Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier: M3F7f/63V9XFqyfGPucmeuPtJUfLOBVlOsxhSx/eQOM=
Subject key identifier: 7A:36:FD:58:29:66:AA:EA:2D:DA:6C:D4:57:B7:E7:D7:8E:FE:F4:DB
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial: 019A71B8205087367FB91F10AA6A26639B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number: 0C24
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: 1-QJRvD_s23t8EY5xEdDTuC908Sc.roa (hash: lC8dpaKtg1+1rVuBlbmqllxIuGpvRJft4kKrK9r2MOs=)
2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: 7wYZpQR3pouzzrHdcZis9u8CWPWgFzcLKM8W5DR8Hjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:20:50:87:36:7f:b9:1f:10:aa:6a:26:63:9b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=7a36fd582966aaea2dda6cd457b7e7d78efef4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:6f:15:ac:ca:61:d7:a8:00:0e:ca:6c:79:
27:e6:dd:4e:59:b0:22:3e:78:af:5e:37:01:87:73:
32:2b:16:ac:94:83:42:a5:9b:ce:59:19:0a:ef:1c:
3d:ff:ce:ca:88:61:ab:61:b4:36:37:71:45:59:2c:
71:83:d0:85:41:f4:b5:d4:2f:d6:d7:c3:5e:15:b7:
d0:79:13:2e:ba:34:ef:e2:e5:83:db:e7:bd:51:01:
ed:c2:58:ba:9f:cf:98:42:86:c6:09:5e:f8:78:16:
c9:fb:31:56:ee:59:f5:13:8e:51:d8:ba:cc:49:1c:
4a:52:28:28:9b:b7:c2:99:47:13:0a:c4:32:8a:7b:
f7:d4:88:7a:70:9e:7f:ce:47:fd:44:28:42:86:a7:
0f:7c:5b:89:21:32:18:f3:e0:60:b8:5c:d2:48:33:
c9:61:c4:46:92:48:34:7f:35:5e:e8:e2:c6:ac:aa:
01:c6:35:20:05:a3:53:42:7d:79:4d:a7:84:a3:62:
2b:5e:b1:4e:a5:a7:4a:8d:ab:87:0f:95:25:57:28:
a6:52:6d:35:40:18:b2:b8:2e:11:ee:59:fc:39:b0:
e9:e8:2f:18:89:78:86:fc:6f:86:d0:94:8a:3a:34:
e3:96:30:be:a1:38:84:c8:71:75:13:9b:bc:ec:33:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:36:FD:58:29:66:AA:EA:2D:DA:6C:D4:57:B7:E7:D7:8E:FE:F4:DB
X509v3 Authority Key Identifier:
keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f6:09:64:53:78:4d:e5:63:1b:34:68:07:79:d5:be:61:9a:
ed:0e:8a:b3:bb:61:16:96:d4:18:bc:44:c0:cd:b3:80:f9:27:
bb:a9:43:89:25:7b:55:cd:8f:cd:01:53:f0:48:5a:07:77:9a:
ba:9e:ed:ce:03:34:bf:71:f6:53:0c:ee:c1:5a:28:be:14:5c:
7d:87:32:f8:5f:d6:3a:f9:52:2e:eb:e6:51:40:52:c8:9d:11:
91:5a:33:2b:98:66:2a:e1:69:98:ea:d7:93:37:c1:ab:1c:c2:
5d:fc:da:c9:39:73:50:21:84:a6:cd:3d:f1:3b:8d:07:14:74:
81:ac:fa:50:d2:b3:02:91:ec:cf:56:0e:b0:5c:6e:34:c5:36:
e5:c9:7c:85:2b:3e:9c:9b:6e:1e:11:a5:27:8d:af:39:32:c1:
d1:73:a6:51:a1:57:6a:61:be:3c:98:cf:c3:a1:a4:24:e2:58:
34:2e:7e:8c:69:ba:f0:d7:d8:20:ac:34:58:07:fc:c7:ad:3c:
13:f4:e0:e5:3e:da:28:e5:ed:18:83:cc:ce:ba:bf:aa:7f:2a:
09:fd:c7:20:b9:f2:62:1e:1e:45:eb:40:c3:b4:60:bb:b1:14:
04:d1:b2:4f:e9:a0:7c:e6:2c:52:0f:6e:4e:b2:f8:11:cc:a8:
6e:bb:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:13 2025 by rpki-client