Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File: Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier: qLEYnL2+FUQSs0mH+P+iDYnOBLY0X+Wb/cmHyjGg4G0=
Subject key identifier: 3C:BA:74:C3:D2:9A:FB:7B:54:02:0A:94:D9:75:9E:2E:E7:77:D3:77
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial: 019A1EE392BBDE5BDD2A4676FD3843CBCAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number: 16F3
Signing time: Sun 26 Oct 2025 05:00:21 +0000
Manifest this update: Sun 26 Oct 2025 05:00:21 +0000
Manifest next update: Mon 27 Oct 2025 05:00:21 +0000
Files and hashes: 1: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (hash: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=)
2: 9ZGSbvVWGJA03vrSyQUEVarRr-4.roa (hash: cPvp9kLsR1g5wI6QgkJQ/4iEUD2cM7N5TL8rSHXBr1c=)
3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: nPLzMktlTsuGTXd0s4qDcJfd61fH2HvOmD/HqZS49+U=)
4: k6_D03YidxIC349EjXRq0tAB-Qo.roa (hash: EeEY/m7OL+tVaal0Hy7U3tDs+glAoHmKchjSxGhakus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:92:bb:de:5b:dd:2a:46:76:fd:38:43:cb:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Validity
Not Before: Oct 26 05:00:21 2025 GMT
Not After : Oct 27 05:00:21 2025 GMT
Subject: CN=3cba74c3d29afb7b54020a94d9759e2ee777d377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:31:13:42:b9:11:b6:a0:3c:4a:ae:e4:a3:
d6:a8:cf:16:ec:31:73:95:99:fe:42:06:c7:1d:0b:
37:6c:49:29:2a:31:f8:6d:e9:5e:3d:14:55:7c:58:
d6:53:79:a0:df:ea:bb:29:33:03:d7:74:e0:52:98:
a4:90:be:c7:41:0f:71:fc:9c:67:db:0f:5c:38:99:
24:ae:63:ec:4c:02:cc:c1:87:f5:61:6c:28:65:f6:
49:01:21:8a:3e:76:a0:fb:7a:6a:38:14:91:bc:9c:
76:4c:70:9a:55:24:bd:37:96:04:7a:66:4b:8b:ea:
86:b8:c8:50:78:d6:1f:66:20:a1:06:7f:d2:2d:a2:
ff:11:3e:63:54:4f:76:94:81:ee:c1:0e:93:73:39:
f4:1a:0b:6d:77:18:31:b1:65:cc:21:fe:3f:b7:65:
8b:50:ad:0d:be:84:31:f0:ef:b2:ee:60:a4:90:d3:
ee:cf:2b:60:ff:23:ba:a4:5e:04:fa:04:4e:d7:01:
99:67:ce:cc:87:22:bc:cb:59:ea:6c:2f:b6:41:83:
c2:bf:9b:c0:24:2b:eb:91:2f:68:fd:a4:ca:76:61:
06:5c:00:8e:a9:7b:91:c1:65:93:bd:03:52:42:6d:
14:93:6e:3a:aa:4a:f1:77:49:06:ce:f5:a4:b2:04:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BA:74:C3:D2:9A:FB:7B:54:02:0A:94:D9:75:9E:2E:E7:77:D3:77
X509v3 Authority Key Identifier:
keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:68:b2:db:07:72:36:cb:77:f7:08:03:d8:49:89:f8:04:f3:
2a:31:82:f8:69:f6:23:bd:5a:1f:15:b7:06:c1:99:f2:44:4a:
a9:a2:58:70:ad:87:52:b8:0a:3a:6a:b4:cb:be:bd:f4:0c:d6:
25:86:94:e3:c0:91:db:79:bb:90:d9:9b:a5:60:08:50:e8:41:
6d:93:dd:da:85:2d:c6:fd:06:54:82:e2:ff:62:05:60:77:3d:
2f:87:e4:c9:51:90:94:5f:44:a1:a0:fd:5d:dc:b3:09:cf:28:
be:95:fc:20:91:c6:55:bb:6e:85:8f:84:cb:92:1a:87:55:aa:
d1:d0:59:24:3a:1b:3a:af:cc:ee:36:9a:cf:b6:0a:73:0f:60:
a4:12:dd:28:7a:44:7d:47:86:0b:eb:95:95:6b:fb:b7:d4:14:
8a:22:18:4c:c4:03:f9:c6:53:54:6e:92:0b:cf:3c:f3:1e:a8:
f2:a7:03:3f:75:7c:eb:cc:3b:8b:55:63:6d:85:e0:7d:a1:4b:
9f:43:49:f3:21:fd:f8:2f:59:6a:ec:a7:a4:4d:05:e4:62:27:
06:84:28:81:58:14:ab:2e:96:26:6c:49:79:95:4e:6f:c3:77:
93:77:4a:56:86:47:d3:2e:e5:7a:45:2d:53:70:be:a1:2e:2a:
e0:60:b0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:54:20 2025 by rpki-client