Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: 8dFbvokGUKqKxWBnjvAKBAsooBvRmjaajOw6Ows108c=
Subject key identifier: 48:EC:2C:4D:3E:8A:55:9F:BB:5F:33:06:AC:59:88:05:6D:A5:F1:0E
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019A1D9A101DE6E8F2649D847989F9EF8FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1131
Signing time: Sat 25 Oct 2025 23:00:27 +0000
Manifest this update: Sat 25 Oct 2025 23:00:27 +0000
Manifest next update: Sun 26 Oct 2025 23:00:27 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: OEATfHovpW9BDajmw9XGUfjPsfu+a5CZoElPbgNO15o=)
2: X4mIRbShCI_swD4AYibAfXumzPE.roa (hash: ZCD8FV34ZVGGbkTB2fH3uXc5W92QDu1a+e1QI3r0+es=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:10:1d:e6:e8:f2:64:9d:84:79:89:f9:ef:8f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Oct 25 23:00:27 2025 GMT
Not After : Oct 26 23:00:27 2025 GMT
Subject: CN=48ec2c4d3e8a559fbb5f3306ac5988056da5f10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:5a:7d:53:04:84:e5:bb:02:66:06:32:55:
74:d8:9b:a5:e5:1c:d7:40:87:49:be:39:37:e5:06:
8c:cd:21:25:35:7a:19:ec:bd:1c:a1:23:bb:98:0c:
ba:6b:a4:00:9f:aa:12:61:31:3a:3c:b8:a4:97:db:
5f:3d:d1:df:38:97:f2:82:c6:a9:15:1f:85:95:6d:
df:c3:b5:f7:20:39:7d:29:9e:78:cf:4d:2a:ae:e0:
d9:a9:d8:fb:e8:a9:ca:fd:df:e7:d1:b0:4c:34:76:
96:84:cd:01:e0:4d:1d:09:8e:ca:b1:ef:b9:d6:d6:
c6:5f:95:d4:07:3e:eb:fa:68:32:a3:ff:0a:f1:b3:
8b:ff:64:25:a0:47:46:b2:92:a6:39:10:15:17:3a:
c5:81:45:19:7e:99:20:54:7d:69:3b:a3:5b:08:e2:
dc:ea:98:7a:5c:11:90:b5:4e:e5:bd:f4:56:15:f8:
46:df:71:8e:de:fa:0b:c4:dd:33:dd:a1:08:2c:bb:
6f:f0:82:94:0a:1b:eb:9c:6e:19:4d:5a:1a:11:64:
cb:02:96:60:cd:b8:fc:b3:c6:d3:da:36:44:d4:fa:
d8:a6:4f:1c:59:13:f4:f7:ae:a1:55:6d:51:04:8b:
73:f9:e9:3b:87:bb:19:84:dc:d7:f6:68:6e:37:54:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EC:2C:4D:3E:8A:55:9F:BB:5F:33:06:AC:59:88:05:6D:A5:F1:0E
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4b:c8:98:af:17:f4:8b:6a:d1:43:e3:2c:fa:0e:fc:00:8e:
76:1c:69:f0:18:f4:02:db:db:5c:cc:de:f5:74:bf:93:65:09:
a5:ff:02:dd:e4:89:82:fb:d3:f0:09:c6:b0:0d:af:0f:6c:d6:
79:de:ec:fc:65:c8:cd:70:62:56:99:b9:17:a0:2a:87:c9:f3:
ca:b0:b2:26:85:5e:e8:6d:4c:00:49:74:b7:77:35:dc:ae:6a:
76:18:63:9d:53:e8:b5:93:a0:09:6e:af:95:2d:c9:c3:c3:60:
f8:6d:d7:80:c2:74:a0:bc:8c:97:ee:41:03:55:18:51:69:10:
b5:41:5a:4a:ac:8d:b7:0e:e4:57:b0:e4:a7:11:37:07:7a:9e:
77:c9:b4:44:a1:fa:27:33:6c:59:ae:b0:32:95:44:98:43:cc:
95:05:cc:24:92:5e:01:38:91:28:24:d8:8c:2d:72:9e:d9:fc:
5a:9b:02:4a:47:cd:51:26:eb:8e:38:b9:27:a3:4b:d9:33:d0:
e5:77:02:01:56:10:bc:bc:99:7d:e5:d7:1c:3d:c6:e7:e4:5c:
73:52:8d:7a:57:e7:65:1f:7f:fa:72:5e:45:1e:b9:b0:56:b8:
cc:c2:0a:17:55:a6:86:1a:21:48:0a:ab:c1:2d:5f:80:33:61:
e5:4f:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:11:16 2025 by rpki-client