Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json)
Hash identifier: 9J0wavX5ixyVw35zcvdb6AWomahHMNTACVyA0zyttp4=
Subject key identifier: 35:20:73:7F:4E:1F:FC:54:E4:BF:13:13:12:D5:71:1D:46:EB:C6:AA
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 019A72CA39F72CBBC09E408F69DF256B689D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
Manifest number: 1439
Signing time: Tue 11 Nov 2025 12:00:46 +0000
Manifest this update: Tue 11 Nov 2025 12:00:46 +0000
Manifest next update: Wed 12 Nov 2025 12:00:46 +0000
Files and hashes: 1: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: gPDRrQFsViS44XQtGe/cV5i5YKzxGFDka0AbREa+5G8=)
2: WUGlCtJw6cpU2FG2Edk0WX6jTy8.roa (hash: JBmFXCHcBO6dIcBHrxlCuuoBtse/nvSs/yMZuy61tLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:39:f7:2c:bb:c0:9e:40:8f:69:df:25:6b:68:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Nov 11 12:00:46 2025 GMT
Not After : Nov 12 12:00:46 2025 GMT
Subject: CN=3520737f4e1ffc54e4bf131312d5711d46ebc6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:88:23:fa:5e:6b:09:c7:de:10:99:fb:96:
e8:26:d3:cd:27:a4:98:e1:99:24:dc:d4:92:e8:6a:
71:43:32:e3:dc:fd:98:a3:93:07:32:c3:1c:2f:27:
a9:58:e0:0d:ea:22:c0:67:4d:cd:22:8e:e4:91:cb:
cc:2f:76:00:af:b3:2b:30:3c:73:61:c6:d5:3d:db:
f0:22:be:4e:9c:2d:9a:d1:ef:b1:48:74:ed:d0:67:
d4:c5:fe:0a:4c:0d:22:ea:f6:dd:8d:39:ca:03:94:
c6:7a:fa:13:01:e4:93:17:cb:19:71:4f:75:e8:e3:
a2:84:2b:c4:22:20:f3:3e:e4:20:fb:9a:7a:57:18:
1c:e4:b6:c5:21:8c:03:f0:5a:d6:83:f6:2b:f8:a1:
c3:c5:5b:77:0b:ea:e3:5f:da:ad:c3:c8:e2:a5:0c:
8d:23:eb:1e:20:fd:75:8d:49:97:1f:bf:dd:64:ab:
9b:19:b9:44:99:a5:04:9a:51:e5:a6:ca:48:bc:39:
74:8f:4d:ad:34:4f:23:2b:ba:c8:21:d4:2e:33:27:
d7:6e:96:8f:aa:6a:91:75:70:5e:a7:71:e6:71:67:
f9:af:21:6b:10:23:71:2a:28:3e:2a:11:16:84:cb:
18:25:c7:f1:56:dd:20:65:f4:ab:07:16:f7:01:c5:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:73:7F:4E:1F:FC:54:E4:BF:13:13:12:D5:71:1D:46:EB:C6:AA
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:06:3b:4a:ca:94:dd:e2:0b:ef:e7:d8:a0:90:d7:78:bb:7e:
3f:b3:77:6a:bd:40:73:3b:3c:9c:f3:1a:2c:95:46:7b:fb:4e:
34:8c:50:39:2e:41:56:7c:2d:ad:73:b2:79:ca:ce:72:86:f2:
15:00:ff:23:e5:55:1b:ab:47:cf:2f:61:0c:d0:39:64:66:66:
a0:27:c4:7d:3e:7c:a6:42:0b:1f:e2:b9:ec:34:a0:3d:f2:e9:
19:01:f3:93:f7:f3:5c:89:d1:92:0e:c7:28:f7:aa:56:58:e4:
d0:38:d3:94:a3:d4:52:70:7e:fa:3f:5c:cc:c4:21:d5:be:28:
14:44:26:14:7d:7b:03:49:c2:dd:1e:6c:81:fe:d9:1e:1e:67:
95:16:7b:6c:08:32:1c:32:7b:61:c3:4a:5a:45:86:eb:0f:fd:
28:47:23:ad:25:48:49:8d:59:08:42:d0:9e:f9:d7:42:f6:21:
18:d5:c2:6c:8b:d1:f7:2e:20:1d:cb:c6:9c:b0:a4:a8:94:bb:
bb:b2:ed:de:5e:c7:a3:c6:ee:08:bd:1b:b0:de:97:bd:a0:14:
b5:ab:e7:0a:9e:9e:d8:6d:b7:b8:3f:0c:fc:30:4b:e5:04:25:
a9:db:57:be:af:05:fa:0b:74:86:a2:48:8f:4d:c1:15:59:08:
23:5a:ed:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:16 2025 by rpki-client