Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: 4XlblgFRmVLAQUunvnjY+Rpx2t6lbiVwtGVOJeFv5VQ=
Subject key identifier: 10:30:38:66:26:27:56:FB:1E:2F:95:15:B9:9B:CA:82:0A:66:48:52
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 0199FEEC09299956538490968F2CF36ACC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0966
Signing time: Mon 20 Oct 2025 00:01:45 +0000
Manifest this update: Mon 20 Oct 2025 00:01:45 +0000
Manifest next update: Tue 21 Oct 2025 00:01:45 +0000
Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: n1aqdmzf3UJ5IilNOqd3ED9I9GoImhWb1P8lS/r3Fts=)
3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:09:29:99:56:53:84:90:96:8f:2c:f3:6a:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Oct 20 00:01:45 2025 GMT
Not After : Oct 21 00:01:45 2025 GMT
Subject: CN=10303866262756fb1e2f9515b99bca820a664852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:55:db:06:1a:e6:c4:2d:dd:75:1f:f0:21:
68:68:e0:f5:6a:4f:8d:a6:77:31:c1:0c:20:ed:40:
d3:81:c0:0a:f0:0c:63:2f:9c:7e:ed:dd:70:8f:23:
05:59:65:a2:b3:31:76:fa:12:4d:70:8a:91:dd:90:
15:b0:d1:23:b1:44:a0:94:77:43:8f:f1:e9:ad:fe:
89:01:84:88:0f:3c:6f:e2:99:9d:82:d2:9b:7e:38:
b7:6d:a9:ca:1a:b7:de:e1:40:2f:f1:4e:11:6b:ca:
26:7f:67:69:62:52:a9:7e:47:e0:bc:fe:66:4e:3e:
8e:e9:1e:47:72:30:4e:c0:5f:99:34:d2:21:b5:12:
06:2d:5f:fd:bf:77:8c:ff:b7:7d:64:b4:e2:08:c2:
46:96:51:ac:50:06:84:92:4b:d5:24:dc:97:5f:58:
d9:4f:9e:53:97:b4:e5:a2:cc:45:e1:d5:80:51:b0:
d0:a6:8c:cf:9d:51:b7:e8:e5:61:7c:54:e4:13:78:
fa:73:d3:e2:90:be:d2:ea:ee:88:a9:53:89:97:a8:
d9:91:12:fc:58:12:e4:18:23:07:73:f6:27:f8:66:
a1:e8:4b:b6:7d:b8:d4:92:16:46:f0:07:66:a6:55:
2b:b4:25:2d:b4:8c:5e:f9:52:ba:6a:45:b3:9d:a5:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:30:38:66:26:27:56:FB:1E:2F:95:15:B9:9B:CA:82:0A:66:48:52
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:21:26:f0:ac:2f:5a:28:9a:b8:43:6e:49:9c:a1:4a:ac:ab:
cc:d2:a8:13:ab:c9:cb:10:91:ba:00:db:88:54:fb:68:cc:6d:
55:cf:fb:64:b1:e3:6b:d9:a3:59:3d:ea:0f:3b:cb:13:74:d5:
61:42:50:07:27:7d:bb:94:b8:b4:d9:be:92:10:be:bc:fb:f9:
ff:7a:1a:31:1e:98:c3:aa:95:75:d6:0b:c8:3a:c4:e6:0f:90:
18:f9:77:08:fb:2f:7d:b8:7d:c2:93:30:20:ba:f5:05:29:a0:
7c:6d:4b:e5:d7:a1:76:4f:ad:05:52:6d:e9:ff:87:a0:6c:a2:
f8:3f:12:18:4d:63:c3:e0:89:0b:2c:a0:ce:91:c3:86:e5:47:
55:4e:d0:92:f8:dc:2d:7d:fd:2e:8f:cf:03:57:1e:55:6e:e2:
8e:6a:e8:a8:a3:43:9c:3d:23:42:0d:7d:76:fc:14:24:54:cd:
77:9b:a0:bf:f8:a3:76:8a:c4:a1:17:d8:46:f2:50:f3:b5:79:
14:d8:b2:3f:e3:ed:85:56:61:35:92:03:2e:85:71:be:91:51:
b1:95:d6:ac:cc:34:21:61:29:55:3e:4a:08:d4:bb:3f:48:8b:
86:15:91:0c:9e:4c:ec:66:da:be:fd:81:a4:1f:5d:c8:8b:17:
eb:79:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:44 2025 by rpki-client