Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: PG/s1cXhdXmi3S7kltKkWn0WPeF+oZrr16IuSB6aS9k=
Subject key identifier: AC:9B:AD:FC:11:C3:EC:C3:FF:3A:99:82:45:90:BA:31:8D:55:3F:BC
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 019A706E608CDE8E36E9CE8C0AA65500C54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 096D
Signing time: Tue 11 Nov 2025 01:01:13 +0000
Manifest this update: Tue 11 Nov 2025 01:01:13 +0000
Manifest next update: Wed 12 Nov 2025 01:01:13 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: EA1+MUuty5eintvMM89XKUf/v7pUXFr2t6DyJilkzgM=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:60:8c:de:8e:36:e9:ce:8c:0a:a6:55:00:c5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Nov 11 01:01:13 2025 GMT
Not After : Nov 12 01:01:13 2025 GMT
Subject: CN=ac9badfc11c3ecc3ff3a99824590ba318d553fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:d0:43:4e:22:69:c9:60:8c:15:05:9d:53:
35:7c:26:cc:85:44:49:05:08:39:ac:84:f4:2a:8a:
4e:f8:e2:4e:d9:f1:cf:cd:0c:4c:c2:f4:7b:fc:bb:
f6:e5:2a:12:d5:85:f9:35:6b:d5:8a:13:de:d7:ae:
a9:9e:66:7c:9b:56:57:72:1c:cb:f4:81:a5:4a:31:
8f:27:7f:d1:59:28:29:0e:d1:c3:df:a5:35:20:b2:
b2:11:84:39:9b:f9:20:e2:50:7e:6d:52:b6:78:b1:
34:b4:77:f7:c0:70:6c:9d:a9:4c:59:03:6f:c7:56:
93:92:59:58:ca:ce:5d:5d:59:b1:3b:05:a2:fc:84:
0a:d1:3a:22:7a:fa:01:3d:75:ab:55:29:b2:15:c1:
b0:cc:42:c2:7f:9c:b5:48:51:7f:8a:f3:06:54:e2:
62:41:00:94:b3:1a:0c:34:20:cf:12:15:50:31:a2:
87:bb:66:4a:d7:91:8b:2b:7a:5e:20:de:e8:dc:a6:
f1:6f:2e:06:1f:3a:f4:c8:70:d1:50:b2:3b:79:92:
f3:54:36:a2:51:28:e5:9f:e1:b7:f4:be:15:53:7b:
8a:8b:0b:62:40:05:2d:58:15:70:e1:bf:a9:11:9f:
0e:65:2c:83:d0:24:7a:b9:80:8d:ee:1c:65:42:5f:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9B:AD:FC:11:C3:EC:C3:FF:3A:99:82:45:90:BA:31:8D:55:3F:BC
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ef:71:b3:44:86:39:7b:2a:eb:5c:6f:4d:83:41:f3:00:d2:
b1:4a:be:ce:38:3c:8d:d6:64:43:c3:3c:06:6a:19:e8:93:61:
32:61:67:c4:50:e5:68:80:a9:35:24:7e:53:b0:e0:e1:aa:78:
69:39:50:bf:c3:b1:74:59:91:0e:0d:8b:6d:99:4e:96:b2:ac:
1e:78:ac:96:df:93:3d:f0:ff:ee:ad:90:7b:f1:54:d8:74:3d:
b0:6b:19:1a:54:e5:50:1c:34:e1:15:95:bc:3f:8f:33:67:80:
70:cb:92:73:c7:6e:6c:c3:d9:81:64:6a:0e:7b:be:6d:f3:87:
da:a2:5a:46:82:e5:0d:e0:02:60:36:64:f8:88:72:3f:52:f1:
49:49:95:5d:a0:43:ed:74:92:1e:bb:a8:d3:f1:d4:ba:0d:95:
0f:ef:6a:41:e6:9b:21:56:46:31:b6:49:1b:77:42:70:3c:e3:
78:a6:c3:01:ca:b3:fd:75:e0:81:70:fc:5e:ef:1c:6b:ce:ff:
0b:10:ec:85:ec:b5:08:d7:fc:fd:67:5a:34:e7:18:6d:62:53:
86:ab:c9:82:d3:c6:dc:a3:ea:d9:62:cf:4b:3c:90:fe:92:00:
f3:53:39:9f:ac:98:52:98:c4:ef:bf:9c:6d:34:2e:0a:df:bb:
25:97:99:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:05 2025 by rpki-client