Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier: lEnsumQM7WQfq2RKpwMywU/s5ZHy+jEumapM77ucjIg=
Subject key identifier: 81:05:70:0B:E9:83:9C:18:E9:A1:BD:A1:AC:5E:AB:56:87:D5:89:E8
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 019A4DAA8C7AB100A3AB0C4139E3FB3B3A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number: 14DD
Signing time: Tue 04 Nov 2025 07:00:13 +0000
Manifest this update: Tue 04 Nov 2025 07:00:13 +0000
Manifest next update: Wed 05 Nov 2025 07:00:13 +0000
Files and hashes: 1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=)
2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=)
3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=)
4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: kFIu+QFTWsUn41SooUDrp0E1u6N2yACa0M42+jLntmY=)
5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:8c:7a:b1:00:a3:ab:0c:41:39:e3:fb:3b:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Nov 4 07:00:13 2025 GMT
Not After : Nov 5 07:00:13 2025 GMT
Subject: CN=8105700be9839c18e9a1bda1ac5eab5687d589e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:5e:5b:2e:ca:4b:11:52:75:6b:18:f8:a6:
c2:9e:45:f3:ce:12:b5:47:fc:04:07:14:ee:59:82:
f6:b5:6f:17:da:24:a5:89:18:54:8e:5e:b9:69:f1:
0d:63:21:7a:ad:15:7d:07:25:73:d7:27:9f:4f:ad:
88:51:52:88:2c:90:cd:64:29:8b:02:c7:ec:e7:0d:
ef:a4:24:35:b3:6c:5e:89:2f:38:52:d0:f7:ed:47:
88:a4:fc:88:c4:b3:5b:c6:3d:6e:29:45:f3:10:1e:
b6:ab:49:98:e3:a7:8e:5b:4a:5a:68:03:9e:56:b1:
69:9e:ec:f7:b0:1b:3e:d9:61:bf:f1:43:ed:2f:58:
69:73:cd:34:33:41:73:0d:f9:ae:2c:a9:5e:7a:0b:
04:5c:77:9c:ee:d1:c4:2c:16:d0:1f:3a:c0:17:34:
60:be:4a:20:2c:6d:82:8d:ec:d1:dd:b4:1e:4f:0f:
77:58:da:3c:b4:04:b5:f4:a4:c0:69:2d:8d:ff:5e:
1a:34:c8:a0:25:79:b2:ac:8f:03:e6:35:ea:be:c7:
86:23:b1:c2:82:db:8c:ba:c0:b0:ab:f4:f6:78:99:
c3:c2:c0:4e:1d:04:d9:a8:40:ae:6a:a3:1c:ca:13:
64:26:82:02:19:e1:7d:8f:b2:36:8f:92:1d:04:36:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:05:70:0B:E9:83:9C:18:E9:A1:BD:A1:AC:5E:AB:56:87:D5:89:E8
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5f:95:5b:d9:d8:cb:3c:b5:b1:73:38:d1:84:b5:2d:c7:27:
73:1d:99:d6:28:8a:b8:1a:f3:a5:5c:10:50:73:eb:c2:86:6c:
59:bd:98:0c:85:d2:e9:55:24:13:4f:2f:c5:16:8d:18:ab:5f:
0e:54:ef:2f:f4:e1:08:b6:a9:2b:30:4b:e5:a6:1b:c3:43:d1:
3a:a4:54:c9:54:f4:96:53:c8:98:f1:13:d1:61:95:67:6e:9c:
0b:7d:f6:0d:28:81:c0:be:90:82:65:56:0f:f2:02:bb:08:70:
07:b9:46:a1:15:a9:ec:08:3f:9e:a6:d0:61:af:d4:8d:bd:4b:
61:18:2e:75:a2:92:83:4f:4e:0f:af:f4:d5:31:63:ce:9e:d9:
a1:05:1d:47:31:bf:17:5a:7d:98:dd:25:63:0a:b2:15:da:1b:
a0:04:7c:a2:38:c5:1d:07:dc:ac:d9:f9:24:f2:1e:f8:d3:a4:
93:16:3e:68:86:40:9a:af:b6:13:83:2c:f5:62:a3:cc:fa:89:
7d:e2:66:4c:fa:85:80:42:42:d4:19:3f:2e:6e:40:4e:69:f1:
76:dd:f6:96:86:0b:e9:da:01:24:20:93:5d:4f:75:6b:7b:11:
23:1c:47:48:ae:c9:b0:3f:95:3f:99:41:c1:53:e8:be:2c:d7:
95:83:d0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:17 2025 by rpki-client