Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: YJ23C+SccTWBfaUGbnd31QugVwG2iE54D/EjkaTEoG8=
Subject key identifier: 2C:21:CB:60:DC:51:0E:AB:38:7B:28:D9:D6:57:05:C5:FF:EC:2B:4D
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019A533F335E3A378D5998F3806717234FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 09:00:42 +0000
Manifest this update: Wed 05 Nov 2025 09:00:42 +0000
Manifest next update: Thu 06 Nov 2025 09:00:42 +0000
Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: LuMakqGnNhy16Yhalw+nOPeavRXlUvJ/DDSG5/107MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:33:5e:3a:37:8d:59:98:f3:80:67:17:23:4f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Nov 5 09:00:42 2025 GMT
Not After : Nov 6 09:00:42 2025 GMT
Subject: CN=2c21cb60dc510eab387b28d9d65705c5ffec2b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:aa:5b:eb:03:b0:80:33:ba:be:f7:25:cb:
f4:dd:72:82:e1:69:14:f2:38:9f:a0:13:a5:b8:75:
93:78:9d:7c:6c:20:8d:11:b7:76:8c:cc:4b:1d:7d:
c4:ee:e3:dd:bf:fd:0a:63:cb:8d:99:ea:db:40:ce:
78:cb:38:d9:62:79:d3:86:33:cf:2d:ed:5b:1a:eb:
dc:f6:08:cc:33:8c:2c:60:15:56:fb:eb:b0:8e:bc:
cd:40:e0:0a:e7:ab:2f:1f:0b:2d:99:82:83:0f:42:
3a:33:90:75:fc:3e:f1:d2:3a:2b:e0:4a:e5:4f:5e:
18:d1:e7:78:44:4a:91:21:35:ab:f9:68:01:fa:cd:
93:2e:3c:90:a5:99:fb:26:32:63:a3:92:b4:45:89:
5a:75:37:de:d5:71:dd:84:57:29:d4:b2:07:19:4f:
ac:ed:74:2b:48:0d:b9:7e:a0:52:4d:80:40:53:4f:
b7:90:0f:55:ed:e7:d2:cf:42:0f:48:7a:4d:89:42:
23:27:86:42:8b:df:6b:82:7f:2d:57:f8:68:bc:5c:
4e:d5:df:77:2d:2c:44:b5:77:e6:5c:81:34:57:05:
19:49:20:ca:80:ec:b8:bb:24:c7:4c:25:4f:fa:04:
41:f9:99:a1:d1:de:7e:00:90:91:3e:7d:57:17:37:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:21:CB:60:DC:51:0E:AB:38:7B:28:D9:D6:57:05:C5:FF:EC:2B:4D
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:54:f1:4a:ac:2a:c4:6c:f6:5c:24:ef:35:fb:50:a6:1d:8e:
6c:3d:77:93:3a:05:b9:64:de:1c:66:d7:ab:09:69:73:d8:20:
92:f8:d4:32:7d:8c:a7:8f:72:82:90:aa:9c:35:de:67:c4:4a:
fe:c8:b1:3a:dd:e9:cd:f4:d3:e4:bd:9a:8f:29:16:82:e9:f2:
f6:47:89:c6:64:54:32:96:02:c1:05:3a:c2:0b:e7:b7:58:49:
05:fb:79:1e:45:ed:29:6e:cb:ad:23:a3:01:0c:a9:5c:4d:08:
ef:c5:eb:c5:2e:ff:fb:ae:1a:ee:3d:04:9e:47:8e:78:6b:12:
90:3d:37:e9:f8:61:40:49:2b:72:9b:27:7b:02:91:c2:ef:e7:
53:d3:89:f6:cf:8e:b9:af:e2:b7:1a:15:76:f4:88:ed:d4:64:
c1:b8:b5:b5:6d:7a:34:14:a0:c5:c4:b4:37:c9:69:f5:d5:11:
df:dd:98:f7:71:42:5f:0e:94:62:b7:68:1a:cf:ca:20:54:0c:
9e:34:6c:c1:83:a5:c8:4c:ba:9a:75:3c:c8:02:97:98:79:e1:
14:8d:a2:a6:f7:a4:d2:e2:ae:87:b9:44:f1:d5:b7:4b:c7:96:
9a:91:41:f1:a0:5f:fd:aa:95:5d:f9:be:9e:f9:5d:1f:c7:36:
dd:8c:bd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:31 2025 by rpki-client