Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier: Q54b2SOPMGqW7a2n5KvcblVqL0QdZd51G0XzUAS004Q=
Subject key identifier: EC:A4:1D:03:58:09:2D:32:EF:BF:CD:74:69:29:DA:B2:35:3B:43:D9
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 019A50E430AEAB08FFBA0C79A9B73B8D223C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number: 06A3
Signing time: Tue 04 Nov 2025 22:02:03 +0000
Manifest this update: Tue 04 Nov 2025 22:02:03 +0000
Manifest next update: Wed 05 Nov 2025 22:02:03 +0000
Files and hashes: 1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=)
2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: wazp0chaLC3LCLBJkeFca2ZlQP48uEWdrMn1d/BGTjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:30:ae:ab:08:ff:ba:0c:79:a9:b7:3b:8d:22:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Nov 4 22:02:03 2025 GMT
Not After : Nov 5 22:02:03 2025 GMT
Subject: CN=eca41d0358092d32efbfcd746929dab2353b43d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:29:11:1a:c5:d4:e6:40:8b:70:f4:bf:df:
63:c2:73:db:df:7a:10:e5:56:7b:04:17:6b:f4:d0:
9d:9b:2a:e2:ce:90:88:7f:f4:ed:0a:cf:97:73:a4:
e4:4c:33:ee:18:a0:d9:3d:d8:ce:de:eb:9d:57:8d:
c6:95:4d:9d:ed:aa:c8:b8:e1:2c:01:8c:7b:40:0b:
99:27:36:92:3d:f8:fc:53:f5:df:57:e2:92:5b:01:
d2:1a:20:25:3f:61:b2:79:b9:08:22:94:51:da:7b:
41:19:91:20:28:5c:8a:96:b2:65:48:c9:6b:bc:0b:
9d:b0:c8:7c:d9:87:50:f2:82:b0:d9:63:db:19:3c:
fc:b5:54:19:a7:6b:2e:8d:dd:59:c1:6d:85:ae:48:
6b:70:d1:a0:d4:3e:38:58:a6:cf:82:8a:4e:f2:d9:
9f:4f:9b:9f:51:40:40:b9:3d:a7:27:48:a6:7d:6a:
11:7a:d9:16:38:36:4f:79:52:e1:5c:ef:39:7d:96:
da:0d:39:97:38:37:96:55:2c:01:86:5c:39:96:14:
36:f7:9d:c3:12:9f:75:e8:06:5b:45:6c:c6:42:64:
df:1d:61:e3:8a:7e:27:6b:95:8d:70:6e:72:71:65:
ff:43:1f:cd:b0:16:05:15:75:05:52:eb:77:0d:0e:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A4:1D:03:58:09:2D:32:EF:BF:CD:74:69:29:DA:B2:35:3B:43:D9
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:08:fc:41:72:17:88:97:0b:58:b0:74:b9:dc:f6:d5:89:b8:
15:89:cf:e4:6a:f2:f9:51:bd:93:95:db:e0:f1:c4:bd:8c:48:
f8:20:0d:c0:76:48:58:76:1d:af:3e:87:51:8e:0d:65:3c:ec:
15:72:ce:84:99:34:30:0a:7e:5a:39:8c:a9:3b:21:df:b2:80:
bf:e4:64:99:31:4d:13:f9:68:b3:9c:0f:fa:19:6e:dc:72:9d:
14:c3:90:7e:95:8f:9a:fd:a9:64:a8:10:70:92:e2:88:df:0c:
9f:72:d0:19:a6:eb:f8:33:8b:f0:20:19:ca:93:7b:c0:78:8c:
61:fb:8f:34:53:f8:96:15:ca:5f:39:d2:a7:ee:f3:31:0e:db:
21:67:5b:7f:65:71:02:d6:38:0e:bd:aa:02:c1:a0:c2:6d:10:
64:4e:23:26:bb:f6:88:12:67:94:55:e0:40:4a:e0:f7:e4:5c:
47:e5:f6:c8:55:00:17:66:2b:ed:7a:24:fc:ff:f0:c7:e1:c0:
09:e5:27:f1:1b:17:1d:35:5e:cb:a0:58:4c:cb:10:a5:af:26:
bd:75:d5:65:94:31:44:11:52:d6:87:30:f7:70:f9:07:0e:3b:
9c:6d:3a:3c:e3:95:28:ac:d9:4d:97:7a:33:a6:c7:06:5d:59:
83:06:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:51 2025 by rpki-client