Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File: Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier: 24Ky/xn9Iz/n9ulczVwPdkfnF9fjKddrUQfNE+UQROQ=
Subject key identifier: 16:20:59:74:59:41:A7:90:FB:97:C8:EF:F6:B5:31:52:A0:2D:EA:75
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial: 019A4EF46A68743A4774D8F634C927842C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 13:00:32 +0000
Manifest this update: Tue 04 Nov 2025 13:00:32 +0000
Manifest next update: Wed 05 Nov 2025 13:00:32 +0000
Files and hashes: 1: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: 1CPn7lZ8X2QIs6I/GZY54lvMUBl+NIXrz3KYOJA+86Y=)
2: Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa (hash: nd+025SnSLe+QrA8ZI1nLVUbcuTRnShB52imVtkdZsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6a:68:74:3a:47:74:d8:f6:34:c9:27:84:2c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Validity
Not Before: Nov 4 13:00:32 2025 GMT
Not After : Nov 5 13:00:32 2025 GMT
Subject: CN=162059745941a790fb97c8eff6b53152a02dea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:bc:24:f6:5a:fd:ba:8b:c5:c1:c7:12:58:
00:2a:5b:0f:8c:e4:54:48:df:70:3f:eb:ad:0a:62:
18:52:ec:e7:a2:3b:b1:bb:e7:62:9a:73:ae:32:aa:
47:ed:c9:f0:b5:f5:96:77:fd:28:9d:f9:bd:18:3a:
b5:b5:bc:70:21:76:cb:fa:ec:38:37:f5:23:90:1f:
01:36:ff:9d:6d:1c:c2:19:e3:36:a5:61:64:c2:3c:
65:d7:63:8e:50:71:9b:18:01:fa:d8:4d:a6:aa:56:
5a:b4:79:f3:13:fe:d0:4a:e2:4e:30:1a:57:3f:c7:
ec:d3:dd:37:00:f9:d0:5b:d5:71:29:c7:01:c7:6e:
2e:22:ba:fa:46:be:5b:c3:50:69:78:60:55:42:58:
6a:61:48:1b:c8:cc:1c:99:8e:dc:30:f5:11:6d:c5:
ae:d2:2a:b4:7c:58:ae:44:8d:27:c0:cc:d0:59:6b:
b2:6d:64:8a:33:a7:f6:90:2b:8e:6c:cd:2a:30:a3:
60:64:8f:3e:d7:29:f1:41:3f:a3:fa:58:a3:37:da:
a5:9c:41:d7:d5:6c:e7:d9:2f:e3:08:ca:d2:0e:2e:
41:ee:e3:de:a9:89:51:30:05:6b:f6:8c:26:4f:4d:
8b:12:23:09:fb:9f:0e:2c:63:06:32:c9:31:4c:2e:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:20:59:74:59:41:A7:90:FB:97:C8:EF:F6:B5:31:52:A0:2D:EA:75
X509v3 Authority Key Identifier:
keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e7:84:7d:03:39:61:84:70:ea:20:a7:e6:7e:bd:e2:d4:ec:
04:41:70:66:ef:26:44:7a:ef:2f:f5:e5:b9:c1:41:9f:5a:5a:
06:66:1b:32:e9:ee:7e:d0:62:bf:4f:a2:af:05:86:dd:1c:f4:
06:8c:6f:54:f6:14:0f:d3:17:9e:a5:70:16:8c:78:57:a6:1e:
12:e8:a9:6b:07:6f:fb:6c:c1:6d:14:b2:48:25:01:07:f4:19:
95:13:60:56:24:ab:a8:38:3e:98:f3:c0:57:42:c9:f8:28:98:
a0:92:bf:72:fe:9e:00:28:bf:7f:ef:5f:22:36:a7:37:30:a8:
ef:e1:00:da:36:43:a3:34:cd:8f:43:60:6a:bd:cf:4c:79:21:
16:49:47:13:86:f1:e7:ea:2d:86:ae:7f:fc:b5:8d:23:9a:b5:
b0:9b:2b:2e:ec:f2:97:41:fa:de:a3:b6:bb:49:2a:c7:d2:25:
ac:ca:ad:a6:7f:a1:3e:a3:96:b9:91:35:10:5f:dc:28:af:e3:
90:bb:e5:fb:73:ae:8b:78:1b:da:58:2d:07:51:e8:1e:45:c6:
1e:c6:94:a6:c3:56:67:94:a8:ab:ea:be:ff:60:8e:87:37:5e:
eb:46:56:35:73:44:d2:2e:6f:07:19:08:94:f4:2b:5c:51:b6:
55:59:c8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:59 2025 by rpki-client