Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier: 5S8mXi05RVVL4m3Ml3LyIce8DYbPDGJRh/rC3ArUrHs=
Subject key identifier: 7C:54:9F:F4:26:68:5C:85:C8:D5:C5:DB:25:32:9C:62:3A:D5:36:97
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial: 019A5150D84367BBAD4F06884CEC572D3573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number: 01A3
Signing time: Wed 05 Nov 2025 00:00:43 +0000
Manifest this update: Wed 05 Nov 2025 00:00:43 +0000
Manifest next update: Thu 06 Nov 2025 00:00:43 +0000
Files and hashes: 1: 1-AcyZzR_rYiM2ehdDTTg0kr4UTw.roa (hash: qHmoXJmRx4dkuxN3uy5t1kjSUTwhuDfIP867Nh4f5Ts=)
2: LbGHBzwRAfceRmxwP2ccsuOGwGU.roa (hash: ZwRIC8Resn0brXABJWxiiw1dDspM+fWK1hVb1pb6YYQ=)
3: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: BXZN2bnXe9sGTRlpWtEVUXbujlGp3hM138j2UiglFcQ=)
4: VjUF6mkOxxkGBT69SzLniaN5UYw.roa (hash: JTMUgsA+g5cqMZGbs8rgNYEsQMEwv0Fop5cCQWjZZZ0=)
5: dUEg2uHl_mzH4Gc59hF0SQlEOPk.roa (hash: FAec0jGTBdqWnGcu6aY23AJJHb4v1uDZ1rxzpmt/9ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:d8:43:67:bb:ad:4f:06:88:4c:ec:57:2d:35:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Validity
Not Before: Nov 5 00:00:43 2025 GMT
Not After : Nov 6 00:00:43 2025 GMT
Subject: CN=7c549ff426685c85c8d5c5db25329c623ad53697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:e4:ae:28:d4:79:08:a1:c4:24:22:fd:a1:
b4:60:4e:e3:9f:37:99:70:68:9c:31:aa:a5:18:f3:
95:a1:32:a9:71:62:c1:51:47:2b:2d:d5:ba:85:3a:
d3:b7:cd:ac:0b:1b:38:d9:ba:c8:4c:63:ee:94:05:
74:33:40:c6:18:41:ce:cf:dc:4c:58:73:9b:6e:21:
2c:8b:fe:f6:7e:51:11:91:a1:33:e7:73:24:97:db:
ca:32:5d:1d:30:85:a4:28:c2:d3:51:bd:ec:b1:fb:
04:ac:9e:34:b3:d9:bc:4a:ee:29:1b:a9:26:03:0e:
b5:ba:47:03:ed:98:67:0b:8b:03:06:55:a0:77:3e:
12:97:9d:3a:83:00:de:a4:4c:6b:cf:12:f6:0c:c7:
61:52:81:ac:ed:d9:60:3e:9f:89:48:fe:f5:be:ac:
7d:fb:e3:54:f7:8f:47:e0:31:13:39:13:79:55:0b:
42:a1:7a:2a:6a:78:d5:68:47:23:f1:f4:7c:50:65:
81:7e:56:8f:e6:a3:c9:40:04:29:9a:5c:c2:84:7e:
57:db:4b:be:d1:95:c4:53:f4:4c:da:ce:6c:c4:86:
42:34:c7:3a:eb:3d:cd:17:54:9f:2f:ba:14:df:54:
a0:ae:47:11:3a:84:00:0f:14:00:e8:88:a2:4b:89:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:54:9F:F4:26:68:5C:85:C8:D5:C5:DB:25:32:9C:62:3A:D5:36:97
X509v3 Authority Key Identifier:
keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7b:eb:83:01:4b:c1:c1:73:c3:8b:4a:fb:c7:89:5c:43:30:
71:fc:29:ef:f1:5e:b6:c3:97:6b:74:99:08:5e:23:dd:f0:b6:
40:fe:24:d9:b8:c4:6b:bd:d5:44:e5:bd:93:db:51:4f:3a:d0:
bc:6a:b6:e2:04:dc:13:19:09:05:83:8e:67:e7:7a:c8:3d:15:
74:b9:bc:02:ce:59:c5:7f:8b:31:85:86:4f:13:19:d2:95:4d:
68:59:e1:ea:44:b3:62:db:1d:51:dc:35:0d:c1:94:e8:25:86:
83:ce:32:64:0e:cd:92:55:65:d5:ac:d2:51:eb:00:c6:d4:e7:
f6:66:99:16:37:0b:4d:4a:40:a4:a3:09:95:08:38:d4:5e:78:
05:e8:cd:b6:50:50:1d:6d:0d:a6:fb:89:e5:88:12:a3:4b:48:
02:50:d7:8c:aa:01:f0:75:25:82:87:9e:ec:0a:f3:1f:d8:94:
94:92:58:0f:f1:28:ce:88:1e:de:b0:ae:b5:48:c8:ed:db:63:
b9:d9:60:c9:8f:60:bb:e9:fb:2d:75:6d:f4:00:a5:2f:30:9d:
ca:1b:1a:24:7b:a5:7d:8f:81:81:39:a6:2e:c0:90:3f:ff:84:
c0:c4:1d:b9:12:d3:bf:12:d3:e0:44:36:9c:19:99:36:2c:66:
68:a4:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:51:18 2025 by rpki-client