Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: HJZQy7zx+WpDnUvvj6J090yxOvpW9aRjouIABhGlYts=
Subject key identifier: 5C:9F:31:CF:8A:3F:86:25:C0:A2:F9:5F:E0:F0:88:B0:CE:9B:44:51
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 019A4F62C1D5872605DFECEC28BCF1CD580F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 08C3
Signing time: Tue 04 Nov 2025 15:01:03 +0000
Manifest this update: Tue 04 Nov 2025 15:01:03 +0000
Manifest next update: Wed 05 Nov 2025 15:01:03 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: aiyHLE+Daesu/1cNJnXu9y4OZwmY6b70sNkY7aFLabY=)
2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c1:d5:87:26:05:df:ec:ec:28:bc:f1:cd:58:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Nov 4 15:01:03 2025 GMT
Not After : Nov 5 15:01:03 2025 GMT
Subject: CN=5c9f31cf8a3f8625c0a2f95fe0f088b0ce9b4451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:6e:f5:8b:db:21:bc:fb:9b:67:c2:c1:9a:
f8:1a:ed:f4:0e:f0:4f:9d:ba:96:58:97:b5:52:66:
51:4a:91:83:7d:f6:7c:03:ea:28:90:28:ad:54:1e:
ad:9f:a3:d6:a7:14:5a:27:76:d7:99:c4:66:62:1e:
f1:7c:a1:b1:4f:6c:b7:21:d6:89:75:9c:05:eb:2b:
17:12:d1:52:d6:87:c8:67:9e:57:f7:22:68:18:98:
cb:0f:2c:fd:84:82:1e:55:e5:28:71:01:fd:06:7b:
28:52:bf:91:78:ae:dc:a3:f6:4b:c4:a5:a6:90:27:
90:2e:9a:81:70:bd:58:ae:59:7d:88:8c:dd:a5:a0:
73:98:41:64:11:0c:2b:b9:c9:31:8a:ad:69:81:1b:
89:25:55:2e:e7:7f:8f:9c:33:87:c2:19:81:a6:fa:
50:fe:79:15:7d:51:bf:d1:0d:7a:32:11:bb:ee:16:
4e:d5:57:e5:a1:36:74:26:a6:52:ce:99:14:c5:ad:
b5:a0:01:93:3a:2b:01:f0:f2:5f:08:d1:36:6e:e0:
f4:6a:7c:a9:20:83:63:3e:2f:7e:a0:79:88:a7:55:
7b:2f:26:fb:30:f6:f7:2b:8a:d0:7c:d6:27:72:ca:
b3:d5:1c:b6:c9:84:be:07:71:43:5c:e5:06:99:16:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:31:CF:8A:3F:86:25:C0:A2:F9:5F:E0:F0:88:B0:CE:9B:44:51
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c5:db:df:c2:8a:d8:55:8c:41:1f:01:00:0a:b0:64:dd:06:
3d:a7:d0:7a:5b:85:29:91:3e:8e:f1:15:3f:55:f1:be:f6:2a:
66:4b:a9:e4:3d:01:76:5d:f5:2e:5a:8f:e8:08:49:b7:cd:02:
75:36:48:a9:04:b8:15:e7:23:ba:c6:a1:93:d6:eb:95:8a:3e:
1a:5a:fe:57:62:bb:c5:e9:fd:4d:4a:40:24:a4:ca:d5:45:f4:
55:9a:e2:ac:03:98:70:9f:55:93:96:67:0b:a8:69:87:ed:34:
82:9e:7d:3d:62:52:10:5a:0a:5f:f4:da:07:62:ef:d6:4a:05:
27:e1:48:bc:75:67:55:20:2a:ad:2a:6f:20:59:b3:27:41:e8:
bf:71:91:e7:63:56:2c:72:97:96:1b:4d:0b:de:48:6c:aa:1e:
22:b2:e0:70:cb:06:96:f7:92:82:24:5f:85:11:fd:4a:3e:c0:
05:98:a0:76:52:7f:ee:2b:ec:2b:40:c1:61:b8:ef:3c:2f:92:
31:74:36:b8:39:ad:f1:a0:79:4e:d4:1d:ff:26:62:5e:cd:18:
b8:e0:bf:f4:bc:e1:34:cf:44:93:56:30:f4:ff:d2:1b:37:bf:
63:41:18:41:67:1e:82:93:8e:04:2e:d6:d9:16:4d:93:45:fd:
f8:c7:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:52 2025 by rpki-client