Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: oUg9bgQJGylx30JMK4EwWIGAxZTKMW4ZKmzWh//q2GU=
Subject key identifier: 66:DD:FE:42:63:8C:65:B3:4A:5A:C1:18:60:E8:7F:E2:E7:EE:D3:23
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 019A22C087D0CDCEE65667FE6EDBFD8237D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0DDD
Signing time: Sun 26 Oct 2025 23:00:34 +0000
Manifest this update: Sun 26 Oct 2025 23:00:34 +0000
Manifest next update: Mon 27 Oct 2025 23:00:34 +0000
Files and hashes: 1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: jU392Iqy5zd06FPf/4lRqhOMsiln2W3bJxMaRuBtjyI=)
2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:87:d0:cd:ce:e6:56:67:fe:6e:db:fd:82:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Oct 26 23:00:34 2025 GMT
Not After : Oct 27 23:00:34 2025 GMT
Subject: CN=66ddfe42638c65b34a5ac11860e87fe2e7eed323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:13:d4:29:f1:c3:b4:bb:70:3a:be:33:11:
35:c4:e3:12:05:53:ee:89:cf:b4:30:98:f7:6e:42:
55:32:97:22:74:9c:e9:b6:80:8a:3a:72:3e:6e:19:
39:cc:84:da:5e:23:30:78:ae:91:e6:7a:bd:9c:04:
47:d4:48:b0:1e:df:b7:09:58:e8:9f:20:ca:97:03:
57:1c:ff:a9:1f:ba:2c:c2:76:46:de:a8:ce:17:23:
a3:25:8f:ee:9c:16:b5:28:0f:d6:2e:96:72:90:68:
77:60:44:8a:12:e0:8e:ab:02:89:69:a8:fe:df:22:
68:c3:1c:a4:c2:79:6c:85:28:2b:09:9b:92:9f:1e:
a7:c5:74:6e:d9:2d:2b:74:b9:0e:ff:44:ed:77:45:
9d:db:a5:10:2d:f1:09:7a:65:4f:b4:f9:4c:4e:bd:
db:1a:fd:65:b1:8f:5a:5e:10:4c:5c:a1:a6:e1:1b:
5b:b6:a1:e5:ce:81:33:0c:9e:24:30:bc:49:b9:cb:
70:b3:f1:8d:a8:e3:92:a9:4d:29:6b:58:f5:ed:a3:
1e:f3:a1:f2:63:7f:f5:4d:6d:8e:7f:26:da:61:15:
1b:65:bd:49:49:d0:99:12:87:3a:02:55:5d:8a:5e:
5b:b7:d3:a3:52:fa:67:49:42:1d:c6:26:62:3f:bf:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DD:FE:42:63:8C:65:B3:4A:5A:C1:18:60:E8:7F:E2:E7:EE:D3:23
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:13:d0:51:ff:cf:4a:84:54:02:8b:45:be:d2:41:0a:97:c6:
ef:2f:ea:83:da:1e:3b:13:0b:45:3d:7e:34:17:17:17:3d:0c:
fb:d6:3b:72:bd:ec:ba:0e:07:3a:dc:f4:fe:33:d2:1d:07:8a:
2f:18:81:14:b7:02:3d:eb:fb:e9:53:8c:21:56:61:93:c4:e6:
41:7c:4b:52:ee:81:73:97:f9:b6:d3:e6:ae:5c:04:3e:7d:e5:
05:9b:78:cc:6f:7b:3a:22:93:5d:e0:6d:af:9e:42:16:90:73:
7d:91:6f:1b:ff:8a:f8:08:04:46:15:f3:77:e9:31:bd:62:2b:
4e:d9:c9:e9:10:8d:55:66:2a:7e:40:23:d4:0b:c3:d1:0c:6e:
7c:9c:0e:51:f3:3a:c0:09:2c:46:c4:e9:d2:a8:76:27:c9:cc:
b1:a9:50:19:19:60:cf:04:6e:1d:d3:75:5d:5b:11:22:4c:06:
71:f0:3b:cd:25:ed:68:32:d2:f4:1c:59:66:d1:6e:d3:ac:ee:
98:9c:f9:3c:5f:d2:96:e7:87:d0:24:94:13:fc:6b:09:cb:cb:
cb:6d:85:6a:27:28:b4:5b:dc:57:9f:09:02:96:d9:06:37:1c:
d0:64:5e:a7:96:74:3b:b3:c9:b5:40:e4:8b:14:c9:92:f4:85:
c3:98:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:15:02 2025 by rpki-client