
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: UGAA5tneMhWRwazWOgkkG7BJqIv5HBtNkeivahPIND8=
Subject key identifier: 25:78:22:FB:C5:76:15:FF:B2:7E:67:26:65:A8:C4:D1:9A:74:B2:DA
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019923A0A6CEB46904033404461393BC1919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 112E
Signing time: Sun 07 Sep 2025 10:02:34 +0000
Manifest this update: Sun 07 Sep 2025 10:02:34 +0000
Manifest next update: Mon 08 Sep 2025 10:02:34 +0000
Files and hashes: 1: CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa (hash: AodjA/u0IZIHWzW0wUzupROWai2JCPHe4BHHea78Ms0=)
2: IVs_hi0L8DU-XvjpZ3j52FBoeuA.roa (hash: gjbii66qiZGzea5anGixtq9DuuHhboIpMcO6QPFsj6s=)
3: VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa (hash: g8P7wwNKLRxTvKsPwE4zpfRuDPifBy4qLKB2zlBcTlw=)
4: h5Sxz-4g29FV3kYMoX_wX3iFTqQ.roa (hash: MiZeUc7o+bnHAdooPcAB7y8KMpj0xgLMlX8Uuhc2f7E=)
5: m5QjthCyb83zFe-XzGZ1VPtryIE.roa (hash: idq0+QCfBZJuG2uqoWlXprOQsupzpFPhxR03Ji+VJ/A=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: kEpAY9EBDS5JWUzPPd9TLNwE44GD9Zw2iq1aYHoOh5Y=)
7: rwgU2mlTS06e7YPqA2lYPO26aP0.roa (hash: w9oJA8hR7uQfiHK53Tj7B18Tkd/AVTn4HnDtFZKJyRA=)
8: zduwkC5PQDOGNkAdIMyn-hz63Ys.roa (hash: dngQzoKRwxwQY6jw/yt5nYtfsqDVjR83fQraMN2FWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:a6:ce:b4:69:04:03:34:04:46:13:93:bc:19:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Sep 7 10:02:34 2025 GMT
Not After : Sep 8 10:02:34 2025 GMT
Subject: CN=257822fbc57615ffb27e672665a8c4d19a74b2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:ef:ec:52:a3:ea:2e:8b:32:c1:f3:d4:d0:
3e:b3:fd:30:8f:4c:47:f3:8e:c3:66:94:b6:d1:86:
56:7f:ea:b0:35:25:72:66:5f:a2:10:e5:dd:55:4f:
ab:28:ae:c8:cf:0e:0b:0b:02:bf:01:32:0c:b3:fc:
42:16:0d:fa:d2:49:69:93:ff:37:60:1b:61:cc:02:
41:78:0a:09:d7:bf:16:d1:a7:4f:e4:cf:39:33:b4:
c8:fd:a2:b9:42:0b:bf:8c:b8:3a:e1:04:5b:dd:c3:
dc:e7:70:19:3b:91:55:96:c3:4e:27:e8:8d:91:de:
78:60:b3:9a:1b:50:7a:bf:4b:5f:d6:a9:bb:e7:78:
cf:7c:6c:d3:06:8a:4a:f5:1e:58:d3:62:dd:67:3f:
a5:11:dd:c8:f2:af:d9:8e:07:75:93:14:e9:30:cf:
b9:58:8b:db:7c:bc:fa:10:d3:35:e6:e3:54:6a:bf:
f3:10:11:b7:3b:fc:e8:d0:70:18:0e:be:87:18:49:
c1:fa:65:76:59:d7:9e:a5:ad:e8:99:a1:ca:e0:1c:
4e:8e:cc:62:de:29:3a:3b:57:ee:da:f0:8a:59:43:
21:de:6f:31:f7:44:99:ac:2d:b3:03:12:a8:73:08:
72:e5:9b:1c:2c:c6:19:9c:9f:51:2f:d8:6b:a1:2c:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:22:FB:C5:76:15:FF:B2:7E:67:26:65:A8:C4:D1:9A:74:B2:DA
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:78:08:55:78:54:2e:5e:01:13:9a:0d:48:1f:b8:1c:d4:ec:
14:94:2c:40:61:61:ef:95:5f:5a:96:e0:43:22:db:3f:70:67:
32:10:45:b7:a5:3e:07:46:00:f4:8e:46:71:67:4b:a3:89:22:
cd:43:33:d4:92:09:46:22:75:4b:19:38:10:14:51:a7:b7:0f:
55:2c:86:57:45:94:e8:cb:96:56:d7:a6:f2:3c:f9:25:b7:5d:
40:4e:c1:db:ec:bf:cc:6d:ef:7e:b1:c5:ef:b9:eb:a0:ac:6b:
d8:69:0c:9b:e1:64:df:86:15:9b:0e:98:da:2b:ba:65:63:ec:
3f:33:b3:1b:22:19:e0:13:ba:cd:77:91:d3:c7:4b:8d:08:9d:
b0:92:6c:46:36:44:f2:12:be:e7:c3:9f:b7:eb:d2:40:1c:ab:
04:5c:bd:61:71:eb:f2:9e:fb:c4:da:8e:b4:dc:3a:c8:78:f0:
54:36:bc:31:c0:8c:7c:73:46:ec:8e:56:81:8b:7a:77:21:cd:
72:10:94:43:9c:52:81:4d:1d:2d:64:b1:40:d6:98:9a:2c:84:
0f:00:14:c9:cf:00:e8:ab:1c:ad:df:fe:e9:52:0a:69:f2:8b:
fa:57:58:1b:c9:d1:55:14:cb:d1:19:9a:aa:42:ac:05:ad:c1:
39:c9:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:58 2025 by rpki-client