Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: hBNiin+/YMJvjdeHhc8Fr2z4awDzQAHjI6yDh7tQsv4=
Subject key identifier: 2E:20:37:5B:9B:D0:10:36:5F:57:89:B9:22:82:4D:8D:A5:28:BF:4D
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 019A4EF573E5506AC1661CF17B72346F96E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 036E
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: KWPAsF0vFOD6kPsFU3LMV-L0lSI.roa (hash: VQvFUbsDDfVrBdoP9kicGC0pG5uJaNDDod3tQ4qnm70=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: Zt2dIsbZeH8ngF+UQdnwb3FmJ8cf+FRFeuwIKeZc3iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:73:e5:50:6a:c1:66:1c:f1:7b:72:34:6f:96:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=2e20375b9bd010365f5789b922824d8da528bf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:48:4b:20:5b:60:b8:7d:d6:1a:6b:41:16:
df:7b:93:c7:db:d2:24:77:c2:71:a5:ac:c4:44:40:
4c:22:c9:29:84:e7:e5:ad:be:28:e7:a8:b0:bf:1b:
7c:29:17:c3:aa:d1:33:5b:c6:7c:a9:44:76:a3:cb:
e2:2a:74:46:d5:28:d9:08:dd:fb:4c:74:83:8f:e9:
3e:10:7f:1a:11:02:b3:31:af:65:39:46:0b:aa:bc:
56:07:b4:3e:81:0b:30:4a:d7:61:73:dc:29:c6:1a:
7a:21:9a:0b:2d:44:4e:ca:e0:37:21:67:bb:25:31:
13:34:41:96:1e:c4:4f:f7:b9:4d:b1:4e:26:47:1d:
54:60:19:dd:b0:62:89:59:e9:e2:6e:01:92:e8:78:
67:cd:02:8a:c1:1f:cd:6e:c7:ac:72:77:7c:33:46:
df:ca:05:c9:44:35:61:a3:fc:9e:ce:1c:c5:87:a6:
14:8f:c8:87:25:48:1c:31:bd:76:53:56:f0:3e:f0:
4c:bb:20:e0:67:8b:44:80:60:8a:c7:ff:3f:cc:ca:
09:b6:2d:cd:30:63:3f:ff:f3:a2:95:4c:48:c4:f4:
43:ab:59:05:65:6e:e0:6c:5d:70:5e:df:18:3b:ab:
59:1d:20:6c:a9:ab:22:45:ab:32:b2:05:2c:60:a9:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:20:37:5B:9B:D0:10:36:5F:57:89:B9:22:82:4D:8D:A5:28:BF:4D
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:16:76:09:3b:61:0e:e6:8c:0b:56:66:1f:19:60:08:b8:83:
bc:b9:3e:2c:22:cc:9a:d9:d2:a0:53:c5:25:3b:a9:92:04:c0:
03:24:bd:2f:eb:a5:42:cd:d8:b7:f8:ab:20:e1:ce:a8:0f:7d:
a3:1d:b1:a5:a0:f7:ab:35:1d:88:47:18:df:f0:5d:c4:b1:06:
b4:9c:d3:51:ee:3c:6e:f9:c1:31:b5:d6:e7:98:c0:cd:8a:37:
c6:48:d4:9f:b4:02:52:ec:01:d1:da:82:fb:c0:d9:ae:18:8a:
18:d5:2a:24:44:f0:4b:f9:e6:df:1a:67:40:5f:49:73:e5:e1:
dc:72:d6:43:f9:b1:44:49:8c:9c:4c:7d:76:37:c8:bd:a8:c3:
aa:c3:20:9b:f1:95:f7:27:ed:b9:73:7d:44:58:f3:ee:ab:a0:
67:31:2f:da:38:94:6f:2e:ec:9e:39:11:32:17:d3:42:ce:4e:
7e:59:47:98:9b:30:e4:bf:b8:56:b3:87:9f:c3:4c:9c:dd:4e:
96:45:c2:8a:0d:ca:ba:21:42:fb:44:f5:08:20:fb:23:89:ec:
99:19:46:8d:fe:0f:66:18:ea:33:b0:9f:7e:6e:5c:6c:c1:77:
07:0a:79:0f:d2:8a:c8:7e:ac:95:74:66:a4:63:10:39:4f:bd:
4e:a9:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:04 2025 by rpki-client