Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json)
Hash identifier: 6IHi/sDc1/9ndoswzv7LoW2BJeMQJjM0xfcni9/kgFM=
Subject key identifier: B4:55:3C:D6:F6:25:82:0A:83:F0:B1:7B:67:19:DA:C2:F2:33:A3:F1
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial: 019A299EA55D75C081D292B19ED77085874C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
Manifest number: 038D
Signing time: Tue 28 Oct 2025 07:00:53 +0000
Manifest this update: Tue 28 Oct 2025 07:00:53 +0000
Manifest next update: Wed 29 Oct 2025 07:00:53 +0000
Files and hashes: 1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=)
2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: jA/d3YeUR3LK6Ha2TLW3Hq4Arh3QLt+FFJYZq5mwWok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:a5:5d:75:c0:81:d2:92:b1:9e:d7:70:85:87:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
Validity
Not Before: Oct 28 07:00:53 2025 GMT
Not After : Oct 29 07:00:53 2025 GMT
Subject: CN=b4553cd6f625820a83f0b17b6719dac2f233a3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:ea:d9:20:11:ed:96:6a:64:56:85:31:e9:
4d:e3:fe:b3:e8:24:a9:39:ee:39:0a:0c:74:2e:8e:
90:a3:43:3a:b0:d2:6c:d3:99:82:35:95:4b:74:e8:
52:dd:ac:16:50:c9:21:10:5f:66:44:87:36:d5:b3:
4d:71:1a:14:f0:52:7e:13:bc:6e:f8:11:d2:3c:e8:
6f:86:35:fb:8f:84:89:74:60:1e:09:71:ca:39:98:
4a:1a:9b:b4:bd:6c:9a:b2:ad:ff:3a:5e:29:65:66:
35:94:03:12:6e:eb:22:45:74:4e:8a:79:86:47:b0:
99:45:94:b5:21:02:74:db:ab:2a:bc:49:c2:eb:ec:
93:4a:1f:9b:15:a5:06:80:dc:20:01:23:98:07:e8:
71:a1:1c:97:c0:b2:9c:b1:eb:97:05:8d:3d:b5:43:
26:cb:5b:a0:9f:e3:0a:6b:ac:10:56:85:5c:2b:dd:
91:99:df:93:b0:fd:39:18:d1:76:e6:54:0f:c2:24:
39:b7:24:c6:f2:9e:f3:44:26:1b:62:5e:f9:2e:ac:
eb:05:42:8b:0f:83:ee:27:fb:81:83:b0:a9:1e:f5:
7d:00:ff:05:85:f1:68:4c:da:99:0a:62:ee:43:88:
da:4b:9d:a8:8c:e7:64:cc:a5:5a:70:ab:07:3f:31:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:55:3C:D6:F6:25:82:0A:83:F0:B1:7B:67:19:DA:C2:F2:33:A3:F1
X509v3 Authority Key Identifier:
keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8d:1d:14:71:11:3c:86:c2:86:1e:c4:6d:ec:6b:ea:54:bf:
1a:a9:ba:c8:16:b3:bc:62:a3:c0:d7:bc:bc:bb:89:16:93:5c:
2a:d4:c9:66:f3:fc:0e:e2:81:42:ca:57:81:2e:13:9f:91:44:
c3:58:7e:c4:f1:99:f0:9f:a6:b2:e4:55:c1:9f:6d:54:65:b3:
e1:61:0e:e9:6f:da:c4:af:83:cb:dd:8f:8c:c0:58:6c:db:96:
0f:15:eb:98:7d:29:db:92:90:5d:61:98:8c:6b:01:61:9a:9f:
d8:f2:d3:06:02:d1:4d:68:84:fc:59:3b:7b:7b:71:cf:10:c1:
9a:61:34:12:7f:08:33:c1:84:7b:87:77:15:14:8c:9d:ae:aa:
75:c0:58:d7:76:d9:1c:ed:0f:24:b9:7e:91:7d:41:62:3b:2b:
e0:68:1c:2c:83:de:a4:04:9d:74:c0:56:e6:f6:6c:e2:8b:7a:
e0:98:24:56:aa:91:ca:30:e7:00:75:52:8f:9b:44:ff:4a:47:
73:1f:65:a1:08:59:15:26:93:00:bc:75:40:19:b7:d4:61:96:
7b:53:0f:8a:0a:fb:53:50:ab:02:99:de:5f:dc:2f:b2:53:32:
c9:f0:63:16:13:06:6c:53:b3:cd:f1:63:ae:37:c6:fe:ff:8b:
e5:a1:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:39:32 2025 by rpki-client