Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: +uJwgi1zqG+C9QtcQSAxIbHTqbFu91Vr4M+gQ1ns6RA=
Subject key identifier: 91:46:38:8E:F1:05:94:E1:A0:69:EE:00:E5:89:81:9D:D0:B9:0A:19
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019A730122FCAA203A6A7F606573B077F8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 0651
Signing time: Tue 11 Nov 2025 13:00:45 +0000
Manifest this update: Tue 11 Nov 2025 13:00:45 +0000
Manifest next update: Wed 12 Nov 2025 13:00:45 +0000
Files and hashes: 1: 1-iOVIXz47qr-JLuInaHzpTgpem8.roa (hash: aQd2tRqEfKRVYoKZ8bIlvH9byaMVj2lET2FwBKaobPk=)
2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: +sk7x1By1IsEZIsF576OTN9MFf7edpBF5+AeQu5tJPs=)
3: jCGGbslP38BuOy2f_eS54xc-hWg.roa (hash: rfVT0PEc4ZDXhhwqi4mRItGvqKV42ncM8sTUj9MUtx0=)
4: lFHDzTXqiwUlXqs5qOXSJRmYXfE.roa (hash: Kj0KUbB2+KfwbsuGFaPjdzmb30sagRusRai8T0ZrnFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:22:fc:aa:20:3a:6a:7f:60:65:73:b0:77:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Nov 11 13:00:45 2025 GMT
Not After : Nov 12 13:00:45 2025 GMT
Subject: CN=9146388ef10594e1a069ee00e589819dd0b90a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:53:be:50:c5:c9:9a:88:bd:c1:1d:68:33:
f9:3d:8e:e9:4c:bd:9c:c2:e8:31:e1:6b:4f:90:cd:
fa:ab:2b:55:bf:4f:c2:66:76:49:fb:02:11:f9:2b:
ef:d4:c2:d4:33:29:57:c8:90:c9:1e:a7:1f:a7:8a:
5f:44:d7:59:b3:7a:ca:58:ef:8c:7f:3f:64:ed:88:
8a:61:07:ff:97:13:c5:fc:b9:42:25:5a:02:5b:d5:
f1:50:8a:2f:84:b2:83:2d:53:4d:fd:c0:bc:f2:c3:
b9:a5:e8:13:aa:06:eb:1d:e6:ce:c7:dd:fa:33:4b:
bd:19:71:60:95:7d:1c:6d:35:bd:07:73:64:09:07:
b5:ab:69:ec:da:f9:69:7d:8f:b1:a7:fa:70:7e:ae:
a7:dc:61:3f:92:fe:f2:63:d9:d2:d5:bd:89:95:f4:
72:66:f3:0c:60:53:8e:74:df:32:14:72:1a:5e:96:
cb:a0:58:c4:3c:5b:99:c7:99:24:22:6b:03:12:9d:
81:4e:c3:7c:51:91:0d:69:df:17:ca:a0:e8:29:b8:
61:b7:33:c6:0c:db:e8:c1:e4:b3:85:87:27:89:5e:
17:ff:04:66:6a:ef:a9:7b:11:8f:c1:6b:02:85:68:
31:c8:f7:f9:0c:69:4d:3d:ab:39:94:23:93:8c:55:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:46:38:8E:F1:05:94:E1:A0:69:EE:00:E5:89:81:9D:D0:B9:0A:19
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:07:0d:0c:6d:03:6d:7f:f7:ec:0d:c4:bc:06:cf:9e:ec:92:
2c:66:14:45:f7:fe:75:a8:1e:4d:b0:10:68:5d:36:e3:51:11:
48:47:fb:3a:f0:3e:15:48:0b:49:3f:97:a9:ed:1c:a4:d4:2d:
47:f7:63:95:86:d5:5d:35:e4:46:44:b0:0e:e8:06:71:81:ca:
73:d4:a8:97:c5:86:a2:64:58:b0:42:77:72:64:2c:99:bd:2d:
b9:8c:8f:6b:a5:2a:9c:f0:93:1f:96:8e:f3:43:0e:1a:81:84:
74:56:45:2d:ab:04:11:73:f9:ac:46:10:4e:2e:d7:f8:8a:98:
bb:d6:4c:38:5f:1e:f6:8e:50:39:26:33:52:1d:a2:dd:13:7d:
c3:b6:20:46:35:1d:5e:a9:28:c1:63:b7:02:0f:cd:eb:dc:ce:
30:49:55:d4:37:9a:a4:8e:df:ee:a5:3b:a7:1f:60:26:45:73:
93:1a:43:ad:f5:96:3f:66:22:eb:f5:0b:06:97:7c:f8:36:97:
4c:bb:3d:73:f7:1a:1e:70:42:d9:c3:16:d6:2c:f1:c5:f1:1d:
75:81:c0:74:f5:a2:26:07:16:d6:28:4f:cc:e7:de:0a:c5:94:
97:b3:14:78:04:c3:81:f4:fb:f3:a9:a2:75:c5:93:24:f4:78:
ca:50:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:00 2025 by rpki-client