Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
File: pPC-25eOGSjR6XDKLtlpNxGP_2g.mft (raw, json)
Hash identifier: JQw9X0QibT5G/DJIQk2ja0bIVtcRvgsI24vhGCv99N8=
Subject key identifier: EE:2F:E4:15:16:42:4F:77:B4:62:13:6F:6E:3C:9E:73:13:E9:76:2C
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial: 019A4E86C5AC3631B276EA2726D6429530DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
Manifest number: 108E
Signing time: Tue 04 Nov 2025 11:00:46 +0000
Manifest this update: Tue 04 Nov 2025 11:00:46 +0000
Manifest next update: Wed 05 Nov 2025 11:00:46 +0000
Files and hashes: 1: 9p8e9WoA4C2DPVeIchZFPcz6XaE.roa (hash: 08xeCtquw3Dlp/xIPaCDCsu7UXWt+ysM9TiqCqTDfRY=)
2: pPC-25eOGSjR6XDKLtlpNxGP_2g.crl (hash: SJXOm1O6E3n5fnv7k7FtSyf61J0YIrwnI3IIzyfDCpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c5:ac:36:31:b2:76:ea:27:26:d6:42:95:30:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Validity
Not Before: Nov 4 11:00:46 2025 GMT
Not After : Nov 5 11:00:46 2025 GMT
Subject: CN=ee2fe41516424f77b462136f6e3c9e7313e9762c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:2c:7c:e3:0a:03:ae:e4:3c:54:8f:81:6f:
d8:66:d6:27:b5:2e:28:1b:7f:a0:26:b4:9a:ac:c2:
a4:ac:66:d5:de:69:bc:a5:0a:bd:4a:31:a7:98:84:
93:c4:9b:cb:ad:ef:0d:63:19:ca:ce:18:73:e2:69:
33:ed:fa:72:17:74:13:a8:dd:ca:c9:b9:68:d0:92:
0a:be:43:34:ab:7c:ad:c1:55:29:db:73:cc:16:65:
7e:c8:01:9a:ed:52:5e:73:4f:ad:31:da:88:bb:e5:
37:6e:59:51:52:1c:9b:5c:eb:38:65:dd:52:74:bc:
de:64:02:9a:45:13:6e:01:fb:3b:e3:d3:af:b6:2d:
e7:d9:84:cf:ba:02:13:68:68:b5:b3:0e:2b:ae:76:
f7:24:cc:dc:14:1f:a6:b5:65:49:2a:86:cc:a9:91:
0c:6e:50:f0:a4:b9:2e:6a:e6:da:fa:28:b4:90:f0:
92:38:6d:5c:a9:43:17:67:1d:52:86:6a:2a:8a:05:
93:45:72:14:c0:f3:e7:24:46:af:0e:4f:da:9a:95:
26:f9:07:e9:1a:4e:d5:0f:71:69:cb:0f:56:32:da:
cd:70:c4:c5:fa:07:94:40:e7:14:c4:ed:ec:cd:68:
fa:91:56:9a:bf:3a:ba:20:c6:f7:87:2e:91:ee:97:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2F:E4:15:16:42:4F:77:B4:62:13:6F:6E:3C:9E:73:13:E9:76:2C
X509v3 Authority Key Identifier:
keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e4:88:36:b6:fb:26:5d:4f:c2:77:47:63:34:80:2f:18:ac:
43:40:8d:7f:6e:3c:7a:d3:ce:61:fd:81:f7:da:3d:e2:ef:10:
94:f2:a0:00:f9:63:f6:7a:71:3b:bb:49:28:60:a6:a0:df:3c:
06:79:49:00:eb:4f:fb:ce:68:e0:e8:86:90:42:9c:f8:55:e8:
e9:1d:50:59:f8:6d:d1:a3:1c:bf:3e:8d:5a:d0:5b:8b:56:04:
cb:b8:ed:81:08:cd:62:ed:37:c0:73:d4:dc:ce:7b:0c:d0:95:
90:77:4c:28:a3:9a:72:aa:20:57:32:40:ca:1d:98:e6:6b:f7:
10:47:44:b7:10:3f:62:4c:fb:92:ab:40:de:d5:dd:25:26:1c:
21:ea:97:01:83:f0:a1:92:7c:80:4a:21:4a:ad:44:a5:5e:06:
84:ee:b3:7c:d6:54:52:97:8f:48:bd:74:4f:27:0f:98:d8:21:
9c:76:df:53:d1:01:ca:41:8e:a9:03:9d:e8:84:99:d3:38:f9:
a1:3d:9a:5f:f1:46:de:23:dd:e4:f7:8d:48:ea:01:27:9c:a3:
d4:89:0c:ee:a2:e8:ad:fc:67:cb:74:e7:d6:4f:56:44:a2:68:
2c:6e:95:95:80:d0:47:de:1f:14:de:d2:7c:f6:03:f8:f5:e9:
98:c9:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:27 2025 by rpki-client