Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: MvrgfESlkEOpVOQAvF4MytUAwF4ujs2T0+gaeqiRb84=
Subject key identifier: DD:B4:C5:79:B3:81:17:CA:28:D9:3C:CC:15:CC:C5:4D:69:58:38:3D
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 019A706E5AC649164F2543EE822359B443CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 023F
Signing time: Tue 11 Nov 2025 01:01:11 +0000
Manifest this update: Tue 11 Nov 2025 01:01:11 +0000
Manifest next update: Wed 12 Nov 2025 01:01:11 +0000
Files and hashes: 1: AYSLpwufRV-W_9lRsqnuQFR2IOQ.roa (hash: Q3fm8OZk/vOZ06gyMzMxpxsqxYSULclXWKZVcRfqEg0=)
2: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: sFnY0VjH82K/Z3P60jlothdl2I9zDGL2eF4TvnDlthk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:5a:c6:49:16:4f:25:43:ee:82:23:59:b4:43:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: Nov 11 01:01:11 2025 GMT
Not After : Nov 12 01:01:11 2025 GMT
Subject: CN=ddb4c579b38117ca28d93ccc15ccc54d6958383d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:fb:8c:43:95:05:1a:50:73:e6:1b:25:2b:
84:b4:14:ab:9b:99:09:61:f6:f2:fb:29:7a:2e:0a:
81:ea:4a:43:db:46:1b:e5:f6:f4:19:14:cb:93:ea:
e9:e2:2a:85:02:c9:b1:7d:f5:75:f8:c8:73:31:44:
54:95:b1:2a:db:e6:fa:5e:0f:77:88:18:b0:8e:b8:
dd:9d:53:0e:80:ad:7e:f0:4a:64:de:b5:a1:c6:b1:
aa:e6:ed:a4:a9:ae:b8:3d:d3:f8:29:0b:35:79:38:
15:97:33:63:fc:70:b5:7b:3b:a5:89:6e:eb:94:77:
4b:d9:b7:b9:9e:1c:b1:a2:d9:62:d1:ef:8f:f1:3d:
00:75:61:79:6f:10:70:cd:d5:3d:4d:9a:f1:10:74:
9f:c4:b6:70:6e:a0:5e:45:a0:4f:5a:a1:56:a4:be:
38:79:a0:da:ae:dc:70:f2:c8:5b:24:bb:f6:ca:f0:
6d:d7:71:cd:a7:db:6b:41:ca:02:e6:f0:3c:b1:1b:
de:22:53:41:a6:4a:13:c8:ef:f2:36:09:57:73:59:
7b:07:df:06:f4:d8:18:c5:ea:51:0f:9c:02:d4:08:
dd:50:18:4f:fa:c9:f3:8e:a4:3c:81:02:ae:11:6f:
13:d8:4c:51:d5:8a:a5:93:bc:b3:c9:42:89:8c:46:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B4:C5:79:B3:81:17:CA:28:D9:3C:CC:15:CC:C5:4D:69:58:38:3D
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:70:45:41:f5:fd:6c:57:69:40:2b:53:6b:32:90:a9:22:22:
3f:02:1c:3d:7c:c8:c7:3a:1f:79:d9:3f:15:28:fc:14:bd:04:
4e:3d:92:ab:89:43:76:b5:01:44:9b:2d:6c:8c:1a:84:da:0d:
54:dd:c8:0b:39:39:be:dc:b7:be:e0:be:ce:1c:43:7b:41:a9:
12:76:af:93:dd:14:ef:55:36:14:b5:33:d0:a2:dc:65:a1:47:
70:cf:b7:da:30:72:15:9a:2a:02:c8:5b:29:2b:ad:73:7a:ac:
5b:3e:7e:db:e9:bc:c0:44:63:23:4b:8d:63:1d:c7:fe:43:05:
b6:0c:21:fe:ae:6b:de:33:19:23:99:14:94:b7:f4:c5:36:31:
5d:3f:90:e8:39:2f:3c:04:e5:cc:e9:89:e1:4e:bb:5c:c1:41:
13:5f:d9:72:de:6e:fc:36:16:a1:0c:03:36:56:a3:48:3e:38:
c0:96:26:ba:a3:8d:b4:c0:97:de:e5:78:6d:cf:c8:92:62:b7:
9e:93:81:10:8c:e9:0a:84:69:97:c0:fe:50:b7:88:84:1d:24:
3a:d8:e7:0b:3c:d2:ea:ea:2b:37:d2:c0:ae:33:ba:6c:24:43:
6b:28:0c:d8:e4:40:b6:b9:48:93:17:50:a7:04:0c:b3:65:0c:
e0:87:5a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:28 2025 by rpki-client