Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: gtW9Nc4uun92dzxcG7dZOG4lgWylVz4QwMJuNVIteVk=
Subject key identifier: 84:F2:3F:4B:6B:12:DC:63:EB:47:18:23:39:8D:64:28:F8:6D:4B:98
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 019A4D73E43C201DF942DB88CF5CE25910FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 11C4
Signing time: Tue 04 Nov 2025 06:00:31 +0000
Manifest this update: Tue 04 Nov 2025 06:00:31 +0000
Manifest next update: Wed 05 Nov 2025 06:00:31 +0000
Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: sirIQHn1UCa1ks1F/AaWD9d4qrxiI9TJ/+XFis6JGkA=)
2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e4:3c:20:1d:f9:42:db:88:cf:5c:e2:59:10:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Nov 4 06:00:31 2025 GMT
Not After : Nov 5 06:00:31 2025 GMT
Subject: CN=84f23f4b6b12dc63eb471823398d6428f86d4b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:39:b5:58:df:f2:3f:42:ed:52:1f:b3:de:
31:89:86:a5:eb:f3:97:2a:16:5f:c0:5a:97:e0:59:
29:61:53:90:7f:39:14:21:34:b1:6c:f9:ae:e8:d8:
09:39:2e:10:8c:30:48:71:20:7d:9b:5d:53:bf:62:
c5:a5:5d:ae:d7:63:31:e6:94:f9:db:f5:6b:b2:46:
a1:0d:31:f8:a7:76:cc:0b:05:14:8f:81:ec:0a:50:
99:3c:8e:15:17:4d:f5:37:f8:65:58:5b:93:68:1a:
0b:09:dd:d4:16:b4:bf:86:eb:7b:67:48:6b:bd:1d:
9a:a3:ea:ea:8b:ce:55:4a:62:74:7b:6a:02:fe:06:
19:59:e7:ac:a0:20:73:2f:3e:58:70:65:63:d2:a1:
1c:28:e1:83:85:6e:a8:72:87:38:f1:60:1b:b9:6b:
b2:a8:1f:dc:5f:91:01:ab:79:d6:bc:c5:19:1b:27:
d7:fc:23:8f:e3:25:93:8d:a1:38:d6:27:d4:c1:48:
02:02:a8:3b:a6:cc:c5:2c:a8:20:f6:89:8f:b0:cb:
79:12:94:64:9a:12:9b:eb:0d:40:7f:60:e4:5f:af:
dc:9a:f5:01:78:5d:4b:19:c2:55:31:b5:cc:b3:40:
15:6d:68:e1:f3:e2:4a:11:ea:7f:d1:8e:36:26:80:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:3F:4B:6B:12:DC:63:EB:47:18:23:39:8D:64:28:F8:6D:4B:98
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e9:fe:88:0f:89:05:a3:0d:29:a8:85:bf:dd:07:3c:5a:4e:
49:33:58:33:4e:02:85:6e:49:11:3e:4b:37:47:90:cd:6b:f6:
dc:3e:1e:53:76:24:24:d5:e3:43:4b:76:9a:d7:2b:48:31:35:
99:70:64:ef:4c:19:5e:7c:6b:6a:62:bf:6f:fb:81:fa:5c:94:
c4:36:d9:14:ea:72:30:53:6e:58:7b:f1:30:9c:c2:5f:ac:d8:
a3:12:ce:51:05:5e:95:5f:ba:48:e7:59:4b:d1:db:34:8d:32:
be:c0:81:77:d0:52:06:1a:df:ed:65:44:d1:35:0b:09:d8:ad:
87:5a:1e:8f:e4:5c:4f:d9:fc:1f:8a:bc:58:21:da:6c:26:92:
55:c0:00:60:97:53:dc:8a:b6:09:63:d4:89:9c:10:80:2a:e8:
1a:a3:35:f8:c7:be:9b:92:13:89:91:41:87:2a:c3:5d:4b:11:
9b:fa:0c:12:09:dc:b0:84:fa:c7:d0:3f:f7:2e:f1:ca:34:4f:
02:d4:31:a8:e1:eb:d3:bd:fb:c5:56:4d:9e:f1:b2:55:a6:c5:
ea:a4:86:ac:9e:77:d7:1b:61:6d:8a:36:10:57:3e:f8:20:6a:
b6:3f:fe:13:e2:01:b5:41:0e:08:cc:15:e8:21:0c:18:58:12:
2b:a4:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:07 2025 by rpki-client