Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: qViRPpNV6QdaiBWf5D/L6MEXcuzwHtsEeJRWnDzIqH0=
Subject key identifier: 16:7D:F6:68:BE:5E:D2:B8:A8:04:A0:A5:BC:6A:AF:98:F6:B4:3F:E3
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019A4F2B784706DD9C55FB5993FFAB2C6AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 108E
Signing time: Tue 04 Nov 2025 14:00:40 +0000
Manifest this update: Tue 04 Nov 2025 14:00:40 +0000
Manifest next update: Wed 05 Nov 2025 14:00:40 +0000
Files and hashes: 1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=)
2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: DylQoTV2FxxZtI6k4RzBiu5Q8ry8I+B45xWoJYxTJTs=)
3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=)
4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=)
5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=)
6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=)
7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=)
8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:78:47:06:dd:9c:55:fb:59:93:ff:ab:2c:6a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Nov 4 14:00:40 2025 GMT
Not After : Nov 5 14:00:40 2025 GMT
Subject: CN=167df668be5ed2b8a804a0a5bc6aaf98f6b43fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:ba:03:f5:c9:71:76:46:cb:be:6d:73:75:
d8:e6:ad:6c:29:3a:94:17:7a:90:76:e3:b7:1c:06:
6c:9d:4f:74:20:83:c4:db:47:fc:3c:d1:30:70:8d:
64:3e:b6:e6:e6:29:ef:03:d7:0f:77:47:a1:f6:2d:
c3:21:c6:e3:b9:75:02:06:78:e3:90:87:da:36:0e:
24:b8:83:77:e5:38:f4:1b:0d:ed:ac:7f:19:63:fc:
a4:af:bb:2d:a1:e4:a4:a0:ca:6c:22:6f:d5:5e:f6:
61:ba:d4:68:e2:ba:0f:54:01:32:78:ff:d2:23:d7:
44:41:2f:13:6b:f3:a6:19:1e:18:82:a0:7a:d6:bb:
ed:be:4d:be:1c:ca:c1:a5:5d:d9:b9:c3:37:d5:62:
04:48:1c:63:77:f0:f0:40:34:de:d0:78:0a:78:37:
b9:1c:13:1a:a2:8c:98:5a:99:05:da:15:12:5b:9d:
20:91:35:38:9b:82:c5:df:f1:0e:3e:a0:21:b6:c8:
b3:f1:b8:4a:c7:24:30:8e:46:e7:ca:31:6c:40:52:
3a:5d:d0:34:d1:91:64:f2:6b:75:5a:ec:a0:79:3a:
64:83:32:6e:ba:b6:19:89:15:9c:90:3e:46:6e:d1:
f7:e5:c1:2e:60:9b:02:5d:a1:95:a0:69:94:3b:f4:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7D:F6:68:BE:5E:D2:B8:A8:04:A0:A5:BC:6A:AF:98:F6:B4:3F:E3
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:93:c3:5d:9a:a0:36:20:03:63:47:7c:85:14:c2:87:7a:1f:
ac:c0:86:98:4a:a7:73:0d:d5:9c:1a:9d:68:c6:fe:20:a1:7b:
46:23:8a:35:bc:c5:6a:d2:7d:9b:19:cf:1c:0c:07:78:7f:cd:
d0:a6:69:84:74:33:be:91:c6:b9:56:bc:72:11:67:09:aa:2c:
03:fe:75:7f:aa:8d:6d:fe:75:05:83:ae:0a:71:be:f0:c8:a9:
50:f5:64:d5:5d:44:c7:fe:09:75:83:ca:03:2c:4f:7c:c0:10:
59:72:96:81:47:31:bf:f8:d6:fd:04:25:d2:01:7d:2b:da:dd:
ed:68:21:85:db:55:7f:ab:b9:d2:6d:6a:2e:3e:88:fa:09:0e:
7e:62:0d:88:a3:45:1f:c3:8b:5d:e7:27:28:6d:10:e5:5c:69:
92:3e:6c:13:01:db:dc:7a:90:b8:88:d1:da:3a:d3:ec:e5:77:
7d:2d:14:ef:37:39:b4:83:12:19:c3:81:f6:8e:8d:0e:c4:4e:
28:69:dc:1d:1f:ae:fe:17:a1:8c:82:dd:c6:d7:51:ad:0b:1f:
2f:d6:4a:b8:eb:cb:90:bf:4b:86:ce:65:4b:16:d3:05:5f:d3:
27:03:98:30:d8:b0:d0:38:b8:e5:95:8a:72:c2:c6:c4:ea:8f:
e4:97:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:01 2025 by rpki-client