Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: MndpYjcA1sMILLhSDe281Xi/pP0Zd8ubru5YW2FfACI=
Subject key identifier: D2:E7:A3:41:DC:43:7F:C1:CD:C1:FA:DB:C5:E0:82:75:8B:08:B0:A8
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 0199FA6A933D80E8AEDED77DE143F569EE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 1B
Signing time: Sun 19 Oct 2025 03:01:52 +0000
Manifest this update: Sun 19 Oct 2025 03:01:52 +0000
Manifest next update: Mon 20 Oct 2025 03:01:52 +0000
Files and hashes: 1: 7alJhVEJ8xj6IpTwu6Ih8OhjFkA.roa (hash: 7jCnG6JINMEyq9hp7eyBgT5bk5thbVgVLLuXRq467tI=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: sWY6s/WL5Hqd9DaCxeoyLL9IxEGhBoP8FZCtFTc2G3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:93:3d:80:e8:ae:de:d7:7d:e1:43:f5:69:ee:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Oct 19 03:01:52 2025 GMT
Not After : Oct 20 03:01:52 2025 GMT
Subject: CN=d2e7a341dc437fc1cdc1fadbc5e082758b08b0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:1f:d2:13:cb:a6:76:c5:5f:3e:2a:a1:6d:
73:d8:30:0d:f0:b4:91:cd:f9:d7:9b:9b:68:5a:a9:
63:38:b8:94:30:97:7d:ab:9a:c1:53:18:e9:fe:e5:
e6:38:0f:f4:77:1a:a1:b4:64:2e:b7:64:25:32:43:
c7:90:33:44:f3:82:27:23:6f:8f:d6:6d:62:5a:e3:
bf:9a:fe:44:53:10:5d:da:4f:a6:69:48:b5:c6:8f:
b3:50:af:94:4b:46:9c:98:40:29:ee:db:1a:37:c8:
d2:30:d0:f1:ab:df:ec:8b:33:92:11:33:62:11:23:
bb:f6:1e:65:7d:a5:21:ef:bc:00:c6:da:55:37:89:
5d:62:19:dd:8a:56:b1:6a:8a:92:88:70:e5:d3:a4:
2f:72:95:3f:7a:2e:20:3b:2d:8e:42:e4:e2:be:6d:
96:67:3f:db:fc:aa:fe:29:1c:e9:21:52:54:43:10:
e4:4f:ce:74:b2:92:21:52:59:f2:3c:84:e8:10:cf:
26:48:9b:82:98:8a:33:77:16:e0:f5:a3:b9:51:40:
a7:5b:15:5f:e1:e4:b9:40:58:e7:9d:e1:50:b3:50:
da:20:89:0d:dd:14:2c:f6:0f:87:1e:fd:dd:ef:1b:
fd:83:51:0c:2b:be:9d:c0:ce:68:4e:97:60:48:23:
06:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:A3:41:DC:43:7F:C1:CD:C1:FA:DB:C5:E0:82:75:8B:08:B0:A8
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:35:91:e8:1d:99:bc:17:85:5b:b5:b1:ac:b2:44:71:b0:ba:
9a:0a:05:d1:4d:7c:97:6c:c2:c4:39:c1:3c:8f:cd:93:26:97:
52:db:3b:ce:2a:8a:85:13:ff:9a:24:0d:7f:ce:ec:6d:ad:8b:
13:b1:52:a6:4e:13:3f:33:06:d2:c5:ce:8b:96:43:ac:31:8b:
37:aa:82:e0:cf:28:a7:69:62:3a:8f:7c:06:be:3a:3b:9a:cb:
66:b4:1f:02:5b:ce:9a:1f:03:ae:a9:ea:81:c2:bd:16:2a:69:
9d:57:10:ee:01:0c:bc:13:84:5a:9d:4b:a3:b0:2a:38:39:f8:
b0:98:eb:d8:26:4c:91:15:f3:9a:38:4f:29:9a:3d:34:b7:ef:
4c:3f:be:4e:58:a7:28:a6:a6:a1:81:79:1a:a4:62:0b:71:c1:
2c:97:70:3e:64:83:42:38:94:54:5b:63:8a:97:95:e9:f5:af:
87:f4:ad:22:8f:68:db:25:ec:07:75:da:21:cd:54:26:b7:5e:
32:df:c4:4b:ed:89:9c:ad:c1:06:76:9e:f1:3b:54:ac:6f:67:
65:2f:df:45:d0:d2:7f:a2:6d:45:8e:38:0b:f3:01:ee:b7:37:
b2:3b:86:cf:66:1a:be:dc:bf:7a:c6:b6:c8:da:07:8d:b9:2e:
74:d4:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:54 2025 by rpki-client