
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: kNYkjjVgu4jZ5FVwubTJbbTpBs1e+dsKbUtH8ldiiYQ=
Subject key identifier: 4F:F9:8E:B1:1E:AB:E7:AE:7A:7A:63:A3:59:39:14:33:A4:0B:85:CB
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 0199FC589FC221C145881087DE5B4184B408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 126B
Signing time: Sun 19 Oct 2025 12:01:30 +0000
Manifest this update: Sun 19 Oct 2025 12:01:30 +0000
Manifest next update: Mon 20 Oct 2025 12:01:30 +0000
Files and hashes: 1: CaL9jYSTc-IdChBXaiMWMez9mXg.roa (hash: KSdlQjcVUmbuNppz/t/DKjZyc/L+OBaFoRGPDIpwznQ=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: +5pfEZJDj4FGIwhqTXplJQVLdQd2C9KV2vDdOvnBx1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9f:c2:21:c1:45:88:10:87:de:5b:41:84:b4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Oct 19 12:01:30 2025 GMT
Not After : Oct 20 12:01:30 2025 GMT
Subject: CN=4ff98eb11eabe7ae7a7a63a359391433a40b85cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f4:4b:4d:99:84:fa:29:62:82:d4:db:82:d2:
24:14:b5:45:91:2e:21:6e:4f:10:59:ae:2b:77:8e:
20:4a:54:9b:ba:28:41:60:b0:f9:0b:7e:0a:7e:d9:
76:cc:f5:cb:10:98:3d:54:38:3a:d5:6e:14:66:11:
39:b0:1c:e0:00:5c:96:e2:30:46:7e:16:b8:6c:df:
0e:24:c7:cf:7e:7e:4b:dc:dc:c2:f4:98:c4:3b:ee:
d4:a8:5b:3f:de:d1:00:69:c9:50:33:4b:53:da:ed:
92:fc:9f:fa:00:54:6e:fe:26:be:7e:14:af:d1:22:
6e:69:94:ee:b4:bf:7c:64:c5:42:5e:1f:22:47:ae:
03:09:79:62:8d:e2:ee:4d:13:66:f1:ba:ff:a9:85:
74:e2:d2:91:4c:6b:93:4d:c1:6f:45:eb:32:f1:4d:
a2:ec:9a:fc:b9:b5:48:4c:61:89:3f:71:4f:86:04:
56:4d:31:9f:05:6c:07:90:55:cf:82:59:c7:89:d1:
c6:b7:7f:69:26:1b:4d:c9:4d:c2:28:3e:5b:16:0d:
78:8f:f3:ed:55:a9:a1:1c:f4:fa:d9:97:04:0c:6a:
81:de:ba:da:bd:58:cf:4b:57:31:23:de:2d:0b:26:
3e:2f:42:d1:35:73:ad:fc:99:c9:63:21:4d:90:20:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F9:8E:B1:1E:AB:E7:AE:7A:7A:63:A3:59:39:14:33:A4:0B:85:CB
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:75:c5:bc:ed:b2:8d:93:94:57:49:10:dd:1c:fc:e2:a2:61:
2e:48:5a:1e:28:ef:5d:f9:54:a3:b2:4e:2f:be:72:c3:e6:52:
05:0e:e0:85:02:8d:4e:64:8b:f5:27:83:0c:99:d5:51:25:57:
ac:3c:95:92:1f:d9:be:d7:fe:4f:af:ef:4f:d4:45:11:ed:ed:
12:e3:72:a8:93:86:cd:8b:87:21:6d:5a:ae:a3:40:a4:f0:c5:
6b:0f:8c:bd:38:6a:5a:5a:0a:5d:05:17:45:de:0f:5f:b1:5b:
d8:59:20:53:8d:84:8a:0c:fd:1c:91:48:fd:08:94:b7:f0:fb:
19:96:30:55:9f:a4:a6:ee:e5:b1:22:fd:64:52:f0:05:6b:13:
3c:d5:fd:bd:c5:29:c2:06:6d:61:a1:40:eb:d0:49:d2:49:1a:
88:07:05:d3:52:7c:f2:76:27:12:ed:73:3e:3d:0d:30:98:95:
be:39:b2:3d:76:bb:81:d6:14:be:aa:53:48:3f:d9:4f:bb:bc:
61:71:24:a8:87:2b:b2:d8:cd:bd:8f:22:31:6c:6e:ba:00:98:
5b:cf:79:b2:55:22:62:ef:0d:b1:9f:93:d3:8a:a6:a5:a6:e9:
50:51:86:7c:14:e7:aa:fa:8f:8a:7f:95:77:4a:2c:cb:ee:72:
7a:10:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:15 2025 by rpki-client