Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier: I1uMLntMVJqNFZj6XNdeMB5OFb0osxhCsRH3+y7KT2g=
Subject key identifier: 5A:89:B2:08:5C:AC:DD:2A:07:58:D8:4A:38:30:D1:0E:8D:45:08:CC
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 019A71B7737A74A2A45D3682888D8884D06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number: 06B4
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=)
2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: xbk9PECJ5VN2uje+mYEF0amLw6ymQy3tcm9mwOXoZF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:73:7a:74:a2:a4:5d:36:82:88:8d:88:84:d0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=5a89b2085cacdd2a0758d84a3830d10e8d4508cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:4b:15:2a:c3:aa:4f:87:31:b0:2d:03:aa:
78:76:d4:b5:96:d3:02:5f:94:c8:9d:66:58:b7:d7:
7b:56:0d:f8:f7:06:09:c0:f5:9c:41:ef:98:2c:86:
e2:33:58:d5:59:33:1b:bf:0e:c6:8d:e5:53:60:49:
a6:25:41:64:d5:2b:7e:e3:84:7f:61:ee:d7:0d:a1:
ec:f4:28:ca:f6:d2:9f:43:4c:3a:b4:28:ae:3b:d6:
df:f4:29:34:fc:cc:57:d7:95:4a:9b:e1:74:68:bd:
08:11:e2:e4:18:ab:77:85:70:a2:08:8f:7c:15:8f:
ad:7a:57:0f:89:40:61:46:3c:5e:5f:6c:2f:19:eb:
e1:04:4c:52:c8:7e:10:5e:8a:13:58:f7:3d:66:e5:
b2:79:67:64:1e:5c:b1:16:38:b2:9c:48:71:e1:e6:
54:4e:56:17:c3:b2:4b:37:4c:7e:b2:c6:02:0a:dc:
f6:bf:2a:aa:5a:47:e4:61:5c:21:76:43:36:ff:9d:
e7:4a:a4:0e:6f:fe:ce:c6:39:e7:12:ac:97:e2:fc:
61:23:2b:26:5a:77:36:a6:c8:9c:62:f5:62:d2:ad:
af:42:04:d5:6c:90:6a:67:fb:8b:91:be:d0:42:0a:
8f:98:c7:34:c7:7d:90:1e:3a:b7:c0:22:69:ba:b3:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:89:B2:08:5C:AC:DD:2A:07:58:D8:4A:38:30:D1:0E:8D:45:08:CC
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ef:bf:fa:b7:2b:ec:94:72:c6:52:68:2f:6c:90:f0:30:72:
b4:4b:79:3e:e6:40:03:55:9f:b6:14:9c:0d:45:77:76:a5:fa:
43:3c:1b:77:f1:f4:d7:d9:1f:41:22:9e:fe:5c:eb:82:65:b4:
9a:07:7f:6f:85:5e:49:ae:ad:de:a1:52:3a:03:b5:96:07:50:
2f:ee:33:ae:15:b3:6c:a4:c2:b7:a2:73:ef:2f:9c:ee:43:84:
6e:e0:06:b3:1a:b7:af:0a:fc:96:84:dc:c1:3e:38:f9:2a:bf:
8c:17:a5:75:54:f9:2c:32:b8:95:e0:17:92:fd:a6:d3:d5:e8:
4f:6e:0c:00:8c:3e:0e:a1:96:92:24:aa:60:9d:fd:3d:03:21:
09:7a:77:58:47:34:28:4d:7f:40:75:a3:5d:0c:80:85:24:98:
a1:c1:fe:57:1f:3f:f3:65:7a:63:04:9e:44:06:64:db:76:8d:
c2:e6:69:a6:8b:53:45:6b:3a:0c:e5:ef:db:a5:fc:dc:36:7b:
27:1f:2b:8d:9c:a9:ab:4f:f8:10:d4:96:a5:7f:ae:ab:6b:1a:
a6:05:0d:d4:66:64:88:17:78:00:a6:98:ad:28:3b:a8:8a:a0:
39:55:8a:eb:4a:6e:71:22:91:e6:e4:dd:fc:3e:b0:c6:91:34:
31:7d:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:38 2025 by rpki-client