Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: 1ky5V3/zilhkreH1wUX/NWdrfgg9zNWtzMPhdwaSPF8=
Subject key identifier: 25:78:86:F9:C4:2B:A5:C6:53:DB:11:98:92:51:76:D0:99:BD:4E:60
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 019A5187E2A9947B7D97B11416C6F0511551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 095D
Signing time: Wed 05 Nov 2025 01:00:51 +0000
Manifest this update: Wed 05 Nov 2025 01:00:51 +0000
Manifest next update: Thu 06 Nov 2025 01:00:51 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: 7yle3aMlKV2qp1y2Z9gYNY2rx0HN5QYYUDeADLWF0YM=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e2:a9:94:7b:7d:97:b1:14:16:c6:f0:51:15:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Nov 5 01:00:51 2025 GMT
Not After : Nov 6 01:00:51 2025 GMT
Subject: CN=257886f9c42ba5c653db1198925176d099bd4e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:17:69:ad:72:45:f4:55:20:a5:e7:78:38:
ea:2c:a5:a6:ac:bf:0c:d4:56:c3:a4:0a:a8:2c:57:
14:ca:17:46:b1:f6:d6:76:ed:13:7b:77:3d:d2:56:
28:96:53:c8:f0:ba:f7:65:b2:e0:c1:29:69:3c:b7:
f8:35:a2:88:9e:52:3f:44:c7:0b:22:53:01:93:71:
d0:b9:51:61:37:e7:ed:be:65:9a:de:d9:38:3f:5f:
be:b3:bd:cc:a2:bd:96:d7:ff:29:f1:d3:46:49:0a:
af:18:10:69:ee:49:34:ad:c3:dd:5a:9e:f8:d2:16:
db:f5:f9:4b:64:ea:b0:e2:0f:6a:5d:da:b6:d3:8f:
68:1d:3f:b4:36:41:d6:2e:40:38:f7:95:44:e8:87:
12:48:7e:f9:06:33:51:79:79:4f:f9:f6:5f:a2:d9:
00:5f:dd:8e:ce:f1:90:0d:8b:6a:c2:26:29:ed:3e:
f7:bf:35:31:1a:b3:f6:ac:16:aa:bf:91:8b:80:70:
38:63:50:80:ee:da:a0:f6:fd:53:6d:47:55:5f:0c:
fd:07:4e:22:f9:8b:7f:dc:e0:2b:6a:aa:0f:63:54:
84:3f:c6:e6:c9:74:bb:0b:b8:2d:01:58:e2:ba:d8:
fe:17:04:2a:0b:ab:6d:f0:f2:68:33:70:1b:fe:3d:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:86:F9:C4:2B:A5:C6:53:DB:11:98:92:51:76:D0:99:BD:4E:60
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:05:d4:d1:75:bb:04:c7:03:70:da:84:50:53:92:80:aa:9d:
be:a5:9d:5d:9b:fa:d9:a9:7f:03:18:40:18:81:73:74:dc:6b:
de:10:ed:6e:2b:c0:05:c1:1b:6f:7f:b0:93:7b:94:72:ce:58:
78:85:5c:5d:47:2e:91:79:4b:ad:3a:dd:57:7d:30:9f:90:70:
9c:9d:33:b5:92:3d:f1:c8:6c:03:09:a5:7f:e8:4c:f7:9e:3e:
b2:b9:69:41:6b:55:77:1d:2a:55:7b:91:5b:71:4d:1d:45:ea:
70:b5:c1:e8:ef:d4:d4:d4:42:8f:da:af:ea:55:fc:98:82:87:
bb:ef:48:1e:d1:1d:a7:cb:2e:ad:c2:52:7f:fe:34:1d:af:9c:
2a:3e:6c:c3:88:8a:45:d2:ec:8a:19:60:b8:e0:7a:54:9e:fa:
09:5b:08:23:56:79:bc:e5:09:4c:c3:92:4f:56:40:ec:7a:7d:
8b:ed:1d:4f:d5:f0:0f:17:f9:d6:e4:d0:59:f1:69:db:5d:3f:
2a:b8:14:5f:5c:27:af:52:af:96:6b:23:e0:dc:6b:b0:fe:57:
57:b1:41:3b:dd:5f:82:aa:9e:e2:1f:fe:e9:8e:4b:a5:c5:3d:
81:fe:05:df:95:1f:ca:b5:ed:d2:f2:de:bd:32:89:76:c7:5f:
e8:e1:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:58:30 2025 by rpki-client