Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: FrtC7fvWP7b5xtLDCSiCJz4EhwEDOgbiKYIMNwEYExY=
Subject key identifier: FD:B8:E5:D8:46:40:80:07:F6:18:B2:AC:02:76:F3:93:B4:78:97:24
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 019A53764DE8F8E8259B4F130314B9ED1758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 1447
Signing time: Wed 05 Nov 2025 10:00:53 +0000
Manifest this update: Wed 05 Nov 2025 10:00:53 +0000
Manifest next update: Thu 06 Nov 2025 10:00:53 +0000
Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=)
2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: Zl31nCDXmBA/ZT+wVMPoOXxLvRNWKLB5r3aUe1AHC+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:4d:e8:f8:e8:25:9b:4f:13:03:14:b9:ed:17:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Nov 5 10:00:53 2025 GMT
Not After : Nov 6 10:00:53 2025 GMT
Subject: CN=fdb8e5d846408007f618b2ac0276f393b4789724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:c3:72:c4:f4:df:ad:4e:3e:c4:42:c4:74:
f0:2d:ab:2f:8f:8e:44:e4:3b:db:28:6e:89:e0:d4:
80:07:5b:f3:e7:95:b9:b6:a0:ca:54:64:2d:24:07:
0b:3c:5c:3e:29:1c:aa:66:c7:64:a3:52:ed:21:ea:
11:15:9d:21:b6:c3:3d:c8:15:de:9b:47:67:57:c8:
4b:f5:a7:80:f1:43:5d:51:64:b5:da:95:e4:3f:da:
de:41:31:39:a5:3b:cf:98:98:21:ae:dd:a7:33:92:
e9:81:00:66:09:f2:1d:fa:d1:25:c1:b2:41:d0:7a:
99:22:c0:16:75:82:be:78:ff:9b:76:ce:c9:3d:a4:
e1:01:34:d0:bf:32:52:d4:59:94:2d:84:de:9d:a2:
7e:17:d9:c8:8b:91:9e:39:c6:84:e2:ca:13:d5:00:
83:ab:eb:9a:f5:37:89:89:95:7b:95:eb:5d:24:cc:
5b:e4:9b:4a:f4:3d:37:62:fc:06:ee:ed:8e:c9:e2:
9f:84:91:2b:76:4a:6e:5d:08:ef:0c:15:a2:7a:48:
f4:2f:aa:6e:8e:5d:11:a0:dd:46:03:dc:a3:fd:07:
83:87:73:2e:a6:5b:b6:0b:f7:2c:8d:6e:72:21:05:
70:e5:53:60:c8:ed:7b:ef:90:67:0c:ac:20:44:a8:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B8:E5:D8:46:40:80:07:F6:18:B2:AC:02:76:F3:93:B4:78:97:24
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:56:78:63:ef:d6:96:d0:d0:60:f9:94:10:63:0c:e8:70:f6:
5b:58:f8:14:e7:57:ce:72:82:1d:ba:b6:30:c8:ff:59:16:9d:
00:40:d1:47:55:23:c8:4a:0c:33:51:83:82:ba:1b:de:de:3a:
9f:92:9e:68:3c:e2:4e:28:fc:51:65:eb:6e:ca:3f:5e:13:9c:
5b:21:4a:bf:44:92:fb:6f:f6:ca:86:9f:6c:f7:27:31:4d:55:
fe:1d:f3:f7:9d:aa:6e:d6:84:05:d6:fe:a0:47:94:56:14:c6:
09:59:ad:3b:95:6e:fd:da:99:14:68:16:22:87:6c:7a:b5:07:
72:4a:30:6c:8a:88:89:00:85:3f:9f:13:82:86:b3:b7:ff:11:
5b:76:b2:b6:58:fc:2e:13:57:d6:ce:db:44:76:95:98:01:ba:
27:27:80:4c:0f:68:d2:82:5c:79:de:63:6b:3e:28:b6:bf:7b:
f7:ec:c8:4a:08:61:ae:11:ad:9b:cb:17:c7:09:26:8c:b3:80:
8d:2c:ba:ab:ff:8e:75:38:23:ac:94:eb:26:62:af:9c:42:d7:
81:10:43:a0:ae:8e:ad:28:8a:3d:38:92:29:c6:c4:0c:53:1f:
e2:b0:16:09:8b:3a:cc:3c:56:a4:a2:20:8f:2f:38:31:cb:f0:
a4:11:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:00:57 2025 by rpki-client