Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: 3326k29o4kyg/yCA3OX3/6h4zcROr1pRgwFivufE4YY=
Subject key identifier: 5B:AC:60:66:08:17:57:BB:5D:97:F6:F9:D1:BF:95:34:3E:BB:4A:EF
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 019A72CA1C188544A7F3F0C821B4951F3FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 04FC
Signing time: Tue 11 Nov 2025 12:00:39 +0000
Manifest this update: Tue 11 Nov 2025 12:00:39 +0000
Manifest next update: Wed 12 Nov 2025 12:00:39 +0000
Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: WyoSYq7KrF+Oi1eTQA0uFbd93vpKFtbSWQCKSwwu+4c=)
2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1c:18:85:44:a7:f3:f0:c8:21:b4:95:1f:3f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Nov 11 12:00:39 2025 GMT
Not After : Nov 12 12:00:39 2025 GMT
Subject: CN=5bac6066081757bb5d97f6f9d1bf95343ebb4aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:cf:bf:3b:c9:1c:5d:24:23:3d:e0:db:e6:
76:2a:73:76:9d:f6:2d:c8:e8:da:1f:64:6c:0d:2e:
26:e5:be:9f:14:0f:59:23:a9:f5:df:7e:c7:0d:9c:
ac:9b:69:c4:19:fd:fb:54:d5:26:21:f4:29:32:28:
9a:89:0a:73:29:e3:80:83:de:79:93:95:f3:97:5d:
32:7c:0a:7e:36:32:48:74:fb:b6:df:fb:c5:03:26:
5e:d9:0b:f2:d5:5e:2e:51:4f:b3:93:99:5d:ee:3d:
64:15:88:85:fc:f8:bf:68:eb:8b:f8:0a:c3:80:b3:
f0:19:7a:02:a3:46:5a:07:38:7b:41:69:01:53:00:
e1:e7:d7:38:65:7a:86:8e:fd:64:cc:a5:8f:03:09:
09:f1:db:52:86:64:de:7d:14:b9:1c:7c:45:f6:13:
58:ee:49:b0:63:47:e7:a7:c3:46:3b:78:d0:ee:b1:
0e:86:cc:05:d9:fc:25:b1:3e:6f:82:04:08:d2:e3:
08:1d:b2:d2:ce:a0:54:a8:70:40:71:13:ba:01:50:
54:a6:fa:68:bb:6c:7d:bb:88:b8:36:7f:c6:36:37:
9b:f8:47:0e:3d:6b:ca:8f:5e:58:40:51:97:c5:ea:
e1:20:3c:c9:49:47:b3:a1:67:fd:0b:1a:b7:4b:73:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:60:66:08:17:57:BB:5D:97:F6:F9:D1:BF:95:34:3E:BB:4A:EF
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:12:c3:98:25:f3:07:c0:f3:30:92:b2:50:c7:11:26:42:8f:
02:13:b9:ce:fe:c3:5f:75:12:80:89:67:ad:0a:55:f8:85:96:
fa:f8:0d:f6:f5:e9:69:e2:df:b1:59:98:1e:70:7a:77:6f:e9:
23:4e:4d:1c:86:41:28:69:a7:74:d6:ff:04:62:49:b7:61:0d:
de:5c:84:15:f8:48:a9:68:cc:8b:07:3f:35:ba:50:94:59:10:
3c:49:d2:01:23:a1:ec:a1:ad:ae:5d:bc:03:ba:2d:6e:a9:95:
3f:71:72:44:97:db:ec:ff:e1:07:ee:c2:16:ab:39:80:03:fe:
13:99:03:66:9f:9b:46:ef:48:18:aa:cf:f8:d5:be:2e:96:68:
a1:78:a8:8f:df:ba:93:c4:5a:0e:d9:3a:9d:0a:e7:db:d0:5f:
67:f7:30:c2:0c:25:54:19:27:2a:c5:08:6e:3b:1c:b8:2e:48:
6e:80:f5:1f:d3:f8:96:ee:e4:96:76:83:22:d4:10:07:b4:b2:
9b:a8:95:47:1a:0a:d8:f5:5b:9a:23:ea:2b:4d:18:55:f3:99:
da:b1:0f:4e:cf:e2:bb:ee:e0:0a:0b:4d:f3:9b:e1:8b:32:9a:
71:27:1a:f8:5d:e2:e0:a9:79:76:d8:ff:d9:39:b7:dc:e6:2c:
d4:b9:95:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:24 2025 by rpki-client