Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
File: PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json)
Hash identifier: jwsQpzPC8kg3S7yMbUk35lniRh6zIdPJB0W+rI7BnbE=
Subject key identifier: 60:10:5F:F4:42:F3:72:1B:AD:E2:B5:83:16:F8:9D:D6:1F:49:37:32
Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
Certificate issuer: /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Certificate serial: 019923D6549FF949B29ABB42A1D9DF4AD3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
Manifest number: 0DE3
Signing time: Sun 07 Sep 2025 11:01:12 +0000
Manifest this update: Sun 07 Sep 2025 11:01:12 +0000
Manifest next update: Mon 08 Sep 2025 11:01:12 +0000
Files and hashes: 1: FYDxNKC7eVGhTXJyh7DYdQpF13Q.roa (hash: QGlq0akFOdxYp0jPfxez742IAGFVAdJ6BpKN9aAo6FU=)
2: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: BQSDLRLb/b74ipEMjDGWBz41Dpsl/f1BfIjaHDtyTsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:54:9f:f9:49:b2:9a:bb:42:a1:d9:df:4a:d3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Validity
Not Before: Sep 7 11:01:12 2025 GMT
Not After : Sep 8 11:01:12 2025 GMT
Subject: CN=60105ff442f3721bade2b58316f89dd61f493732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:85:d9:ad:1d:3c:6c:36:dc:41:19:f8:77:
70:a4:cb:99:8b:11:86:0a:f7:94:1f:85:cb:a4:b6:
48:54:8e:e0:8f:79:f9:f4:03:d0:ad:21:ce:94:1d:
52:48:6f:7e:15:f5:8d:c7:3d:2f:10:b2:14:3c:ec:
fc:f3:7b:cc:a3:dd:08:d4:27:36:36:ac:7c:11:ee:
c4:6c:1e:69:81:1a:1a:d7:b1:2e:ce:2d:e5:e9:2f:
87:5c:a3:4a:a4:dc:1d:c3:fc:36:4a:22:39:c9:d1:
68:c5:43:fd:09:42:40:4d:d7:38:9c:48:4d:7e:8f:
c8:00:54:c8:66:cc:fa:d9:02:f2:1c:16:9a:77:5b:
cd:92:be:6e:2f:d8:ac:96:e1:f5:dc:bb:ff:e1:9d:
5d:13:af:00:0c:39:82:8d:1f:ec:ac:15:0b:31:6c:
22:df:54:4b:71:ff:e9:b2:d0:49:71:46:30:15:e6:
9c:f0:52:79:66:52:d8:83:07:22:b0:4c:0e:02:18:
cf:18:2c:21:56:bb:80:b5:b0:2e:cf:50:7a:cc:7d:
f2:c2:d7:f7:97:17:b9:57:8a:f6:15:e3:3f:2b:f3:
4a:74:23:9c:23:46:ce:d8:b0:fb:11:ae:20:1d:ee:
d1:a2:9f:00:3f:50:29:43:e6:80:91:7c:3f:8c:52:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:5F:F4:42:F3:72:1B:AD:E2:B5:83:16:F8:9D:D6:1F:49:37:32
X509v3 Authority Key Identifier:
keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:32:5c:38:14:7f:99:21:47:06:7d:f7:64:89:c9:38:6c:ea:
5e:8e:cd:57:c0:36:de:38:58:11:e1:7f:ba:48:3a:45:09:2d:
3b:ce:fe:5d:47:29:e0:59:8f:92:b9:6c:6e:10:ae:6c:2b:f7:
8f:e7:69:51:31:42:62:63:07:9b:7c:63:1a:2d:28:b3:ba:52:
2c:71:14:56:83:b7:23:18:af:4d:b7:66:09:ac:cb:14:86:0c:
e6:39:17:00:85:03:c6:29:0e:4a:9b:35:c1:1c:68:6c:3d:aa:
2b:a9:9d:3a:e9:16:a6:1f:15:bf:c1:56:bd:fc:fe:f4:a0:a8:
81:3a:98:f1:21:18:80:7f:e6:a4:84:c1:27:37:bd:fe:bf:54:
d9:fe:33:1a:1d:01:55:09:69:28:53:b3:97:6b:a7:2d:3f:6f:
3d:77:6f:6d:0b:15:ab:fa:40:4d:4c:98:e5:3b:ea:fd:5d:8e:
17:a1:26:04:64:07:76:95:51:18:dc:b6:9d:ab:50:cd:5a:40:
17:05:b9:a9:45:cd:af:38:0f:3f:d8:ec:2f:a5:a2:78:99:46:
70:72:74:30:66:5f:d5:16:dd:80:a6:35:7b:2b:e6:d1:de:e2:
ed:5e:35:f1:69:f4:5a:a6:38:7e:cd:65:fe:e6:7b:83:5e:3d:
f5:62:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:41 2025 by rpki-client