Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: clu8HQn9mDPW0bUZTplCZ8cm2+GzbExyUGIUszL3UTA=
Subject key identifier: 2C:D1:C3:9F:82:33:EE:F2:F1:C3:E9:81:BE:00:0D:A2:75:96:13:B8
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 019A2B1EF26F4DB097911694D42708A5E61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 04B6
Signing time: Tue 28 Oct 2025 14:00:39 +0000
Manifest this update: Tue 28 Oct 2025 14:00:39 +0000
Manifest next update: Wed 29 Oct 2025 14:00:39 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: 79z8xkjH3CZ8w/sV7PwkfT9KgXco7OGIG7qfZyl+vZQ=)
2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:f2:6f:4d:b0:97:91:16:94:d4:27:08:a5:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Oct 28 14:00:39 2025 GMT
Not After : Oct 29 14:00:39 2025 GMT
Subject: CN=2cd1c39f8233eef2f1c3e981be000da2759613b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:6f:c2:99:8c:91:ea:6d:ab:93:8e:6d:3e:
b3:2a:c4:42:af:ea:57:81:f1:0f:67:a6:8f:d4:61:
43:e5:42:3d:2e:04:f0:a2:ca:bd:7f:ef:ac:e7:df:
f4:be:48:60:ee:e8:32:d0:81:49:5d:1c:77:b0:99:
3b:d6:69:45:be:0d:cc:a2:58:54:3c:2b:09:05:36:
6f:2e:57:99:61:9f:a2:80:29:50:cd:0f:20:37:3b:
ba:b3:d7:1c:f3:03:92:35:2f:28:6f:43:a1:13:6d:
c1:b1:8c:75:52:ed:4a:62:10:8a:df:60:e4:af:86:
64:7f:f8:07:8f:85:5e:4b:e1:4a:a6:ab:5e:80:6f:
af:31:03:a8:5d:4f:08:8e:8d:33:22:46:d5:24:a0:
74:18:ab:17:ee:52:3a:0f:c1:56:63:9e:b6:94:ac:
55:68:77:ad:02:36:c5:db:a9:3d:82:7e:02:59:d8:
90:92:1c:de:73:97:62:80:af:c0:ec:01:c3:93:6f:
d7:7d:7e:7a:a7:62:b5:02:45:fa:b6:ad:02:6a:e0:
a4:1a:95:50:8b:39:61:2f:51:67:b8:77:77:66:af:
b5:79:7c:17:8a:be:74:cd:04:3c:c7:10:91:f4:bf:
0b:72:cc:b2:42:94:36:ee:00:2d:89:37:38:42:ca:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D1:C3:9F:82:33:EE:F2:F1:C3:E9:81:BE:00:0D:A2:75:96:13:B8
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ab:6e:f2:22:d4:8c:be:56:2e:d1:62:f2:29:f6:47:4c:65:
b3:da:2f:89:e8:13:b7:06:0f:34:3b:81:82:4b:40:cb:36:2a:
67:c4:4c:06:8d:2d:da:ed:ef:f3:a4:d9:9f:e2:21:3f:87:bd:
0a:d0:7d:78:cb:c8:f4:61:1a:9e:4f:ac:5c:0c:77:5c:06:e7:
18:28:b4:d9:e9:0c:1e:3e:76:c8:e6:5a:3e:24:22:3b:46:89:
87:83:8f:f8:0d:14:d5:0a:12:52:21:67:f9:91:35:a5:3e:be:
f2:3c:b4:96:89:ac:b2:25:db:4f:ed:73:1e:c9:83:5f:db:a0:
94:60:38:77:66:3b:7e:42:41:e2:a9:0a:7a:c3:e1:95:64:8f:
86:2f:ee:b3:fa:ab:65:4d:5d:a7:c3:9a:3f:17:e1:55:a2:f6:
2e:87:2f:85:2a:60:ca:70:54:82:5a:37:51:b7:6b:16:2a:00:
06:e6:02:d8:cf:2c:e4:5d:ab:23:27:42:ec:4e:99:4d:b6:9b:
7e:1d:d1:85:d2:e8:e8:57:58:e3:a7:de:1f:d3:82:dc:a5:31:
2f:a8:f4:9f:59:b2:20:f8:a4:48:c5:00:49:0b:a8:18:47:6c:
e2:5a:6c:c2:38:c2:e4:c0:fd:09:5a:15:e0:99:aa:07:04:fa:
de:32:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:13:45 2025 by rpki-client