: FYDxNKC7eVGhTXJyh7DYdQpF13Q.roa (hash: QGlq0akFOdxYp0jPfxez742IAGFVAdJ6BpKN9aAo6FU=)
2: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: lbMiHdA/7rbAwFCbKj39g0v8Gh5tC8Pe5x1m1z9OTes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9a:91:9a:e3:5d:fe:29:84:54:cf:f3:e7:75:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Validity
Not Before: Nov 11 07:01:54 2025 GMT
Not After : Nov 12 07:01:54 2025 GMT
Subject: CN=b7f630992ce228471df27a28fff6d5f7930d4b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:11:05:a4:a3:d6:4f:c9:a9:75:08:90:7c:
f9:49:73:31:d4:6d:ab:7e:13:60:92:45:eb:99:88:
02:36:4f:5a:42:b1:9c:8a:62:cf:eb:64:f6:9f:da:
09:e6:40:ed:1b:2c:ee:d4:a2:7c:14:c0:fd:a6:32:
f3:0c:23:47:8a:0f:8b:2c:6f:1f:e0:a1:04:59:db:
12:b4:18:fa:4c:0e:c3:cd:6a:f9:b4:64:6f:0c:89:
11:c8:60:9a:b8:08:6b:8f:22:f1:cc:4b:53:41:03:
0d:a4:ca:6c:46:33:95:28:47:5b:a2:02:47:e2:24:
8b:d7:f5:94:f4:7e:03:f6:5b:d5:29:9f:ee:fc:1d:
e1:88:33:39:1e:00:fe:ac:de:90:dd:6b:a8:c3:1d:
3e:b7:11:06:81:cb:74:83:94:1b:77:79:3c:fc:cc:
ad:a6:09:1d:84:4a:74:ac:f5:b3:d0:e4:5a:dc:2f:
f0:e0:a1:68:91:df:85:4c:24:1d:df:e0:03:52:eb:
fa:d1:f8:5b:49:73:d8:7d:2c:24:98:ee:39:fe:06:
4f:16:90:4f:7a:15:53:07:77:eb:c7:45:87:db:e9:
11:df:f8:17:cc:5e:4d:4a:ce:d5:54:49:cf:d4:ab:
57:28:d8:41:20:73:54:c7:df:b4:20:27:18:e9:07:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F6:30:99:2C:E2:28:47:1D:F2:7A:28:FF:F6:D5:F7:93:0D:4B:30
X509v3 Authority Key Identifier:
keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:96:93:dc:82:59:1d:31:a5:3a:6e:2e:bd:9f:40:ca:f0:60:
b8:e1:6a:78:5f:af:62:86:46:e2:ca:35:9b:5e:3d:85:78:6f:
73:1c:e3:ad:50:c4:aa:c0:de:93:26:27:eb:dc:3f:a6:26:e2:
50:fa:c7:29:d1:49:b8:12:25:7d:af:a8:e9:5b:e2:15:9c:ce:
a6:be:37:23:99:25:ea:a9:2a:0f:81:c0:9b:cd:30:cf:85:15:
32:61:a0:20:bd:80:2e:f9:89:46:c9:1c:cb:c5:80:e3:87:fd:
1e:c3:62:a1:58:88:53:66:37:f2:3d:34:30:b7:b1:a9:0d:5f:
a6:84:62:b3:57:91:f3:9a:ce:d4:87:7c:ba:05:7b:ba:a0:cd:
0d:0e:c2:27:0b:56:ee:12:04:37:23:e0:76:84:f4:e4:11:dc:
2c:3e:13:92:8e:d8:d1:db:a4:af:39:8a:53:4c:8f:d0:78:49:
69:ef:b5:bc:0d:2f:87:4d:2d:95:95:17:74:ae:c3:98:7a:ae:
da:ff:18:c1:0d:e4:f9:1d:c5:3b:65:28:e1:e3:f6:17:44:de:
48:78:f3:97:f2:12:95:58:bb:64:4a:83:1d:45:5d:4a:13:17:
6c:06:81:ce:bb:27:a7:d0:7d:81:78:aa:65:58:70:6c:62:34:
48:6c:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:07 2025 by rpki-client