Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: JZIHurL5EZ+EzYRez6M8NfRM6W4cCdu53vBHgcdDpV4=
Subject key identifier: 71:BB:0A:C3:93:F5:E2:DB:CB:D0:0B:08:7F:3B:D0:F1:3D:8B:F6:F5
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 019A4DE205FEA83AA2C4FA3DD57E05309779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 04C8
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: dUdh94HxVOlg+8CXkRx935pNqFrTdP/xtieL7wBVMoI=)
2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:05:fe:a8:3a:a2:c4:fa:3d:d5:7e:05:30:97:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=71bb0ac393f5e2dbcbd00b087f3bd0f13d8bf6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:35:0f:fa:93:20:3d:06:87:5e:29:2e:46:
6d:a0:35:9b:7f:a8:78:3f:ad:6c:f0:7e:4c:95:d4:
8e:5f:a2:13:5e:84:48:e0:b1:09:47:70:7a:4c:89:
46:24:b0:ac:98:ff:eb:bd:5d:23:2c:39:61:31:0b:
82:81:05:cd:81:5d:d6:52:cb:ca:00:40:d4:ff:b6:
ec:6f:ff:8f:79:4f:f9:82:f9:c1:4c:f2:7e:92:1d:
eb:65:57:f8:a8:00:c6:e2:21:66:c8:68:93:1f:c1:
12:48:5a:f1:8f:7a:74:12:b1:ad:14:ab:6f:9e:01:
cf:5d:3c:6f:cd:76:77:5a:29:1e:cd:e8:15:0c:a2:
d6:61:5a:cb:fb:d1:1b:28:95:75:9e:dc:66:c8:a1:
ca:4c:56:ef:54:93:9e:02:f7:1d:79:41:f8:03:58:
a8:61:1f:9c:ed:99:ba:61:68:2f:2a:95:90:74:9c:
c8:f1:e0:e2:f8:c9:a6:b6:0b:ea:85:2b:ee:17:0f:
aa:8b:7f:37:33:14:0a:bf:d3:7f:53:ea:f9:57:33:
e0:ce:5a:d3:3e:0d:31:2e:66:13:7b:cd:c0:bb:af:
42:05:26:0a:18:f8:6d:4e:c2:35:83:0e:3a:fe:91:
62:28:15:22:d7:5e:c5:25:c9:66:4c:09:94:85:1d:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:0A:C3:93:F5:E2:DB:CB:D0:0B:08:7F:3B:D0:F1:3D:8B:F6:F5
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:54:b5:f4:3c:26:75:bf:45:52:43:e5:19:62:ab:91:de:43:
fa:ef:77:6f:08:03:21:ca:18:26:85:aa:5a:65:87:1c:e2:59:
94:18:8c:31:95:dc:5f:68:a3:5c:f0:51:5a:e9:0d:c8:fc:31:
31:5f:71:ce:fb:59:0c:ee:e2:84:f4:2b:0c:61:44:6f:71:bc:
28:81:87:51:44:5e:0a:66:2a:b0:db:3a:cc:c8:86:0f:24:bd:
37:31:5c:01:e4:1c:ea:01:89:1f:6a:5e:c9:48:0d:89:c5:b3:
41:02:61:34:75:04:c5:53:1d:5f:1f:82:18:d2:45:34:01:ef:
36:0f:cd:f7:d7:cd:b0:38:2a:33:13:c1:91:93:14:8a:28:08:
5f:51:29:6f:22:d1:58:fe:91:b9:0a:65:35:18:69:6e:ba:7f:
50:5a:84:13:6d:d7:dc:66:03:ed:0d:d5:68:c7:4a:d3:35:12:
21:b8:fe:5a:e0:2d:7d:f1:e1:7b:ff:e1:51:5d:a4:3c:65:b4:
11:7f:d9:b0:36:2f:5a:c1:f1:72:2e:82:3a:d7:ed:ba:6a:48:
be:13:c4:a3:b6:db:9c:14:af:ab:56:df:2c:81:31:d8:51:e2:
51:d7:21:f3:b5:b5:66:6d:88:4d:a1:44:1d:b0:1a:98:1c:c4:
36:07:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:07 2025 by rpki-client