Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: SLml5wom2lzZu4A245qqiyxajOa73sje0GvxauCKxMw=
Subject key identifier: 90:7B:35:BB:51:D7:72:A9:2C:3C:B2:0D:74:30:13:DF:C3:57:73:8E
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 019A503E11E0A2C4E60FB6DBBE3734211815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:36 +0000
Manifest this update: Tue 04 Nov 2025 19:00:36 +0000
Manifest next update: Wed 05 Nov 2025 19:00:36 +0000
Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: Gbh5UeMTh9TpOI62PLJ14i9bSP27A/0loT+/hQwVxOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:11:e0:a2:c4:e6:0f:b6:db:be:37:34:21:18:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Nov 4 19:00:36 2025 GMT
Not After : Nov 5 19:00:36 2025 GMT
Subject: CN=907b35bb51d772a92c3cb20d743013dfc357738e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:89:91:2e:61:05:eb:9b:4e:e7:76:72:f8:
48:8e:c2:e4:ce:67:e7:a7:4d:0f:91:7d:48:d0:02:
34:e3:bb:52:1d:d9:99:de:0b:56:d0:89:3d:b4:fb:
1b:e6:32:a5:fb:f9:83:a5:40:72:e8:9e:72:cf:b9:
9a:73:a7:f7:0b:a8:e6:54:6c:bf:3e:ca:86:1b:13:
4c:7f:2b:0a:9c:86:c9:02:36:15:6e:db:99:20:27:
36:32:cc:46:a2:11:aa:f1:86:cb:16:6c:0f:bb:cc:
1a:51:23:cd:a9:d1:e5:a7:c7:b4:b6:72:23:e4:db:
08:2d:ff:e3:c9:4e:dc:8c:5b:26:b4:2a:a2:2c:73:
be:a4:e3:9f:68:54:ec:7a:b5:26:c0:eb:48:05:b2:
86:65:8b:c9:ea:a6:73:9f:55:58:5d:de:8b:5b:f4:
d9:9c:78:dd:78:52:42:00:ac:99:5a:89:8c:7f:60:
6b:8d:34:ca:ed:51:e3:7a:4c:79:22:a1:fc:47:26:
c6:da:66:58:28:e5:7b:87:32:f8:9d:32:68:84:e1:
6a:55:49:b1:70:9c:0e:4f:2f:34:0c:be:50:86:cf:
21:2e:70:33:f3:a5:3d:c3:84:ff:49:b2:03:24:27:
1d:0d:f6:33:20:e3:d3:ec:b7:ba:e4:1a:e4:21:d1:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7B:35:BB:51:D7:72:A9:2C:3C:B2:0D:74:30:13:DF:C3:57:73:8E
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:89:49:da:69:65:8f:ba:d6:82:d2:a3:6c:d1:f4:92:21:23:
15:c5:be:01:82:d9:7c:a4:67:64:d4:86:7f:5d:b4:82:6d:4d:
61:87:88:cb:aa:7f:f2:79:d5:91:ac:53:a1:fc:93:76:21:02:
66:e9:c5:08:60:5b:9f:87:fb:8f:2a:37:d3:85:49:26:92:55:
07:35:82:f4:31:fa:09:09:3c:81:bf:6b:da:dc:44:9f:47:15:
17:40:b0:45:94:99:46:b3:fd:c6:72:07:72:87:7d:63:bd:9a:
10:4c:40:4f:d7:01:41:9e:3d:72:fd:cd:f0:81:6d:e2:e5:00:
d5:ad:29:05:fe:fd:7e:b1:82:d3:85:c4:86:4a:67:04:15:67:
a9:12:22:fd:76:f2:24:38:4f:30:a6:1c:21:e6:65:93:32:38:
5a:96:4e:80:41:42:6d:6c:6d:99:db:94:e6:d2:ea:61:22:2d:
2f:88:a6:dc:ce:43:50:2d:71:39:30:89:c0:24:8b:a1:39:7c:
52:43:d4:cf:65:44:a7:94:03:0e:66:55:c0:d8:72:b0:1b:79:
2f:3d:c5:f6:d6:2a:c1:9c:64:e4:3e:3c:ad:90:7e:7d:63:77:
fb:61:2a:be:5b:67:e4:de:2d:62:21:50:0c:b1:d3:d2:67:11:
56:88:8c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:32 2025 by rpki-client