Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File: pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier: C3EbNaijzMB5lBxQI2HSzWT3BnOhHC1Fr7jZk1ShBS4=
Subject key identifier: E6:90:A4:B2:FC:EC:44:37:D5:1A:78:2C:93:F4:1A:D3:2A:15:62:AA
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer: /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial: 019A736F0323CF382C91FBDA7AB7A57E19CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number: 054E
Signing time: Tue 11 Nov 2025 15:00:46 +0000
Manifest this update: Tue 11 Nov 2025 15:00:46 +0000
Manifest next update: Wed 12 Nov 2025 15:00:46 +0000
Files and hashes: 1: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: sPwM+GULR5DKCH4vYVPy+g2QchwBoxlDZSRkJrQbWMU=)
2: yTZlHlMAE_3YBA7oQmF4fIZqHOM.roa (hash: lfCvg73z+0fvdagtNm9IPM2kVoIfwTGx2gcIBEuq7Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:6f:03:23:cf:38:2c:91:fb:da:7a:b7:a5:7e:19:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Validity
Not Before: Nov 11 15:00:46 2025 GMT
Not After : Nov 12 15:00:46 2025 GMT
Subject: CN=e690a4b2fcec4437d51a782c93f41ad32a1562aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:de:6c:02:65:ab:e7:54:5a:18:56:c9:5d:3a:
27:39:0c:22:50:71:1c:0a:9e:09:c8:b9:be:18:1a:
a1:7e:fe:e3:a0:fa:28:46:8c:09:be:5c:b2:69:51:
24:47:33:38:86:ea:d6:b7:a5:07:97:07:cf:d4:23:
f6:31:f2:bf:87:06:cf:08:df:dc:4d:36:23:7e:72:
4d:4a:bf:92:a1:09:a6:c1:61:4b:19:c9:05:7c:de:
54:82:2d:7d:6b:b8:73:12:5a:c4:80:89:d9:5b:ad:
91:9d:91:c6:ce:2b:37:19:71:82:f2:5f:2a:9b:6c:
c1:78:ef:52:d6:1e:8f:0b:23:40:d5:c5:bc:40:f8:
31:06:20:6c:d4:09:c0:dc:3a:b4:39:44:f8:e0:c3:
7f:7f:c0:89:64:0b:e4:db:a7:b8:20:da:1b:aa:0a:
26:93:30:df:79:76:39:ed:5d:98:d7:b9:87:30:19:
a1:c3:73:08:68:35:25:b4:ae:03:ff:e0:6d:e4:fc:
64:85:e0:9d:16:24:04:5a:e1:38:45:e5:9f:31:fa:
f0:e0:c5:ef:37:7a:90:ae:dc:7f:38:94:0c:4a:3f:
3a:ca:97:bb:a1:8a:98:57:ba:6c:54:77:d7:58:76:
7c:8e:f6:ad:45:e6:9c:35:51:07:06:e2:e9:f0:02:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:90:A4:B2:FC:EC:44:37:D5:1A:78:2C:93:F4:1A:D3:2A:15:62:AA
X509v3 Authority Key Identifier:
keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9b:b2:d9:6d:d0:4c:e1:87:43:0c:81:81:10:0b:c3:b8:08:
b9:c4:98:2b:1a:03:ba:72:57:85:55:9c:c8:b4:5b:44:00:22:
70:64:0d:e4:18:a8:a4:bf:3f:28:d4:9e:65:57:d5:ac:e0:1f:
29:b5:ec:c0:d3:a7:1f:ce:1f:66:eb:29:52:59:88:98:ec:65:
c9:ea:91:fe:6d:bf:07:aa:8a:d6:fa:14:93:f1:59:b3:ff:fc:
f7:e4:00:7b:6d:c3:6b:82:9c:a9:f5:0e:4c:14:c7:3b:7d:d0:
a1:da:8e:c2:71:bd:75:3c:e5:bb:6b:a0:96:fe:c6:1d:2d:ee:
e8:38:21:32:b6:f4:c8:a7:56:ee:37:1b:e9:79:79:40:44:a4:
16:47:82:53:56:8c:a2:11:bb:94:c0:a4:d9:f4:e2:ff:d7:e2:
ae:f6:5a:6d:ee:c9:4a:9b:70:7c:e8:7f:0f:f8:d5:83:99:87:
58:2f:e5:41:2a:54:50:5a:82:67:fb:c6:f2:b7:fd:d8:80:49:
16:39:11:11:85:d8:75:ae:92:23:2b:aa:16:17:0b:37:18:c1:
57:bf:a5:4a:9a:86:fe:78:bc:1a:1b:5b:47:89:19:bd:60:6c:
73:ed:e5:ab:48:21:27:83:68:73:1c:1b:c8:f6:4e:65:65:22:
50:fa:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:32 2025 by rpki-client