Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: Zt44wVDANezFKzqCdEHxfev4RMaSuWE5ZppBfiawQPY=
Subject key identifier: 5D:DC:37:9E:D0:C2:3D:9A:E7:75:DB:28:8A:4B:BC:A6:DE:B5:61:1B
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 019A5263230347E75DC6C54E6F933E5E284A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:19 +0000
Manifest this update: Wed 05 Nov 2025 05:00:19 +0000
Manifest next update: Thu 06 Nov 2025 05:00:19 +0000
Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: wdlCCY5StLmzPzB+h93mDH8ocENKeggFE7uolYESEpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:23:03:47:e7:5d:c6:c5:4e:6f:93:3e:5e:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Nov 5 05:00:19 2025 GMT
Not After : Nov 6 05:00:19 2025 GMT
Subject: CN=5ddc379ed0c23d9ae775db288a4bbca6deb5611b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:0a:b4:71:eb:af:a2:5a:18:80:14:8d:5c:
d4:8b:8a:36:4b:e6:2b:9f:82:30:29:8e:8a:4f:ec:
85:aa:86:16:58:2f:e9:9e:f6:83:ea:b7:e7:8b:46:
f1:da:40:ba:29:03:80:23:87:9a:ff:2d:23:08:7a:
0d:ad:84:10:67:fe:02:9e:93:3e:3b:1b:4a:58:cb:
de:ee:43:c7:71:2f:cc:d5:2a:26:2a:84:f2:71:66:
01:e4:91:32:91:7e:64:f8:1a:9d:4f:3c:47:4f:60:
f9:8a:ee:1e:a5:34:de:d4:6c:f4:a7:86:28:67:7e:
e5:b3:c4:a2:6f:1f:d0:6c:67:5e:26:07:13:ae:2e:
c4:8a:1f:ee:ea:85:43:b2:4f:99:1c:6a:3f:95:01:
63:bf:2c:e2:e4:90:42:49:7e:1d:36:ae:89:14:43:
ec:84:be:ed:61:07:31:db:71:7b:ea:31:1a:6a:98:
f9:d8:2b:01:72:2e:e8:e9:83:bf:75:4e:bb:59:7d:
e9:9a:78:7b:55:f9:a5:40:86:42:5f:c9:ae:ac:82:
50:ac:8c:32:40:dc:69:1f:95:d7:56:76:4e:fc:58:
42:06:24:a1:35:87:05:1e:cb:df:7e:18:7a:2f:da:
5c:13:ae:92:8e:39:56:dd:ee:2e:5c:10:bd:9f:ad:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DC:37:9E:D0:C2:3D:9A:E7:75:DB:28:8A:4B:BC:A6:DE:B5:61:1B
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:97:82:d2:c2:42:53:a8:2c:bf:74:c3:c9:6b:ca:77:ee:84:
f7:47:98:1b:89:1a:73:34:4e:b7:36:eb:dc:e9:bb:c2:41:3c:
75:25:bb:78:53:5a:5b:47:80:f7:53:7c:e5:ab:9b:e3:7a:f6:
0c:4e:40:75:b4:43:a6:37:0e:f6:4c:b9:19:ec:27:0b:90:b8:
23:52:45:7f:33:f8:a5:7a:fa:bc:d5:56:f8:40:90:e3:88:9b:
c3:c6:a7:3f:d4:e2:b1:de:27:40:4a:43:10:cf:fd:87:82:69:
42:9a:19:31:bb:93:65:cf:7d:e5:4f:b0:57:37:e6:40:0b:30:
ba:29:07:5b:f3:3e:c8:bd:b0:6b:99:56:c9:7f:ed:7b:9c:2b:
9e:81:08:50:a8:d3:0c:6a:7f:8c:d9:6b:84:2f:36:fc:71:33:
c1:d6:9a:ff:b5:0c:31:b0:9b:42:46:59:dc:e0:92:b0:f1:fe:
21:97:60:d2:0b:38:26:30:8b:eb:b9:59:dc:d0:66:12:1d:98:
3b:5e:6c:ea:58:f8:24:65:d5:ad:cc:e2:ba:b3:c6:83:2d:38:
52:68:35:16:ea:f8:64:cd:ff:c0:46:26:4d:bb:b8:00:41:35:
61:c2:88:58:62:45:94:db:d8:12:2a:ee:e4:8c:cb:7e:fb:aa:
4f:4c:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:45:12 2025 by rpki-client