Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: b5ZzzyGIdPtpqbCk0OBOujvP8/PujZqd732nuglCvqk=
Subject key identifier: FC:6D:14:E2:22:9B:C1:A3:A0:44:10:12:B6:1D:4C:4C:49:C7:B2:33
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 019A258AAF39AD69C93669132A146BCDF360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 1625
Signing time: Mon 27 Oct 2025 12:00:36 +0000
Manifest this update: Mon 27 Oct 2025 12:00:36 +0000
Manifest next update: Tue 28 Oct 2025 12:00:36 +0000
Files and hashes: 1: 09rZaDf9P6R4diZdTpqbdJFmS5g.roa (hash: nJaLySku8ZYvCwVFCoV24PH4wOMxHH06lLCXG71Fdv0=)
2: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
3: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
4: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=)
5: OSXtgZFTRCqapZbj1Rss-9P6qbI.roa (hash: AUmjKUojOqL9JzPQrWExZ3cDw/gVJywbQJ3W19HFEWU=)
6: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: /qx5gjVGUhKUhEAsgLbBT35GJdei9lnL3zNjmbkj/JM=)
7: _9T_S-kr42TO8YpZQ1p1cNkCs8k.roa (hash: DCwl+cJRNegCixrl6T1943uL08w3GonOBX/1cFtnPHo=)
8: pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (hash: uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:af:39:ad:69:c9:36:69:13:2a:14:6b:cd:f3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Oct 27 12:00:36 2025 GMT
Not After : Oct 28 12:00:36 2025 GMT
Subject: CN=fc6d14e2229bc1a3a0441012b61d4c4c49c7b233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:e7:f9:18:5a:74:7d:8a:f4:38:b7:a9:2f:
6c:89:e1:20:d9:66:18:d1:f6:b6:97:f2:51:55:54:
e4:cf:a5:e2:01:7b:b7:e7:a7:a6:31:42:d7:b6:da:
38:6d:93:69:ec:5d:9b:0f:d1:e2:d8:a4:2d:a4:c3:
67:ba:1c:10:f0:15:eb:24:be:f8:96:37:d5:0a:ef:
e6:6e:bb:cb:a4:e0:68:dd:b5:fc:d0:af:18:89:01:
ef:ba:37:a6:10:c9:22:92:9c:41:05:49:f4:77:0e:
22:11:36:a2:f7:8c:5e:fa:e9:ac:39:1c:ff:5d:9f:
dc:55:0e:77:13:33:68:8c:21:fb:90:19:99:d7:9e:
60:81:10:e4:fe:a0:a1:44:1a:7c:b2:72:bc:42:6a:
88:bf:88:8b:7e:3f:e4:33:e2:7f:c9:8c:8f:ac:e7:
fe:4f:4b:20:5b:35:1a:09:36:d5:03:0b:31:6c:79:
1b:69:b2:93:5d:35:11:43:ea:f5:af:65:e0:3f:79:
5c:28:a6:7c:0d:d5:ee:9f:d3:d5:3d:39:55:35:0c:
88:45:9a:6d:79:42:a1:f6:06:be:a4:24:85:e8:65:
51:a6:b7:3f:92:a7:6b:3e:22:16:c8:f8:95:6b:97:
a4:10:dc:20:03:2c:7f:69:0b:ff:8c:2b:6f:59:8c:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:14:E2:22:9B:C1:A3:A0:44:10:12:B6:1D:4C:4C:49:C7:B2:33
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:57:a4:cc:87:29:e4:6f:38:4f:de:66:26:10:b5:cb:ea:e8:
bf:7e:86:79:79:0b:a1:af:d3:ed:15:53:9f:a6:7b:6f:1f:9f:
5e:a5:ec:aa:34:fa:f1:b3:45:6f:79:3b:cd:7e:25:d1:39:82:
10:c5:7c:2f:41:df:7c:c5:6c:33:a2:02:82:32:a7:df:d5:4c:
08:83:44:aa:fd:34:62:39:12:db:bb:b2:bc:1d:dd:82:32:ba:
32:8a:3d:0e:af:0e:b1:37:15:40:db:22:be:0d:7e:6a:5d:6b:
1d:f5:19:16:b0:50:06:48:4f:be:8a:be:93:54:01:63:bd:e9:
98:9c:11:67:7b:80:72:02:63:a6:59:49:4a:a5:67:04:c0:4e:
95:1c:3f:d6:22:17:30:6c:b3:8b:1a:ec:7b:fe:cd:7b:3c:b0:
bd:c6:95:f0:3f:a9:1f:0f:9e:cf:94:d3:e6:e3:34:52:69:39:
a2:d0:54:06:04:ef:71:21:09:eb:92:ae:80:95:cc:e7:60:67:
ab:a4:34:2a:58:ee:69:2b:86:7b:ff:1b:d4:67:29:cc:6f:d6:
63:59:a6:b2:d4:ee:04:04:68:ee:14:6a:10:4d:a6:68:5c:50:
90:d5:54:bd:44:dd:27:15:ce:3b:81:19:15:a6:d1:9f:51:be:
65:f6:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:04:21 2025 by rpki-client