Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: FTHBUFG3r+bnBNYvHkVlTk/3yDua+oEcciShXfF0eRc=
Subject key identifier: 5A:6F:1B:E4:5B:C0:C0:9D:50:BB:A2:69:E8:B4:7B:0B:7F:13:62:7A
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019A4FCFE77BFBC30806E86EFCB81409CAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 17:00:16 +0000
Manifest this update: Tue 04 Nov 2025 17:00:16 +0000
Manifest next update: Wed 05 Nov 2025 17:00:16 +0000
Files and hashes: 1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: Ddo6QJAh4YgvyWYpts5c2nPf6EN8vtG/kB1hqTropPU=)
2: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=)
3: vmUBBf1TcvR2yAWlv0oGVdOA2cg.roa (hash: YFIKrMFvfaR22V4pTroOMwn6JkreXEZJ3z4MNVZcegE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e7:7b:fb:c3:08:06:e8:6e:fc:b8:14:09:ca:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Nov 4 17:00:16 2025 GMT
Not After : Nov 5 17:00:16 2025 GMT
Subject: CN=5a6f1be45bc0c09d50bba269e8b47b0b7f13627a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:f8:81:b7:3c:20:8b:7b:27:e9:62:de:a9:
bd:10:db:f3:e1:05:55:b0:e0:b8:bf:61:d5:1c:49:
95:8a:85:30:b9:97:66:32:a3:cd:de:77:ae:0b:ff:
77:1a:e6:43:2d:15:23:09:28:0f:7b:a6:12:b7:7c:
b2:bf:af:26:53:d3:15:71:7b:68:02:d6:a9:bd:a7:
81:b9:e4:d8:e4:ce:58:b9:2e:c1:e7:41:25:93:f8:
85:91:87:43:0d:00:91:92:06:66:72:ec:ed:7f:bd:
b3:9b:15:45:b8:4f:d7:80:4a:2f:a0:ff:62:db:7d:
3e:bd:4b:a2:21:e7:33:3e:7a:78:a8:75:e4:a9:05:
94:9f:e5:63:24:ff:a9:4f:b4:2c:64:e8:6f:65:87:
30:2d:33:fd:99:0a:e5:18:25:74:da:52:ca:aa:17:
84:18:39:49:af:d2:77:21:cc:d7:6c:ff:91:35:93:
2e:da:6d:e2:e6:9f:4c:48:2f:bb:e2:44:a7:0b:27:
bf:e9:14:69:67:6c:76:7d:d9:9f:6d:60:26:3a:bf:
f9:bc:80:ff:19:ee:d7:6b:23:a3:d3:91:77:6d:ae:
f5:91:e3:dc:81:ad:25:ca:90:5b:b5:6a:6d:90:0f:
78:f0:a9:ed:5c:40:55:09:5f:99:59:06:9e:ed:36:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6F:1B:E4:5B:C0:C0:9D:50:BB:A2:69:E8:B4:7B:0B:7F:13:62:7A
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:24:20:80:e1:86:fe:78:54:30:d1:77:c0:8f:28:bb:27:82:
41:58:4d:c1:73:cf:58:d5:71:67:74:7a:d8:df:47:dd:08:42:
fe:14:eb:a5:c0:c4:1d:15:90:30:51:d0:ae:7b:56:39:a5:8e:
b3:72:03:f3:60:23:10:ce:dc:7a:f2:63:e3:b9:24:76:60:a0:
ae:68:53:10:e5:14:75:58:c4:04:74:e4:55:01:8c:d3:42:dc:
1f:13:9d:97:99:9d:a0:38:f6:54:b0:7b:d4:e1:15:4a:96:e1:
e2:be:39:87:18:a7:d2:5e:7d:57:b9:86:89:5b:2b:60:42:e6:
af:ff:6e:14:10:24:14:5f:80:ea:4b:b4:74:22:de:13:fe:47:
ac:80:4a:fc:3b:f3:c0:89:bf:d3:90:a6:7f:ac:ba:7d:fd:72:
ac:ba:c2:d5:ab:4b:52:4d:4b:97:06:b4:65:e5:6f:46:70:32:
31:85:98:cc:45:4c:a5:97:e1:66:1b:00:85:30:f8:f9:6f:cc:
70:4b:26:d7:ca:ac:04:e7:7a:a7:ba:e4:bc:1c:2f:20:02:dd:
f7:0e:c9:ce:84:62:45:f1:0e:c9:35:41:2f:32:bf:90:fc:39:
b3:3e:3b:d4:0c:d7:a9:76:70:b7:1f:1b:fb:0d:da:31:5a:17:
10:7f:1c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:12 2025 by rpki-client