Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File: PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier: XgaeVNOV7uEzNV0dJPFhr+wytFyWVatFCFgRDS26jFw=
Subject key identifier: 35:45:DF:35:D6:AC:5E:5F:F9:57:F7:E6:4C:11:B1:E5:64:75:90:6A
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial: 019A4EF59F9A45A18441D261D907F9A56091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number: 070D
Signing time: Tue 04 Nov 2025 13:01:51 +0000
Manifest this update: Tue 04 Nov 2025 13:01:51 +0000
Manifest next update: Wed 05 Nov 2025 13:01:51 +0000
Files and hashes: 1: NtKyDgbGesEe8awF15SqP0_3q5E.roa (hash: 5/QwTKhvWnKsc5Bc5M0m9rQLZKRH4InU93sknSCwHzs=)
2: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: k9UokWkGGzlSuCT4gJaxiPwxsFm4G81VfEbEFrfBjTs=)
3: WNJuWEXBIip_f5G2ObX5HLas-6I.roa (hash: boUS884QFMK9V7SQvxUAnalpgEFhwVVzKbrcjkzFqDQ=)
4: hUje3HFTF6f1DLkrPmJro0BJv84.roa (hash: kR65nTDvmrqvVF+VEljMTGu7vMzX0EU8UFNtyZDk3w8=)
5: i63lT8gZ80ZQnoxkIIq3_XH-qGo.roa (hash: u7r5j40jao9jpdMvyg5KQYNAFcKXMkC3d+QE0v1EduY=)
6: ibMRX0UskUZ1fKV63OderSyFGp4.roa (hash: eA4MV5O6XQVzVYEe9jvmxnmU146aKwd4Gt1iGOJqAdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9f:9a:45:a1:84:41:d2:61:d9:07:f9:a5:60:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Validity
Not Before: Nov 4 13:01:51 2025 GMT
Not After : Nov 5 13:01:51 2025 GMT
Subject: CN=3545df35d6ac5e5ff957f7e64c11b1e56475906a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:d8:30:4e:f2:73:10:ef:b3:e3:48:93:02:
e7:50:54:cf:11:87:67:f8:5e:74:3b:09:9a:9d:67:
38:08:e3:c8:4a:9f:c4:9e:c8:49:fa:63:5e:26:56:
ae:58:a2:b9:74:86:61:1b:6d:98:2e:4e:5e:8e:b3:
40:c3:4b:a4:ef:22:3b:95:e1:f5:16:f7:15:b1:24:
1a:13:f2:5d:b2:9a:0b:17:35:83:63:9a:12:46:8d:
0e:b9:1e:ce:24:4f:4d:9d:27:65:f1:82:c6:ac:2d:
6e:36:3d:3a:6f:cc:ad:30:9d:ab:4b:ae:84:67:ad:
41:0c:e1:49:6e:ea:96:b1:7d:5a:27:48:80:f7:1c:
a7:6c:cd:f0:75:19:57:99:bb:4b:5e:12:6c:0a:66:
97:e2:2d:e6:7b:86:e1:2c:9f:b5:ca:1e:ca:81:98:
81:ca:7a:cf:41:88:d2:65:51:05:be:03:d5:60:2d:
a4:f0:b1:c2:7c:c0:0c:01:5c:01:4d:3a:c1:df:3e:
25:5d:f3:1a:39:7c:fd:36:6a:f3:7f:7f:f5:4d:a1:
c3:65:4e:72:a7:d3:dd:65:5b:ce:42:c5:8f:b7:b2:
04:72:09:ef:46:40:8b:83:96:2b:fe:de:27:e8:15:
aa:6a:e5:71:ac:28:24:0f:8f:47:1c:84:a4:e8:27:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:45:DF:35:D6:AC:5E:5F:F9:57:F7:E6:4C:11:B1:E5:64:75:90:6A
X509v3 Authority Key Identifier:
keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b0:75:ad:61:d0:df:2b:c3:ee:b2:b8:19:82:4d:d3:bd:60:
65:7c:10:57:87:ac:9f:30:69:98:92:b7:c3:4c:38:c5:e7:e3:
d7:ed:f0:20:10:6f:6d:c4:b2:ef:f8:a8:2b:25:d3:59:46:47:
42:fe:ab:94:ba:51:23:23:28:66:fc:39:bb:39:95:1d:b7:88:
70:9b:49:c3:e0:3c:16:02:1a:3f:e3:56:78:50:c5:a3:b4:60:
87:ba:9e:1c:f1:35:17:0c:d7:cf:3b:ae:a9:86:0e:a4:60:4f:
08:47:8b:79:44:17:7e:d8:ca:d6:de:6c:59:11:c3:b2:ff:07:
40:b1:a4:24:6d:a6:04:1d:6f:02:3e:5b:be:fc:0d:83:c6:83:
6f:6c:57:5c:8b:83:bc:be:bf:dd:b8:07:51:e1:b7:0b:6b:47:
45:d5:82:7d:34:94:fa:e5:21:21:7b:92:35:f1:b8:ce:9a:05:
d2:0f:e1:3e:3d:1d:0b:a8:6c:00:d3:d9:4c:23:0b:8e:13:7d:
df:aa:ed:d7:05:33:f6:fe:c6:4c:23:6a:17:aa:e4:b6:40:58:
e3:de:ae:53:a1:f4:bf:42:ba:50:fb:63:15:9b:ac:2a:39:d7:
80:b6:f1:53:da:47:e8:48:4b:16:9e:f7:23:67:1a:2d:d7:11:
06:60:00:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:27 2025 by rpki-client