Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: +ADx1FMgdpA6Rs7oHTcQ/2yOaBSI9p9Im3OwJyCdEZM=
Subject key identifier: DD:8C:DA:07:85:88:41:AF:02:D9:D7:F9:56:8D:6D:98:19:90:8B:47
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019A4E4F547CCC4B8EA7CBD0958B8FB4B131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 063E
Signing time: Tue 04 Nov 2025 10:00:12 +0000
Manifest this update: Tue 04 Nov 2025 10:00:12 +0000
Manifest next update: Wed 05 Nov 2025 10:00:12 +0000
Files and hashes: 1: 1-iOVIXz47qr-JLuInaHzpTgpem8.roa (hash: aQd2tRqEfKRVYoKZ8bIlvH9byaMVj2lET2FwBKaobPk=)
2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: VhmhyVWET8lxrPnm0pTgDvdDF3+w329UouG129vTI/s=)
3: jCGGbslP38BuOy2f_eS54xc-hWg.roa (hash: rfVT0PEc4ZDXhhwqi4mRItGvqKV42ncM8sTUj9MUtx0=)
4: lFHDzTXqiwUlXqs5qOXSJRmYXfE.roa (hash: Kj0KUbB2+KfwbsuGFaPjdzmb30sagRusRai8T0ZrnFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:54:7c:cc:4b:8e:a7:cb:d0:95:8b:8f:b4:b1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Nov 4 10:00:12 2025 GMT
Not After : Nov 5 10:00:12 2025 GMT
Subject: CN=dd8cda07858841af02d9d7f9568d6d9819908b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:c4:db:fb:b4:c0:ea:1f:db:bd:14:f0:a0:
7c:1c:89:0b:19:95:af:bc:fc:ab:ac:b2:b6:6f:78:
f2:bb:d3:20:50:79:1c:5f:c9:fb:b9:2c:c0:e4:50:
82:9a:02:6e:0d:c3:d7:94:96:35:02:42:38:b3:90:
5d:10:4e:6d:55:da:f2:42:20:35:61:69:eb:f7:ee:
b9:33:96:d7:ba:23:c9:61:13:e3:f5:d1:00:89:1f:
c3:c5:ae:10:f2:b2:cb:12:65:e5:81:57:39:91:ee:
d0:e0:eb:a2:c0:5a:8b:51:e8:67:60:6f:03:d1:5c:
7e:2c:bb:3d:95:d3:3f:76:54:03:02:2f:de:19:fb:
b0:96:a0:ca:0f:58:a7:23:3b:4c:6f:8d:49:68:80:
f7:af:62:b9:31:1d:a3:ae:31:74:f2:43:c3:84:ac:
80:b5:2c:cc:46:1e:97:50:d7:c9:78:e9:c3:50:e3:
fc:1c:82:87:4b:8f:d6:32:fa:a9:b5:e2:b7:d9:21:
b7:4c:a8:64:a8:11:46:ce:9e:68:7c:71:23:0f:76:
20:3f:9a:d7:a0:3f:ea:32:ed:27:aa:88:b7:27:e8:
86:68:d0:2a:c2:3f:16:4f:bc:19:65:03:f1:f1:e7:
2d:63:b5:86:a6:5c:2a:44:e8:3d:0d:0e:a7:5e:fc:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:DA:07:85:88:41:AF:02:D9:D7:F9:56:8D:6D:98:19:90:8B:47
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1f:ce:42:ff:f2:d8:41:d5:ee:49:14:70:f6:8b:de:a9:cf:
95:79:ec:63:73:3a:d1:f8:bd:31:6f:f9:98:8e:31:f2:0b:82:
6d:ca:90:3b:54:9c:62:23:42:46:10:6d:ce:b9:52:03:41:89:
f2:84:7e:32:5e:04:74:be:0d:2a:29:aa:ac:f7:56:6f:16:6e:
f0:4e:b5:8d:dc:9e:51:48:79:f4:8f:32:91:ba:88:84:f8:3f:
d9:3b:78:84:94:c9:f2:dd:5d:78:78:f3:9b:8a:4e:b0:4d:c7:
67:b4:88:39:29:39:35:79:67:20:af:8a:45:7c:ec:40:e7:0d:
ef:e1:3d:4a:44:c5:fb:da:83:83:67:8e:de:b3:ab:69:4a:8c:
41:01:ee:12:51:f3:13:6e:00:ab:49:11:7b:e6:88:d2:6c:12:
0f:fc:1a:43:0d:c7:58:6c:0e:7d:30:15:cc:d6:dd:07:25:a4:
3d:5f:ae:1c:11:d1:97:86:2b:08:6e:99:20:ed:ed:8b:cf:45:
93:02:5a:5d:a4:38:c4:eb:72:a1:99:be:d2:73:df:bb:bc:52:
7e:bd:f3:b1:e9:5a:47:43:dd:b4:c9:ba:39:60:c3:76:15:de:
9b:bb:18:07:41:67:ba:40:0b:12:d2:8a:24:68:0b:be:7e:4d:
db:d2:08:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:19 2025 by rpki-client