Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: v7/bIlj+D8yBAyb9ljXvQk4wZjOFbwiMEdwone50Hck=
Subject key identifier: 1C:E0:E1:79:F6:FD:F7:FC:C6:41:6A:28:87:06:F7:AF:D6:A9:3A:17
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019A515061B5C62EB844DC71D61BA79B4BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0B37
Signing time: Wed 05 Nov 2025 00:00:13 +0000
Manifest this update: Wed 05 Nov 2025 00:00:13 +0000
Manifest next update: Thu 06 Nov 2025 00:00:13 +0000
Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: D7DMmQJgfgoVRaHtjf1GhEvDO17JW/liQNR9Egnk/0o=)
3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:61:b5:c6:2e:b8:44:dc:71:d6:1b:a7:9b:4b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Nov 5 00:00:13 2025 GMT
Not After : Nov 6 00:00:13 2025 GMT
Subject: CN=1ce0e179f6fdf7fcc6416a288706f7afd6a93a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:d5:bf:c7:7e:36:ce:c8:75:67:fa:2e:6c:
48:ec:71:bd:2b:93:9c:64:cd:d9:3a:77:d3:c0:f4:
4a:84:c7:04:f7:87:c8:c0:4e:47:dc:31:4d:03:ae:
c6:30:66:63:52:a3:15:80:89:43:d1:a8:75:43:64:
f9:ef:93:81:6f:e6:c1:58:62:66:86:94:53:43:ad:
f0:8e:39:a2:2d:33:05:33:89:3e:8a:85:d8:cb:cc:
38:3e:83:a6:b2:06:ed:39:49:98:88:52:cb:5d:61:
fe:bc:b5:0a:b9:34:ea:70:83:f3:ae:ea:f2:50:0d:
72:c2:ad:16:55:d2:00:8d:f7:b3:c4:dd:7c:4d:8a:
f5:09:eb:22:f2:a8:d9:d1:4b:d6:f4:9f:a0:79:23:
41:e7:0a:56:62:e3:f9:6f:72:e2:a1:2c:ee:2d:79:
31:cc:ee:f0:bd:cb:fd:28:ef:d9:19:aa:73:11:52:
ad:00:d2:77:dc:51:45:5c:19:3d:54:9d:43:6b:88:
8c:b5:15:fd:91:9a:29:03:c0:c5:a1:1d:b8:1d:ff:
f5:e1:6e:50:65:ec:1b:dc:c8:29:6f:62:8b:4d:33:
76:b5:1b:c4:84:1c:9a:4c:1a:42:a1:00:48:03:a6:
e3:14:ee:a6:e6:e7:d2:c5:1a:33:16:cb:98:39:69:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E0:E1:79:F6:FD:F7:FC:C6:41:6A:28:87:06:F7:AF:D6:A9:3A:17
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1b:f1:37:37:a2:11:81:c7:61:97:94:c8:b1:76:61:cc:d0:
4d:07:cd:d8:16:1f:e3:50:29:8e:e4:99:5c:1f:0d:14:f2:b2:
45:53:71:23:5e:32:49:fc:23:38:20:96:85:54:cd:17:c5:12:
1c:52:8a:62:48:15:5b:82:46:9e:f3:ae:21:c5:2f:46:d6:1c:
d6:06:1d:2f:c5:7d:cb:4a:ab:ec:28:02:c1:74:3f:c0:b1:33:
7d:0d:ba:50:f2:2d:4a:c5:da:2b:cc:3f:31:7c:ac:d4:55:f2:
91:18:3b:56:05:df:48:a4:70:72:e1:cc:23:bf:da:a7:08:3f:
c0:fd:ca:96:76:3e:2c:ce:b9:5f:48:96:80:be:44:e2:e2:e4:
d4:be:21:06:7d:30:f8:fc:85:3c:ea:67:91:82:6a:18:3f:30:
d6:a5:fc:35:a1:0d:e9:a0:c4:88:14:b4:83:e0:42:c7:93:41:
1c:40:f6:ff:5d:c7:b9:1d:72:c5:ae:f3:6a:9e:7b:d8:38:82:
23:c1:f1:90:24:4f:03:c4:d7:21:aa:69:5f:5f:e5:06:80:6d:
d0:58:34:d6:d8:54:1b:07:3d:e3:c6:66:5f:de:2a:53:57:e8:
c3:c8:25:df:ad:69:b6:ca:e3:c2:a5:4e:9e:1d:2e:6e:d1:8d:
7a:14:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:07:38 2025 by rpki-client