Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: 2Pg4mnXCjEejzshRxwsgkQnsete51ENc2Xl/sVWbBCI=
Subject key identifier: FB:AD:2C:12:B2:53:55:EA:E1:6D:67:4A:30:B2:15:AA:9B:71:37:E9
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 019A71B7B937DD322E966A034FCCC3D01CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 1446
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: jPKc2RUEgbTPurXqnEmuAAiuon7vU3lF1vlbYNnG4m8=)
2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b9:37:dd:32:2e:96:6a:03:4f:cc:c3:d0:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=fbad2c12b25355eae16d674a30b215aa9b7137e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:da:c9:bf:a4:dd:5e:c5:60:dd:39:7a:4b:
44:e0:e5:ba:97:25:4f:e6:56:e9:89:ac:a5:79:81:
62:16:c8:9a:e9:e4:8f:c3:a0:a1:07:89:68:9f:0b:
a3:ce:bf:44:1a:1b:13:2f:f9:5b:49:97:35:8c:dc:
8d:4c:39:f3:5c:45:be:8a:c6:33:c5:e6:89:27:06:
45:2b:14:37:d4:23:ea:29:4a:3a:c4:23:86:3d:47:
58:8b:22:4d:12:5a:7b:e7:ce:6e:cd:56:03:9c:fe:
71:a9:57:6c:60:ec:f6:73:ff:e9:d0:11:1b:ba:87:
a1:76:a1:ea:86:a0:46:eb:45:85:66:57:02:97:4a:
33:3a:9f:d6:0b:82:ee:02:c8:58:40:a4:a2:cb:e4:
f0:3b:eb:c1:54:39:bd:f9:eb:20:9f:b6:00:65:c5:
e1:7e:92:8a:a4:ab:c9:ea:66:29:03:44:1d:61:40:
bc:73:62:80:f0:41:7c:52:6b:85:0c:90:1b:46:57:
93:3b:2e:fd:2c:97:ea:df:7d:80:30:ad:10:ce:a3:
54:fb:1d:8e:09:35:b3:4e:d4:3c:95:ce:8e:81:3a:
19:9b:d9:76:68:52:0b:d2:ea:f1:25:b6:db:85:3e:
6d:5c:28:ad:be:35:49:f0:ee:9d:e4:a2:89:8c:4e:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AD:2C:12:B2:53:55:EA:E1:6D:67:4A:30:B2:15:AA:9B:71:37:E9
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:02:47:97:ef:dc:c0:f4:18:4c:96:5d:59:fe:52:97:72:c6:
8d:ea:11:ef:3e:33:7b:4f:6a:dd:71:56:22:35:22:d3:64:8d:
97:ca:e5:70:bd:67:f2:fd:72:3a:1a:97:4c:4a:25:50:44:79:
1e:16:06:ba:7a:13:6d:be:cb:91:1d:3d:1f:dd:12:78:db:b5:
3e:57:5f:74:90:a4:c5:f1:64:99:ed:0c:da:f6:5f:a8:34:63:
e7:62:46:a6:71:7d:da:80:bf:06:06:c7:45:c8:75:24:a7:c6:
ab:99:a0:81:fc:5d:a8:71:10:75:68:5d:24:be:b1:99:f5:db:
36:a6:c7:4f:fd:55:39:56:fb:db:da:c2:91:83:e2:6d:61:4a:
c8:7c:8e:8a:5d:19:ff:12:48:76:47:f6:20:44:fc:97:ef:e5:
e1:83:a9:4d:1e:9e:4f:d3:fa:86:a7:52:5e:1e:09:07:7e:ed:
26:08:d2:d2:b2:b5:dc:91:72:23:13:67:5e:e2:11:f3:9a:2d:
d5:9f:a6:ad:c3:b6:34:54:01:73:eb:d1:03:09:98:16:31:fa:
02:d3:dc:dd:b5:bd:70:3d:8e:72:a4:8d:26:68:e0:f1:9a:e4:
b1:20:0a:02:60:a9:12:71:a3:5b:7f:b0:ab:f5:4a:a9:59:1b:
fc:5f:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:22 2025 by rpki-client