Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier: qdDq2kIdTxxOb77Z74grh1v5a6NNdV9fJA+CoC5dRbU=
Subject key identifier: 46:28:D2:44:27:C8:BB:8B:43:31:72:93:91:16:67:58:BE:E3:30:3A
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial: 019A50E280BF1511C205A05972D496609A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number: 0C13
Signing time: Tue 04 Nov 2025 22:00:12 +0000
Manifest this update: Tue 04 Nov 2025 22:00:12 +0000
Manifest next update: Wed 05 Nov 2025 22:00:12 +0000
Files and hashes: 1: 1-QJRvD_s23t8EY5xEdDTuC908Sc.roa (hash: lC8dpaKtg1+1rVuBlbmqllxIuGpvRJft4kKrK9r2MOs=)
2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: FPhCXjC0HDT7lCK3lgErI5R5stUtFn5GBc4xXW5ou9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:80:bf:15:11:c2:05:a0:59:72:d4:96:60:9a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Validity
Not Before: Nov 4 22:00:12 2025 GMT
Not After : Nov 5 22:00:12 2025 GMT
Subject: CN=4628d24427c8bb8b4331729391166758bee3303a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:f9:c7:e6:c9:1c:f8:40:fd:1a:4b:94:44:
6b:f4:ab:d1:2f:19:d3:00:f0:bb:f7:6c:d0:a6:aa:
40:95:22:96:3b:5d:e0:9b:9f:28:02:e6:a8:8b:7d:
73:73:20:5d:54:77:85:d9:0c:9a:0e:11:a7:b6:e4:
0c:b9:ec:b8:65:d3:6c:44:2a:da:a6:fa:cf:e6:ab:
48:a9:7e:11:ab:98:fa:c9:4d:92:54:0e:00:69:03:
25:db:13:a5:2a:c2:44:cb:46:82:50:da:f5:0a:86:
97:39:4b:c2:5e:d5:9d:f5:17:4f:04:5e:a5:41:2f:
49:79:c4:9b:4a:4e:b5:bd:2f:3a:f8:65:f3:93:0c:
d1:3f:b0:bf:80:3f:36:26:87:84:b0:bf:63:1b:8f:
70:d4:6b:d4:d3:e6:da:38:92:51:af:1e:7e:ce:ae:
ea:13:03:02:c1:ce:9c:02:31:15:7a:2b:2c:49:49:
d2:ec:0b:d1:a3:26:7c:ef:fa:01:71:80:76:4d:f8:
a2:5b:2c:80:06:35:cb:63:dc:81:a8:04:f8:7c:28:
dd:65:e8:75:e1:65:62:ea:74:26:e5:50:6a:e5:7d:
71:28:ce:74:2f:7f:2c:bb:a0:09:eb:87:2d:41:0c:
a0:2d:98:8e:01:a6:bb:d5:59:71:a2:1b:e0:1d:f5:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:28:D2:44:27:C8:BB:8B:43:31:72:93:91:16:67:58:BE:E3:30:3A
X509v3 Authority Key Identifier:
keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:70:59:4a:7c:5d:ed:fd:f4:8b:ab:fa:5e:7f:b8:b9:a8:d6:
d0:ac:e6:fa:cc:f6:a2:7c:fd:5e:e1:85:87:3b:f5:1e:29:3b:
58:3a:2c:bd:f8:c9:35:8e:b1:86:7e:23:ca:78:2a:a0:81:7b:
36:f1:66:99:5e:73:16:d2:e2:6e:1f:9f:29:bc:f9:5c:89:2d:
b7:11:9f:33:26:5d:ff:ca:22:3c:eb:65:3c:32:cf:15:9a:cf:
de:d5:cc:92:f6:18:8c:72:a1:33:6d:93:cf:42:7a:3e:f4:b5:
7a:fb:26:95:ae:81:ab:8b:5a:31:27:4b:85:1c:d0:4e:eb:83:
33:ca:bd:5e:c1:a8:d6:7d:f8:44:4e:88:99:54:45:6a:d0:17:
bc:aa:c9:94:b1:29:d4:7d:dc:a4:9a:d3:4d:39:ba:36:53:05:
7a:b6:70:d5:69:6f:c8:57:d2:10:ac:b1:17:a8:b9:15:39:a3:
1d:13:30:db:91:ef:03:c8:94:22:12:8b:f9:61:3a:61:87:a9:
20:76:8d:73:ab:bf:c6:0c:e5:59:57:6a:d3:b3:57:43:47:16:
c8:ad:d4:76:75:13:64:90:94:05:fb:a1:55:68:56:0f:b1:75:
26:5a:ff:16:fa:9b:48:34:52:32:a3:2b:56:34:3a:b0:ea:7c:
88:17:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:43 2025 by rpki-client