Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: R3pJv7ScKkZz7owo7R2oLmGD2maCR31qqpMbt0gqkBI=
Subject key identifier: 49:84:D8:10:91:93:F2:DD:90:FC:A1:88:9F:38:7A:31:40:51:D6:50
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019A21E4CA0F4A74BC496C57AE35908BCECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 19:00:33 +0000
Manifest this update: Sun 26 Oct 2025 19:00:33 +0000
Manifest next update: Mon 27 Oct 2025 19:00:33 +0000
Files and hashes: 1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: 421sJvYdeVxg8X9XKpjcAy6kQ6UEu+lR8Ag9RIgA6Vs=)
2: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:ca:0f:4a:74:bc:49:6c:57:ae:35:90:8b:ce:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Oct 26 19:00:33 2025 GMT
Not After : Oct 27 19:00:33 2025 GMT
Subject: CN=4984d8109193f2dd90fca1889f387a314051d650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:43:c7:36:7e:0b:88:d1:98:92:51:49:86:
13:17:76:e7:d4:e6:93:76:aa:6f:b5:34:92:52:65:
07:5e:81:cc:a9:14:5c:65:2f:7d:ae:0f:42:b0:b0:
43:66:ea:ff:1a:55:b1:01:42:d7:fd:7d:a1:88:20:
62:b3:40:53:e2:cf:54:81:50:bc:6b:86:2b:ab:49:
e0:58:2a:62:49:39:1a:1d:dd:90:72:36:c9:b6:5d:
16:bc:d9:65:09:7a:2d:29:72:bf:a3:0d:84:7e:ce:
e1:3a:6d:56:35:7f:76:9e:49:be:73:b6:9f:b8:f1:
86:30:d4:38:fd:e3:1e:81:a7:24:91:29:0f:0a:f1:
ab:87:26:3e:52:40:81:99:fa:4d:22:e5:55:53:70:
81:fa:6d:df:8b:6c:64:7a:94:a5:ff:16:20:c1:29:
74:1b:ad:3f:01:96:fc:1f:e4:ba:3b:67:11:a6:ee:
b3:6f:53:cf:01:78:f9:92:14:0a:65:ca:ac:19:f8:
20:cc:b0:fd:a7:a4:61:3d:97:e5:9c:ac:b5:f5:6e:
dd:17:56:3d:0d:bd:b3:e8:b2:5d:23:77:32:8b:d1:
8c:5d:80:c7:10:d7:c7:80:80:c3:04:a3:79:e2:8a:
45:92:ed:d5:a5:a1:d2:6c:29:c1:df:3e:f2:96:fe:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:84:D8:10:91:93:F2:DD:90:FC:A1:88:9F:38:7A:31:40:51:D6:50
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d0:b0:ad:f3:bd:ae:88:df:6c:e7:1e:52:84:2a:b3:59:e7:
64:f1:a2:49:4a:21:a6:3b:8c:f1:ac:74:7f:01:20:4c:6a:e3:
29:4e:1d:ab:09:bc:12:56:4c:f5:69:d6:1b:fc:64:7d:ce:03:
65:38:41:27:13:73:63:4e:24:97:04:a8:7e:9c:13:cc:a9:90:
bb:17:23:e6:89:8e:d9:a2:77:64:40:df:3f:3e:a4:b6:c6:c3:
9e:4e:4f:b1:83:7a:93:e0:7d:16:c8:4e:91:b0:ee:2a:79:da:
70:90:15:e8:ac:65:1b:f3:d0:fd:42:78:77:15:ad:35:4f:c2:
c2:41:d0:72:1c:7d:00:10:d1:6b:59:9a:12:db:fb:2c:df:03:
49:52:32:19:cf:0d:38:cf:c1:b3:94:6a:91:22:a0:95:48:5a:
ec:d2:29:aa:53:00:76:b3:3c:ba:a7:9e:b7:01:cd:f5:e5:75:
82:19:fd:8e:2f:5e:36:12:ee:82:84:41:5c:bb:f0:ce:7a:29:
7b:2f:81:a2:11:ed:c1:aa:62:bc:3c:1a:ab:d6:9c:a8:35:f6:
77:37:98:9e:e1:2d:4a:b2:0b:51:eb:24:14:ac:72:c9:fe:ea:
4c:1a:87:d0:5b:a0:c9:dd:cc:dd:0a:28:f7:06:a2:87:f3:dc:
02:32:4f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:39:24 2025 by rpki-client