Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: a3UNNJg7r1UGQOL3LEXzz6a96Wk5hoR0l0Xy9UdwIZI=
Subject key identifier: 24:81:84:1A:3A:05:7D:74:50:37:30:88:E0:B0:96:D2:64:44:44:3C
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 019A51F5991A3529D73C8868D68A9B44BBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 1277
Signing time: Wed 05 Nov 2025 03:00:41 +0000
Manifest this update: Wed 05 Nov 2025 03:00:41 +0000
Manifest next update: Thu 06 Nov 2025 03:00:41 +0000
Files and hashes: 1: 1-dSijOlomtrsqkND-2jGvkzEh1s.roa (hash: vAMtZ2jKMP2IiV0cN+Yk3wrsh8M5v/wTw365APu16Sc=)
2: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: K03tSeaRfrypq5mTm0HITfyJs7pEL89a1DeMqEH2FQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:99:1a:35:29:d7:3c:88:68:d6:8a:9b:44:bb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Nov 5 03:00:41 2025 GMT
Not After : Nov 6 03:00:41 2025 GMT
Subject: CN=2481841a3a057d7450373088e0b096d26444443c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:25:24:c3:06:62:89:0c:91:8a:9c:c2:6d:
bd:90:3f:3e:2d:b5:ae:e4:8e:e1:20:eb:ec:f1:f5:
d2:83:55:61:10:9c:c9:32:da:5f:3e:70:39:86:7d:
43:4b:6a:d4:8a:a1:db:fd:47:f6:b9:3a:56:a9:9b:
da:50:f1:36:28:30:b6:cf:7b:7c:b1:0c:af:15:7b:
c1:f2:2f:dd:24:8f:af:e5:9e:e5:e5:78:48:1e:2c:
97:b4:20:25:46:96:2b:31:d5:ac:8a:33:d0:50:0c:
91:de:77:a5:76:a9:73:29:b6:40:34:83:0b:ad:76:
55:8f:4c:bf:d4:41:d8:6b:d8:af:25:56:49:d4:16:
3a:fc:c9:9e:77:47:b0:c8:06:be:b4:67:98:f1:5a:
bb:1b:ef:e2:ea:d1:30:5e:92:f4:3e:ce:5a:36:1c:
e2:25:ca:19:65:2e:69:88:b7:eb:8d:c7:f9:85:bd:
f0:bc:72:88:7c:e0:12:99:51:3b:96:24:6d:09:3f:
29:78:09:2f:60:2f:f4:1e:e4:92:98:c2:60:2e:3b:
77:90:94:b1:7d:bd:d9:f2:e5:6f:f8:48:df:3e:a3:
5b:db:f3:6b:2f:b8:44:fa:2b:f5:7a:f8:a2:49:8f:
53:ac:e4:90:e5:d7:4c:26:7a:07:47:75:e2:c5:a1:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:81:84:1A:3A:05:7D:74:50:37:30:88:E0:B0:96:D2:64:44:44:3C
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:88:2b:d7:e8:03:db:21:5f:04:92:32:7a:4a:a0:14:36:63:
ed:65:3e:68:54:97:b4:4a:f1:86:7f:1a:c6:79:5d:c9:ae:ab:
d1:b9:30:3c:04:3a:fc:3e:bc:95:4a:b9:ea:52:4c:d2:c0:06:
1e:2c:8d:7d:e9:cc:c7:31:02:7a:59:e9:51:a9:5a:e3:3b:dd:
dd:89:96:0f:9e:ef:13:f8:b6:1d:73:e2:a1:c8:2e:b7:7e:17:
8a:37:cc:d0:bb:4d:e1:b2:ee:ab:e8:74:2b:ae:e2:c6:1d:b9:
8a:44:28:80:cb:e0:13:7a:11:45:4b:92:ed:12:ed:0a:5d:7a:
90:da:89:52:9c:54:00:6f:8a:dc:66:fb:c3:90:14:aa:61:e4:
f7:ed:6a:65:aa:13:95:c5:45:64:aa:5e:f2:fb:eb:58:7f:d1:
03:c0:dc:d2:77:39:0c:76:d0:56:f5:b2:57:3b:01:a6:8f:c4:
c3:96:66:4e:c6:fd:02:40:da:1b:83:e7:61:3c:cc:78:a5:5f:
59:b4:4e:6e:20:38:28:b6:dd:1c:c4:94:e0:b5:5b:63:c9:a5:
e4:b9:4e:84:b1:6a:9f:01:a8:63:35:46:11:64:f2:2a:c9:4f:
02:d5:0d:8c:b4:bb:09:04:b2:ad:7f:d8:6c:f3:dc:ba:a1:11:
27:bf:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:30:45 2025 by rpki-client