Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File: pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier: C5QQzRd1k7CUcSciLnXOF9t4KfaMGTdkrrEN/Y91uYM=
Subject key identifier: 5A:25:B0:8E:8D:FD:A8:7C:4E:1B:DA:91:39:3C:F9:26:4A:7B:CE:8B
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer: /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial: 019A5299ED819FA785FD5B1CAFAB4006491C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number: 053D
Signing time: Wed 05 Nov 2025 06:00:10 +0000
Manifest this update: Wed 05 Nov 2025 06:00:10 +0000
Manifest next update: Thu 06 Nov 2025 06:00:10 +0000
Files and hashes: 1: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: blyE7cbxHBVqt3C1tBTQ52N9BIZFCIR//lROeHwaSwg=)
2: yTZlHlMAE_3YBA7oQmF4fIZqHOM.roa (hash: lfCvg73z+0fvdagtNm9IPM2kVoIfwTGx2gcIBEuq7Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:ed:81:9f:a7:85:fd:5b:1c:af:ab:40:06:49:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Validity
Not Before: Nov 5 06:00:10 2025 GMT
Not After : Nov 6 06:00:10 2025 GMT
Subject: CN=5a25b08e8dfda87c4e1bda91393cf9264a7bce8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e0:08:98:42:c6:d9:1e:ea:4d:c7:34:d7:2d:
71:ff:88:35:bf:4b:25:ea:5a:5c:d0:42:ea:80:a1:
75:0e:d9:5b:eb:d0:eb:1c:76:b3:76:9f:d9:51:a0:
dd:91:de:67:8c:27:6d:d0:bc:f7:c3:a7:58:da:aa:
3c:a6:2f:e9:b6:dc:60:3e:8f:9c:41:45:a8:9f:5d:
74:d8:b0:1a:59:f1:e0:52:bd:ff:80:38:7b:fb:0b:
9b:8b:e7:83:c9:a7:9f:33:be:a1:cc:3e:e5:9b:d1:
db:df:19:e7:4d:e3:d6:41:85:64:c0:5e:fa:97:94:
f6:aa:6c:7b:89:66:72:d9:37:ab:f1:eb:1c:7b:c2:
1d:5f:d9:5d:b7:c2:76:4b:57:c4:09:3f:0e:0f:97:
21:86:dc:52:82:c1:08:3c:f8:9d:26:44:f2:de:58:
09:10:60:f2:e4:f9:41:d8:7b:42:35:f0:bb:98:04:
1a:b0:3a:96:fb:9d:c1:96:44:0b:f6:37:1d:01:5b:
7b:8b:7c:ff:ef:86:68:33:88:8e:40:b7:bb:2d:50:
78:4a:8d:aa:71:38:0b:da:45:a3:fa:54:ca:dc:16:
8a:a9:c8:68:2d:fc:43:94:e0:cb:3e:b6:8a:5f:b1:
07:34:12:2b:92:f5:a8:c9:e3:6f:34:eb:ae:6a:bf:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:25:B0:8E:8D:FD:A8:7C:4E:1B:DA:91:39:3C:F9:26:4A:7B:CE:8B
X509v3 Authority Key Identifier:
keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a3:06:d3:38:93:c3:ff:31:66:88:cf:07:a4:f6:fc:f4:1a:
8f:03:bb:63:23:58:1a:9c:13:41:bb:74:54:43:ce:ea:8d:2c:
3f:86:41:57:74:69:27:07:05:df:12:c1:72:9b:ee:4d:9b:88:
5f:1d:67:cb:ee:ff:01:72:91:67:00:ed:42:7e:2d:c6:f8:30:
62:6f:2e:5d:c8:b9:c3:96:aa:bf:4b:4c:8d:06:71:74:68:00:
aa:e8:af:cc:6a:d9:94:77:1a:50:ef:da:07:4b:cf:fc:fe:e2:
69:1d:c8:5d:67:e6:0f:75:78:9d:fa:41:ea:9f:94:fe:66:e0:
24:50:3b:10:39:24:33:18:7f:0a:47:85:76:0f:89:e9:83:a0:
de:fb:17:34:d5:7c:f3:28:cb:f9:ca:eb:b8:68:c0:b2:93:37:
ce:60:a7:dc:3c:85:88:a4:28:09:51:b8:44:a5:81:3b:da:77:
ba:3e:1a:a0:6f:da:97:52:f5:a7:b0:4e:4e:f2:3f:40:05:f8:
c1:2b:8e:e6:8f:ef:59:ed:bd:08:5a:80:d6:ae:02:fc:67:ce:
ae:2b:da:9e:38:08:37:1a:b3:cc:8c:07:07:03:5a:db:54:bd:
57:04:ca:fc:e8:96:c9:bc:e4:83:14:d1:f8:33:ef:df:eb:2d:
e2:6e:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:13 2025 by rpki-client