Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: BsfbU1bTbviH1AMUoema/KGP+v29vjJ5abuv35g6Zqw=
Subject key identifier: 03:A9:87:7F:E7:CD:C9:6E:B6:EE:4C:A9:AD:58:6E:12:E8:EB:D9:D7
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 019A4E189E2F44EAE5BC5ADA008D393349F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 098F
Signing time: Tue 04 Nov 2025 09:00:27 +0000
Manifest this update: Tue 04 Nov 2025 09:00:27 +0000
Manifest next update: Wed 05 Nov 2025 09:00:27 +0000
Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: 5C/784SLTC/bJ+v/1tpSGfAoOAu69pDhHtTHbkY0xQY=)
3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9e:2f:44:ea:e5:bc:5a:da:00:8d:39:33:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Nov 4 09:00:27 2025 GMT
Not After : Nov 5 09:00:27 2025 GMT
Subject: CN=03a9877fe7cdc96eb6ee4ca9ad586e12e8ebd9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:a6:90:72:70:d0:de:70:68:3d:71:34:af:
8b:ed:ff:2a:f9:38:ae:83:5f:a0:77:7c:d2:4d:16:
b5:05:49:82:98:06:75:69:86:36:e0:cb:70:b5:e5:
58:8d:92:7e:1c:24:76:66:43:04:51:e6:3b:3d:88:
ec:8f:7e:2c:12:61:93:aa:5f:29:33:c6:23:a3:a3:
ce:1c:19:5c:70:93:68:22:0d:89:e6:3f:fe:cf:b0:
c7:da:6a:d0:56:6e:95:c0:af:f8:a8:e8:d3:3f:fa:
87:42:0c:a5:75:56:c5:d9:86:2c:1e:54:07:62:a0:
6f:74:90:81:d0:1c:4d:94:87:c3:fe:88:40:5c:1f:
e5:f6:94:1c:87:7e:cf:4d:7e:e9:f8:61:73:26:a7:
b6:a5:98:bf:8f:70:ea:e1:fe:b8:ae:e1:f6:5e:87:
18:c6:bf:77:c3:c8:5f:d6:29:42:52:ee:e9:28:a9:
e1:31:dc:0f:30:bc:3d:f7:de:f8:61:af:8f:83:9a:
e8:49:d2:76:71:9b:5b:f8:1d:5a:9f:0c:84:db:da:
7e:38:2d:60:03:4c:61:0c:2e:d4:f8:d0:0d:4e:0a:
bc:e9:f7:5e:81:0e:34:60:54:4a:8b:52:e8:a3:00:
56:9e:fd:2b:0c:42:f3:89:93:2d:91:63:71:01:c3:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A9:87:7F:E7:CD:C9:6E:B6:EE:4C:A9:AD:58:6E:12:E8:EB:D9:D7
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:66:ad:6f:9f:6d:04:01:eb:ed:73:2e:49:b9:89:2d:d0:41:
f6:fa:3e:29:d0:88:3a:ff:86:d3:66:c4:fb:4c:68:4d:30:90:
02:ee:74:48:49:dd:71:ca:ca:6f:6b:e4:3c:fa:00:9a:b2:fa:
c9:0b:df:63:94:be:7e:8e:32:6d:fc:1d:32:be:03:17:26:88:
52:2e:6d:39:6c:90:0b:1b:66:fc:87:77:1c:31:81:2c:c8:74:
aa:24:37:0e:3b:63:1d:3e:7d:52:2e:bd:73:2f:07:d3:41:39:
b9:3f:0f:1e:76:95:92:ca:96:d5:81:c6:7f:30:90:c5:06:53:
ba:2a:d2:eb:e2:04:52:56:b0:07:00:e3:f6:13:c6:10:a9:13:
98:4f:5c:8b:17:c0:00:07:95:0a:99:e5:db:04:94:14:2e:d8:
3a:f6:45:69:bf:13:4a:62:6d:31:75:f0:b9:f2:ed:7f:89:b4:
7d:1a:c3:92:cf:d0:41:52:8f:4b:3c:24:78:2f:22:1a:51:1f:
01:4b:2a:fe:1e:ff:6e:34:0f:5f:96:aa:56:df:fc:72:ce:e2:
ef:1b:9a:8c:f1:e8:24:69:d9:0d:85:95:93:4c:26:2e:95:77:
d7:2b:95:9b:f4:87:a5:73:e1:45:5f:91:2c:83:71:e2:6a:17:
d3:38:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:44 2025 by rpki-client