Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
File: pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft (raw, json)
Hash identifier: vc3avA6zw2mX6RlFIgLvBrqdOFGOsm2csFG/Tq0tw/4=
Subject key identifier: B1:10:6E:50:AA:72:0B:69:7A:5E:69:15:60:C9:BC:35:66:F3:1F:ED
Authority key identifier: A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00
Certificate issuer: /CN=a5cde204a3669f9281ee1fc1d5f248542a805e00
Certificate serial: 019A70A53548006162DF50F257BA3FE14E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
Manifest number: 4B
Signing time: Tue 11 Nov 2025 02:01:06 +0000
Manifest this update: Tue 11 Nov 2025 02:01:06 +0000
Manifest next update: Wed 12 Nov 2025 02:01:06 +0000
Files and hashes: 1: 1-DK7gQMR3zOiiYwp61HeTTqzJBE.roa (hash: 67WBQ3gib1UB5ugiA0n6m252R05HZIyEYElD2sa4klI=)
2: pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl (hash: OKzHUE4bZs97F+VZdraqolGDr4kwUX+OtyUJrV0wkzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:35:48:00:61:62:df:50:f2:57:ba:3f:e1:4e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cde204a3669f9281ee1fc1d5f248542a805e00
Validity
Not Before: Nov 11 02:01:06 2025 GMT
Not After : Nov 12 02:01:06 2025 GMT
Subject: CN=b1106e50aa720b697a5e691560c9bc3566f31fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:66:14:ab:33:9d:cb:18:df:34:a9:c3:c7:
22:b8:81:37:f3:a4:ee:dd:31:cc:47:d9:6b:ca:be:
88:ac:78:6e:b7:fe:0a:c5:b4:52:e1:31:d2:4b:5e:
c9:5f:24:6c:49:3a:11:fd:ab:5d:44:2f:68:c2:5c:
63:ef:bb:5c:9f:ae:0f:c1:9d:18:82:71:23:bb:26:
50:62:69:9e:fb:c2:43:62:f5:d9:59:34:45:84:81:
ad:a1:a2:0d:1f:4d:77:e8:8d:d1:f9:d6:07:69:ea:
98:74:41:fa:b8:98:57:3f:09:09:09:7d:00:2f:72:
40:bb:9f:3b:d5:21:0a:c6:50:17:5e:b6:58:6d:78:
53:44:de:8c:dc:2c:71:e6:05:cb:7a:33:51:16:97:
14:79:d5:dc:ef:e0:87:3a:75:c4:7f:78:af:6e:bd:
c3:2d:9d:2e:03:39:16:30:f7:07:0e:2c:64:f9:d9:
a2:df:66:c5:87:1b:f8:52:91:63:a4:32:39:68:5d:
dc:7c:d2:a7:73:53:20:ec:b1:ca:d7:9f:b7:b8:c4:
a1:01:f7:17:e2:4c:93:bd:06:5b:aa:86:c2:5f:12:
56:48:98:f6:eb:2a:98:66:88:37:7a:21:5b:77:51:
b5:f5:03:ad:9a:e6:52:66:ed:aa:e0:a1:aa:bf:9e:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:6E:50:AA:72:0B:69:7A:5E:69:15:60:C9:BC:35:66:F3:1F:ED
X509v3 Authority Key Identifier:
keyid:A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e3:3d:d6:47:f7:54:d5:07:46:c8:5a:9f:3f:2d:cd:6f:af:
0b:e1:0c:22:2e:e4:8f:98:fd:b4:10:9c:79:05:97:bc:9c:6f:
4c:5b:4d:0a:af:1f:db:ca:d1:53:10:45:6f:63:0d:f7:3e:a6:
74:aa:38:25:b8:99:d1:c5:c0:e7:7a:9f:73:1d:90:d4:2b:78:
1c:66:fd:90:9e:97:4d:f4:19:75:26:13:1f:f8:3c:ce:0f:3f:
c6:60:e2:40:90:16:34:64:74:bc:51:7e:e0:06:66:fa:47:e7:
67:5e:32:6d:58:cf:5a:e5:07:1e:3d:5d:c4:26:24:c0:4e:de:
a3:25:ea:c5:39:ce:ca:57:83:26:f3:f8:9a:bd:3f:bc:1a:92:
25:35:6d:71:14:bd:b1:dc:2c:b6:c1:9b:5d:91:57:a2:68:60:
e3:5d:4e:23:ea:41:5f:e8:7b:7c:00:5a:eb:a3:09:d3:03:ba:
2b:df:92:b1:5e:8c:7d:c5:e5:18:a4:28:4f:83:e4:08:8c:c2:
ff:80:40:ce:06:cd:96:9d:22:0f:35:bf:52:c1:66:71:5b:e9:
8f:62:cf:aa:20:65:93:9a:d3:50:c9:09:c5:22:e0:28:cd:45:
3f:80:b1:4f:4b:42:26:3e:ad:2c:af:8d:3f:0a:8d:61:69:bd:
a7:6a:ab:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:53 2025 by rpki-client