Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: f4Zq/uKM5Hed1E6Xi2X54D10eP05vtQ2TMbsJw108KE=
Subject key identifier: 04:83:D6:6D:17:56:BC:8D:08:87:D2:AD:E4:96:3C:D0:56:9A:A2:61
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019A4DE1D68C922B744BB591E8DC144A434D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 114A
Signing time: Tue 04 Nov 2025 08:00:37 +0000
Manifest this update: Tue 04 Nov 2025 08:00:37 +0000
Manifest next update: Wed 05 Nov 2025 08:00:37 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: zkJ2zHhqSFXJs4wFwinqpu6n0EpDA4fKxZpd/ZZ0EdI=)
2: X4mIRbShCI_swD4AYibAfXumzPE.roa (hash: ZCD8FV34ZVGGbkTB2fH3uXc5W92QDu1a+e1QI3r0+es=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d6:8c:92:2b:74:4b:b5:91:e8:dc:14:4a:43:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Nov 4 08:00:37 2025 GMT
Not After : Nov 5 08:00:37 2025 GMT
Subject: CN=0483d66d1756bc8d0887d2ade4963cd0569aa261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:3d:9e:55:27:e6:1d:bb:7e:bf:47:cc:8f:
61:ba:ad:b1:31:51:74:e5:2a:69:64:03:18:42:b9:
46:87:54:67:3e:8c:9d:4f:d9:cb:ce:23:02:fa:19:
31:13:78:ad:08:f3:e3:f1:f2:a8:88:cc:b8:8d:46:
a3:56:0c:e7:09:61:bc:b3:f1:8d:bd:0a:15:47:48:
d4:f4:9c:39:d5:56:8b:b9:0a:12:d8:0e:e4:d5:79:
e8:7e:9e:83:f2:31:93:9b:00:4b:7f:2b:32:e2:1e:
25:cb:d0:0d:9f:dd:fc:5d:00:52:9f:a5:b7:35:67:
7f:af:c3:72:99:b6:44:ba:d0:0c:56:e5:c1:14:63:
a0:15:ed:e6:83:43:cf:59:d5:b4:68:27:93:ce:de:
9d:8b:12:a3:09:3e:13:dd:12:f5:af:eb:79:96:38:
f0:a0:21:dc:0d:90:ed:c5:3a:f7:41:be:8f:94:16:
ba:7c:8e:ae:6f:d2:01:12:7e:72:e6:04:a2:ec:6a:
28:ff:82:3b:50:eb:eb:33:d3:78:1a:2e:44:44:75:
5e:a4:7b:fa:b5:ac:79:83:16:22:eb:11:02:f5:a8:
6a:31:04:48:d2:6b:e1:ec:bb:2d:52:d3:9e:17:74:
58:74:cb:9e:d9:42:2e:92:9b:50:74:6b:24:58:d2:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:83:D6:6D:17:56:BC:8D:08:87:D2:AD:E4:96:3C:D0:56:9A:A2:61
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:04:43:7c:fa:b3:e9:0d:69:08:f7:95:0a:c2:f5:33:6a:5b:
b5:70:57:4b:05:a6:41:b3:e7:d1:a8:9a:80:15:c9:3d:b5:90:
32:d1:0e:25:e0:8d:6f:cf:cb:c0:9c:ee:48:17:3b:92:00:b5:
6c:aa:8e:c8:ea:06:b9:d8:73:07:c0:c8:2e:e1:35:36:6f:42:
12:ef:e3:ea:6e:41:c9:96:3c:c5:fe:bc:25:70:97:30:da:ae:
1e:a0:dd:08:f0:6d:7c:3b:81:19:7a:fe:ea:d0:b9:66:6b:8d:
31:23:be:e9:b2:74:a0:31:eb:12:63:7c:3d:f9:27:5f:a4:11:
f0:e7:84:4a:b7:dc:66:60:e2:02:66:d6:64:c2:e8:fa:03:bd:
54:5d:b3:ed:b5:c5:18:9c:e8:82:6d:78:fe:a3:7e:05:d1:e9:
ed:c4:05:c3:8d:c9:d3:8b:36:f7:7b:f6:01:a5:ac:4c:21:70:
51:1d:45:97:75:5f:a1:40:fa:7e:1a:c0:35:55:1f:e6:fa:8c:
19:29:2e:d6:e1:52:de:14:18:70:29:14:8a:f4:69:7a:54:c5:
c2:e5:8c:97:04:5a:9c:08:92:98:1e:fa:ef:57:05:00:b7:e4:
c7:d2:68:02:c1:43:72:50:a4:cf:f7:5d:b3:01:57:6a:75:f0:
e6:c2:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:00 2025 by rpki-client