Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: SwkC8U0sy9Vlm73tANbYaDLirp95K49jVvtCn7SOZVo=
Subject key identifier: 6C:65:93:84:22:E8:95:A2:5C:31:D1:D5:3D:85:6E:06:36:BA:F7:48
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 019A503E34816ECE52551250E9CD9F30B2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 03D9
Signing time: Tue 04 Nov 2025 19:00:45 +0000
Manifest this update: Tue 04 Nov 2025 19:00:45 +0000
Manifest next update: Wed 05 Nov 2025 19:00:45 +0000
Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: /M+uU3hF6DjJ8Axy3lEBgu8LGPN5w7TJNnkmygvFzwU=)
3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:34:81:6e:ce:52:55:12:50:e9:cd:9f:30:b2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Nov 4 19:00:45 2025 GMT
Not After : Nov 5 19:00:45 2025 GMT
Subject: CN=6c65938422e895a25c31d1d53d856e0636baf748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:56:b9:49:8a:78:62:d6:c6:a9:82:02:ee:
b5:55:9d:6e:bc:6c:c5:35:55:24:17:84:58:04:92:
12:b5:4e:08:9d:3b:9a:92:93:23:29:13:b9:d8:84:
5a:05:81:2c:97:09:c8:8f:48:ff:81:d5:ae:51:b2:
8c:48:93:eb:64:38:b3:ca:7a:77:ff:e7:af:62:17:
de:eb:23:8a:50:0e:93:79:5c:e8:df:44:31:f0:3d:
94:d7:7f:69:88:41:2a:aa:2e:00:18:56:7d:b2:b2:
9e:3e:48:84:b4:4e:c1:1d:08:36:b9:a1:2c:fa:e1:
10:59:48:a4:7a:70:2d:49:f8:2d:1d:c6:d6:8e:85:
7d:b9:73:c8:83:58:41:b9:30:67:4f:67:12:80:f5:
93:db:59:fb:d8:0e:11:9c:e1:3b:69:b5:39:31:13:
ca:79:1d:fb:0d:f9:32:ff:cf:a1:89:81:aa:b5:bf:
7b:29:5d:8a:4b:bc:7a:83:7e:b9:56:ea:05:f3:19:
42:44:a5:77:92:aa:25:3c:88:07:c8:b5:c1:a6:3e:
66:d7:24:0c:70:b6:ac:0a:1a:a0:a2:3e:ae:dd:25:
db:2f:c8:93:62:f9:be:7e:2a:d0:e8:c6:0c:09:7c:
f9:26:40:10:c8:b8:3b:18:91:26:f4:3c:f8:6a:ba:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:65:93:84:22:E8:95:A2:5C:31:D1:D5:3D:85:6E:06:36:BA:F7:48
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:54:af:24:ec:18:77:5c:41:ca:aa:d1:da:92:8f:b2:5d:60:
52:8e:c4:ed:f5:5d:24:06:f6:be:81:46:54:5b:5b:cf:45:49:
c9:00:51:39:00:b4:ef:7e:b1:3c:9a:5d:2c:3d:d2:de:4d:b5:
75:f7:17:a2:20:ff:71:9b:9f:a3:16:9f:09:01:91:10:08:b9:
82:56:cb:02:ae:64:2f:47:50:d6:e1:33:97:07:00:8b:d5:33:
b4:15:7a:09:6f:43:49:d9:1e:40:f6:db:b1:38:6c:8d:af:3a:
38:36:48:1a:4a:8c:6e:06:81:40:fd:98:19:23:05:10:48:5e:
9f:ad:b0:80:0d:62:a8:4a:9c:34:89:6f:b4:32:69:86:63:39:
13:a5:8c:d5:9b:0a:73:5e:b2:b9:f6:75:0f:20:29:61:e1:b3:
b6:d5:69:bb:cb:0e:da:21:17:10:52:c9:79:7a:1e:d9:96:30:
e5:66:23:4c:74:22:02:aa:b1:71:06:36:66:6b:87:91:56:08:
9f:c2:97:e0:c6:e4:66:5b:74:9e:ea:ba:26:6a:48:2e:47:d6:
02:43:60:ca:b8:14:e0:f7:79:a9:a3:78:ed:9b:6d:49:22:ab:
5f:d5:7f:49:62:43:b3:a9:dc:5a:1d:38:71:bf:5a:76:18:f7:
61:23:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:52 2025 by rpki-client