Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: jjHgm/9yWhmQTo35EZh2qvSAA/hYv55nDGFxmnMv2kM=
Subject key identifier: CE:57:FF:42:D2:B8:99:90:A3:00:20:60:78:71:17:3F:7C:C8:C4:38
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 019A71B8423B49D34519109CC284A09CABB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 109C
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: EsU/k+mLkpNtvBbH+mIhMy0J7xNt2lXfa3p2GYLlvL0=)
2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:42:3b:49:d3:45:19:10:9c:c2:84:a0:9c:ab:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=ce57ff42d2b89990a30020607871173f7cc8c438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:aa:cb:05:a5:76:90:ad:8e:e7:97:14:31:
26:54:ab:22:cb:40:d7:f1:e0:b4:0f:b5:a4:12:09:
3e:fa:9f:f7:5a:f9:b1:b1:98:5f:c8:3c:34:0f:4b:
49:62:77:06:77:9d:27:2e:5f:d7:5a:ed:9f:07:23:
80:9c:56:3e:5f:52:77:b8:d3:69:13:80:56:d3:16:
26:1f:70:c8:39:7f:a8:8b:d0:0d:c4:32:a6:3b:ad:
b2:e1:db:23:56:10:12:af:d8:b0:ea:e6:1d:5b:40:
2b:a6:a6:d5:ab:b7:38:ec:83:5b:45:95:4d:eb:52:
9e:d0:e6:6f:08:ba:99:b3:51:ba:46:e5:8d:4d:4a:
5a:f3:62:fe:61:21:3d:44:d2:e0:53:87:d9:14:03:
35:10:31:3e:ca:77:33:80:57:e8:b5:05:20:b7:66:
11:3c:c6:21:60:14:4b:21:1d:36:14:bb:f1:40:8e:
25:7e:52:e1:ae:2a:f7:e2:66:86:02:4f:ac:4e:10:
4e:50:d9:6c:23:fb:8d:6e:af:aa:45:e3:eb:8b:36:
b6:68:c4:27:74:53:00:1f:5b:1f:a2:fe:09:1b:35:
b5:f8:20:4b:32:7c:e0:92:db:da:68:4b:f7:ec:af:
34:1b:fe:32:9a:66:d3:af:f1:f4:e3:13:44:58:99:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:57:FF:42:D2:B8:99:90:A3:00:20:60:78:71:17:3F:7C:C8:C4:38
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ab:8b:1a:0a:0a:a5:d3:f1:b7:32:42:c1:30:2b:63:38:5e:
a0:9e:c1:06:56:c4:7c:e0:cc:5a:5f:f4:a8:f4:40:24:91:19:
87:0f:99:f8:b9:37:6e:4a:5b:23:71:60:22:b5:da:6c:2b:72:
55:e2:91:01:7b:ce:e1:11:f6:77:1a:d3:ae:40:31:75:c0:74:
44:38:d6:44:9c:05:df:7a:ea:b6:1d:a7:8c:2c:6f:11:e3:fe:
2e:37:4e:d3:59:b5:29:0e:b0:01:27:d7:b9:77:98:5c:cf:e5:
e9:cd:0f:e6:e3:13:2e:39:aa:83:c4:7c:a1:35:bf:a2:46:4a:
9b:81:dd:7a:96:b0:d9:53:21:2e:88:4d:11:a3:03:f9:bd:96:
9d:ae:cc:97:5e:bd:07:e2:bc:3e:a9:da:52:3d:a2:7b:7c:42:
49:bb:f1:a0:27:2c:61:4a:53:15:a4:91:59:05:97:34:1b:30:
87:21:ac:db:e0:69:ca:88:af:0f:81:7f:2a:57:46:c0:bc:3a:
67:f1:fe:8b:0c:92:3f:a2:7a:dd:c7:3b:2a:8a:bf:bd:60:5e:
8d:1f:9a:ff:0d:4c:c2:34:d9:a5:64:b1:06:35:24:ac:20:bc:
a5:11:72:9e:a4:60:a6:dd:6a:d7:38:fc:1b:43:5c:d6:83:e3:
61:f3:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:55 2025 by rpki-client