Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
File: PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json)
Hash identifier: pH52nvnhWBj9F3i9iIYsVV0lOzknJgvFiLM72VPLZjg=
Subject key identifier: F0:EF:49:59:C7:02:19:C7:1F:63:B7:26:72:DA:3E:00:86:5F:80:26
Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Certificate serial: 019A4EF52CFF59CC71962BC8C88443677BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
Manifest number: 12B0
Signing time: Tue 04 Nov 2025 13:01:21 +0000
Manifest this update: Tue 04 Nov 2025 13:01:21 +0000
Manifest next update: Wed 05 Nov 2025 13:01:21 +0000
Files and hashes: 1: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: wk/5Af/hnrKMoGPkcvuIPR14xFFhlLkIIMKrX9uFkNA=)
2: Szhjvm0y4QI0uwIjWJbCdPZPvps.roa (hash: Y0iaHG2LAJbIgjzTxyOFn6Uuz+FyO1yYuNhr0qnz3To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2c:ff:59:cc:71:96:2b:c8:c8:84:43:67:7b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Validity
Not Before: Nov 4 13:01:21 2025 GMT
Not After : Nov 5 13:01:21 2025 GMT
Subject: CN=f0ef4959c70219c71f63b72672da3e00865f8026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:76:47:f2:38:b4:72:2b:7e:ab:b5:a7:92:
16:77:8d:63:65:d6:5e:f6:af:91:90:1a:ee:0f:09:
dc:f4:66:f0:71:5a:01:2e:99:c7:db:04:71:8c:92:
a8:25:c5:64:53:dd:80:d8:86:20:49:91:3e:5a:61:
65:59:d2:77:64:89:56:13:b9:c9:c0:18:5f:d3:ac:
e0:fc:bf:eb:91:e7:f5:33:78:0a:9d:cb:41:03:f0:
67:52:5d:53:35:1a:d6:50:cc:ee:bf:33:fb:f0:fd:
0b:5c:ca:00:d8:61:c0:c5:ae:c3:ed:88:6f:15:a9:
b5:a3:d6:34:ad:f4:5d:30:50:e3:34:42:bc:13:46:
8d:63:b0:e0:3d:4e:eb:2f:4d:51:fc:c5:bd:da:b4:
7f:64:50:50:b7:f0:a4:83:3a:99:77:c7:7b:47:98:
dd:32:ea:e5:b6:86:35:10:47:7b:fd:94:d0:de:68:
59:af:88:29:80:23:80:0b:90:ee:8a:cf:a2:ec:58:
86:47:44:d8:47:1e:c1:fa:d9:55:93:d1:b2:73:f6:
85:c1:dd:86:72:3d:09:f7:be:9e:7f:e4:9a:cc:fd:
f0:a1:05:dd:7d:e5:6f:c7:fd:ed:2b:62:74:c6:34:
e0:4f:9a:9a:30:af:ba:f1:f5:b7:fa:f3:05:a1:26:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:49:59:C7:02:19:C7:1F:63:B7:26:72:DA:3E:00:86:5F:80:26
X509v3 Authority Key Identifier:
keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:62:e5:45:c9:72:ef:3e:b4:a6:0d:4b:48:d0:cb:3f:2d:fd:
76:d8:91:22:b4:fb:cf:ad:fa:84:2d:9d:c7:52:6b:9d:03:db:
98:39:db:e7:0f:bc:5c:92:cd:8c:a1:65:3e:6c:f5:15:cc:f0:
23:cd:2e:bb:fd:81:6a:82:61:b4:20:1e:0f:e1:82:9b:c3:5b:
28:25:09:94:92:75:ca:1e:ea:d3:86:a1:32:c4:1d:6f:95:87:
a8:7e:0e:a4:ad:eb:7c:dc:0d:5f:77:a6:d6:ea:1e:8f:57:af:
5a:1e:bb:1f:e2:c4:c3:fb:ba:75:3f:e7:6b:a0:6e:a4:2b:85:
54:b2:fc:41:e4:91:56:5d:7a:d4:98:64:b4:85:16:c0:85:bc:
58:15:11:5d:5e:2b:a5:78:bb:0a:43:c5:46:de:04:47:c0:b0:
2c:07:6e:de:9c:87:41:ee:a3:76:6f:33:9c:be:78:38:83:6e:
13:b0:70:f4:df:9e:5f:85:cb:40:33:f8:a1:53:5f:ea:27:1a:
15:9c:62:c1:9f:04:89:fd:9e:a6:e7:c6:83:73:4b:61:df:80:
78:c6:ec:5e:59:90:06:e7:a5:7e:8c:30:2a:45:78:3f:bd:c9:
b7:40:ef:d6:43:0e:1e:73:ec:dc:72:8c:7a:4e:1c:88:82:3c:
b5:8a:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:30 2025 by rpki-client