Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: 7bZAgbEqzpDU9aO9vFttZKheR5eSXRhdnj1p+zWWwjo=
Subject key identifier: FA:40:5A:5B:46:65:6B:FF:4E:4D:57:F3:3D:A9:C2:21:3C:35:94:0C
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 019A51BEE5A3C02E4EC4F9C1FD45662BB2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 02:00:56 +0000
Manifest this update: Wed 05 Nov 2025 02:00:56 +0000
Manifest next update: Thu 06 Nov 2025 02:00:56 +0000
Files and hashes: 1: Is-TnbCqT0sZMmHzE0DOERlyuyA.roa (hash: ZwxuieDg5KwfHUePylCdnkHIJ18zptrPuU4i92UJi24=)
2: Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (hash: T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: fNibKT1dK2awrQ212PkqzyZZd6xKs7oemOz/EhM1F5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:e5:a3:c0:2e:4e:c4:f9:c1:fd:45:66:2b:b2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Nov 5 02:00:56 2025 GMT
Not After : Nov 6 02:00:56 2025 GMT
Subject: CN=fa405a5b46656bff4e4d57f33da9c2213c35940c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:1d:6c:6e:3c:6f:8b:ca:d3:1b:22:1f:b7:
ba:b9:2a:1c:63:22:18:94:48:7c:5d:8c:11:10:95:
97:04:ed:df:05:32:a2:18:0d:df:49:ec:9a:66:8b:
69:0d:c3:56:fa:54:60:36:c3:5c:62:95:9a:61:0b:
94:08:55:00:74:92:f1:cf:cc:fb:6d:83:f2:3d:74:
a9:af:9e:e8:ac:a5:47:94:09:bd:63:a7:81:8f:50:
0d:7b:bb:98:d7:a8:58:c9:5a:70:04:91:92:d1:31:
7c:17:14:bc:5d:b9:2a:97:d8:46:e6:ca:88:87:1b:
a4:24:1d:19:5a:e7:d1:af:d7:f9:8b:43:db:d0:3b:
b7:9c:f7:f6:6f:97:47:9e:34:a0:37:0d:b0:27:35:
cf:7f:8a:31:2a:a4:4b:d4:31:cc:45:87:8e:5a:25:
6b:94:2c:0d:54:f9:39:0f:af:e3:eb:68:4b:aa:53:
73:d5:76:9f:1c:44:c1:35:e5:14:96:68:77:13:26:
ce:64:e7:96:95:e6:0e:0b:a4:e7:82:dc:60:e0:2b:
78:66:a5:13:54:3b:0f:e4:57:0a:dd:20:52:c8:81:
af:31:ec:d7:6f:52:da:b9:e1:a8:6c:b5:1a:65:26:
c6:a2:b1:ee:95:4d:a1:b1:43:45:be:d7:2d:63:18:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:40:5A:5B:46:65:6B:FF:4E:4D:57:F3:3D:A9:C2:21:3C:35:94:0C
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:08:5d:bd:6b:e9:37:ad:5c:ae:c8:cc:3c:3d:c5:bd:4c:23:
ac:ea:4f:7d:69:31:a4:7a:92:28:4d:3b:2e:5a:bc:e3:3e:b5:
a2:ce:7e:b3:cb:4d:02:df:8c:aa:b3:74:ec:66:48:65:1a:5e:
91:58:74:df:26:1e:c3:c5:40:77:fb:4c:27:15:b0:3d:9e:07:
e3:5f:46:4e:c8:bd:c4:99:bb:bb:92:21:32:db:b0:80:94:a1:
89:92:c9:52:6e:bd:21:46:fd:c0:13:a8:2f:75:b8:30:a7:8a:
34:69:13:b5:47:ff:07:10:a3:23:5f:e7:95:0b:38:a9:05:33:
d8:11:e1:6f:45:a0:2d:80:d8:2e:09:09:96:d2:42:c7:f3:6a:
d8:23:8f:5c:ef:8b:62:58:50:5b:64:0d:02:02:6f:2f:43:0c:
58:a4:79:cf:df:0c:78:26:88:bf:49:9c:c6:12:a4:58:aa:73:
62:15:af:2f:fe:43:64:3b:9d:10:b9:be:ac:d7:2a:cb:fc:7c:
2d:67:b3:40:40:ec:e1:c3:20:84:54:67:9e:1a:45:02:54:51:
e3:b4:4d:34:aa:c0:7b:ef:a9:df:28:b9:97:4e:8c:f4:3d:55:
18:24:58:fc:34:ce:75:13:0f:82:d8:69:24:08:bc:4e:cf:0e:
42:37:95:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:55 2025 by rpki-client