Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: 4WsQX6MuEm25JpC5/1yQMY/Kjwv72tAh8wG5ZwClznk=
Subject key identifier: 1C:54:EE:55:E0:74:E2:60:CC:AC:18:84:70:2E:D6:26:AA:9B:FC:05
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 019A725CE222874D0D3D5E4EEF77162EF761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 1457
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=)
2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: iD8qh2ofMAg5vSPipVtRlp0PYtIMh20GPydS/JqpZ1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e2:22:87:4d:0d:3d:5e:4e:ef:77:16:2e:f7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=1c54ee55e074e260ccac1884702ed626aa9bfc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:77:c6:7a:2f:86:67:31:81:03:56:e6:4f:
6a:20:a7:df:63:4d:61:e3:1a:e3:bd:0e:99:f3:72:
e7:2b:7c:89:30:d8:bc:09:ff:7a:5c:11:a1:81:9c:
00:5a:d4:12:25:be:39:6c:c6:85:16:10:c5:83:ed:
fb:f8:71:12:32:6a:bb:03:54:aa:b9:71:4d:2d:ce:
84:1c:c1:c3:0f:a6:99:5c:b2:b6:7e:e7:f2:9a:e6:
b2:88:0b:af:c8:85:3a:ed:94:2f:bb:68:30:62:13:
da:09:c0:4a:31:7d:57:19:e6:15:72:62:61:e5:e0:
c2:b4:e8:45:54:56:8c:92:ec:25:2d:7e:7d:27:a4:
9c:a3:9f:8d:8a:3e:d2:83:e8:13:05:03:23:a1:9e:
75:cd:09:5c:2d:d8:7e:f9:94:9a:c4:ed:79:f0:3e:
e7:09:90:92:b7:91:ea:2f:6e:53:55:a2:34:51:e8:
6e:f5:21:c4:96:73:97:ea:e2:96:ee:ea:78:ef:64:
ce:d4:66:dd:d1:5f:38:a8:65:e3:a1:6f:db:61:b1:
1e:03:39:46:a5:b5:ce:28:7e:9d:44:69:a6:70:63:
86:39:fa:cc:82:a5:77:94:09:25:b1:12:7f:e4:16:
a7:f3:45:c7:ea:03:34:60:51:51:86:92:a6:d9:94:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:EE:55:E0:74:E2:60:CC:AC:18:84:70:2E:D6:26:AA:9B:FC:05
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:74:d1:6c:35:28:59:c9:28:fd:e9:cd:e8:c8:60:ea:f5:c0:
13:30:d9:6e:16:a3:d1:c0:41:0c:c3:86:da:d8:f2:9d:5e:2d:
2e:32:ce:49:63:6d:fa:cb:95:d2:14:c7:ed:39:42:57:46:86:
c8:a0:63:44:4d:2c:06:a3:c3:43:39:2c:37:8e:64:a1:a1:6d:
11:36:81:96:05:e0:01:26:66:80:da:0a:19:02:6d:3e:d7:0f:
1a:d9:91:38:02:07:30:79:2c:f5:15:04:5e:2e:d1:5a:66:59:
e6:cb:99:0b:24:e3:3c:c8:39:78:96:ef:4f:61:38:77:79:55:
df:ba:9a:e0:7c:53:8e:0c:18:25:dd:1c:bc:a6:5b:ee:bc:30:
2b:2c:27:17:34:87:a5:09:0a:fb:a1:42:8d:84:de:ca:e0:fc:
ae:08:b7:0c:81:c7:2e:12:5e:9f:cb:4f:62:c8:b6:ac:df:b2:
1c:c7:22:90:de:aa:c8:22:95:0b:67:87:92:12:20:2d:2c:3e:
8d:c5:e9:b9:f7:bd:ea:bf:7d:f2:43:55:f4:28:98:63:24:43:
bd:a2:ec:bd:f4:61:5b:b7:3e:e0:e1:aa:7d:fc:a4:ad:1d:2b:
64:ba:67:2d:2d:b6:d2:b0:c7:4a:aa:5f:69:d9:7d:8c:52:ff:
70:14:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:00 2025 by rpki-client