Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
File: PkJOJFpkMkpocx3SbzDGhbqopng.mft (raw, json)
Hash identifier: 3jRwPQjtGrsrro5rdUfH+75FoMjbwYkJzGva2rbXUTA=
Subject key identifier: 2C:17:21:BB:25:EC:37:B6:D2:45:25:91:FD:62:D1:E1:99:2D:8F:F4
Authority key identifier: 3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
Certificate issuer: /CN=3e424e245a64324a68731dd26f30c685baa8a678
Certificate serial: 019A71EE8D061B9AF12F7E53C8D8322F33FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: 9BKbZIRd9-X7DwnbmN0tiFBfwDk.roa (hash: sc6ZIVElHs/p3IrdFGLfeuXuK5hZseBYNoiFQsWbBIY=)
2: PkJOJFpkMkpocx3SbzDGhbqopng.crl (hash: 6GGq02o5xH26ypegTQ4KurLw6YR1qdcu0uzo1KObCns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8d:06:1b:9a:f1:2f:7e:53:c8:d8:32:2f:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e424e245a64324a68731dd26f30c685baa8a678
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=2c1721bb25ec37b6d2452591fd62d1e1992d8ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:70:f6:09:1d:7d:87:90:9b:ff:2e:85:3e:
42:65:c9:dc:61:e1:91:f4:85:79:d1:e1:49:4f:4d:
e0:06:1b:08:d3:d5:42:b8:b4:da:bb:b5:98:85:6f:
8e:89:cc:de:e5:af:81:8b:ab:a7:52:ce:08:1c:d1:
2a:79:70:d6:2e:b1:26:82:7a:63:62:e1:9d:af:89:
b8:0d:17:70:c4:55:22:9d:b0:bb:ea:e0:f5:df:8f:
6a:69:6a:bc:36:e6:0b:ac:f2:13:b1:7e:9d:4c:de:
9a:18:a7:dd:ca:51:c9:e7:d6:9e:fe:de:4e:02:a6:
9c:a2:77:9e:26:2d:f9:e5:80:9b:15:d4:cb:d0:b9:
5c:03:a7:5d:ad:b7:3d:1b:e1:37:49:45:f4:04:2a:
ca:e3:91:35:3d:60:6f:dd:ba:c6:40:17:5a:cb:42:
e2:41:31:c2:93:32:32:9a:c8:31:34:03:b1:4e:8b:
80:54:90:c6:b1:04:da:78:32:fc:bb:4d:b0:54:5c:
3e:52:2e:fd:b4:3e:a1:e0:29:37:a9:18:40:53:7b:
83:2f:8f:35:99:0f:1b:92:74:f4:e5:27:d0:76:eb:
48:54:65:50:e4:c4:8d:45:0d:75:6d:27:ad:c6:e5:
83:49:25:1e:0c:f5:b1:33:03:80:36:d9:8b:77:04:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:21:BB:25:EC:37:B6:D2:45:25:91:FD:62:D1:E1:99:2D:8F:F4
X509v3 Authority Key Identifier:
keyid:3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:41:7b:96:8c:d0:1d:7b:70:cb:cd:27:53:5b:2a:22:95:91:
cf:5b:c4:33:3b:34:74:65:04:53:b4:04:a3:05:58:f0:fa:c0:
73:0b:cc:30:81:f3:ac:79:af:fa:25:ce:3e:13:d5:5a:78:c5:
87:d8:c4:ef:55:77:b5:63:e8:74:07:66:ff:69:68:a2:4b:60:
95:80:72:e3:cf:f9:c7:8f:90:1d:4a:3f:63:00:0c:be:ce:58:
dc:f3:67:ae:09:bd:fb:50:4e:97:81:a5:02:86:2f:a7:5b:27:
87:32:1c:80:c6:02:c4:08:32:9b:8a:3b:2f:22:15:df:6b:94:
33:b8:ed:05:d0:44:a4:a5:55:7d:48:49:5e:e4:ec:76:d6:40:
79:f2:39:bd:f9:f4:51:5c:b5:53:b8:c4:fc:fe:e1:82:d4:17:
a8:69:94:20:0f:a0:5f:42:1a:93:11:cc:b7:42:2d:c4:4d:c6:
76:90:ae:c3:65:22:f4:cd:dc:f5:4e:75:aa:e9:62:53:ef:c2:
16:d4:07:9f:bc:51:6b:a0:c9:63:7e:b0:c4:64:fb:b2:9d:b9:
22:a6:17:6a:be:cd:6d:de:2b:9b:40:99:8b:b7:79:01:a6:a6:
e4:4b:6d:8e:50:4e:0f:15:bb:c0:2e:65:2a:db:d6:63:2c:18:
eb:be:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:08 2025 by rpki-client