
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: ejWmWTYx4N/3iNOrBqO7Wv21ytC1rC4Ygt5OgXx2O1s=
Subject key identifier: 5C:AB:C7:DC:50:4B:C2:5B:6D:4D:4F:69:11:22:0D:90:36:9B:44:2C
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 0199FF2245F18367EFE192479672777A063E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 01:01:00 +0000
Manifest this update: Mon 20 Oct 2025 01:01:00 +0000
Manifest next update: Tue 21 Oct 2025 01:01:00 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: aVa3e6Syuu4yn1++WWz8KSMFqeRhBWSbO2JTbgRDzHg=)
2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:45:f1:83:67:ef:e1:92:47:96:72:77:7a:06:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Oct 20 01:01:00 2025 GMT
Not After : Oct 21 01:01:00 2025 GMT
Subject: CN=5cabc7dc504bc25b6d4d4f6911220d90369b442c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:b8:0f:ec:3e:aa:aa:19:28:8d:b1:e2:b8:
fe:5d:7d:96:af:18:a9:72:87:98:3e:59:f1:d5:ac:
75:09:54:c2:e7:ef:51:28:eb:02:2a:fa:c7:e1:85:
38:63:0d:4b:6a:a8:19:01:bc:da:40:30:58:67:ea:
5d:dd:75:c5:79:ef:b0:ff:d9:98:76:65:13:f4:a9:
68:97:35:d6:e5:84:e8:6e:bc:06:43:57:3c:48:c1:
08:2f:22:e3:cb:3f:7e:2f:78:28:86:39:6e:7c:d7:
57:61:6a:61:2e:38:2f:02:f5:dc:10:c0:c0:93:29:
f7:63:7a:54:37:f3:f9:af:b9:f0:1a:2b:9e:10:fc:
11:81:3b:ce:a5:a3:54:d9:e0:40:2c:2a:3b:61:24:
66:f5:57:cb:d7:b8:5e:17:df:20:69:e9:2d:4d:97:
de:47:86:c5:61:93:b1:bd:95:75:14:1d:87:73:4c:
9a:59:ba:41:3e:42:2b:cc:6a:ab:fe:22:e3:00:04:
69:ea:aa:8b:38:68:3e:cd:d5:31:73:7d:62:55:07:
f6:48:8e:bb:7d:3c:1d:47:8e:bd:36:92:d0:08:5f:
90:6b:6c:be:f6:5d:eb:21:f9:8c:51:2d:dc:64:b1:
0e:53:b3:e9:b9:4c:f8:d2:2d:d0:d3:0a:da:a8:61:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AB:C7:DC:50:4B:C2:5B:6D:4D:4F:69:11:22:0D:90:36:9B:44:2C
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:c3:7a:5c:32:66:c9:5f:99:8f:83:7a:d0:eb:02:1e:8b:0e:
55:e8:2d:9b:c5:a5:0a:f9:52:8c:7d:4e:35:6b:a4:01:be:20:
69:35:4c:90:9c:5a:28:5a:50:0f:dc:b1:17:f4:01:96:35:5d:
3b:68:74:bf:ae:c7:d3:ed:fa:b0:0a:d0:38:ac:ed:d0:30:e1:
18:d7:94:ee:13:ad:d2:f5:a9:c5:79:d0:24:f6:40:65:30:e1:
24:fa:ee:9e:a6:af:4f:34:44:14:50:4f:d2:61:54:83:74:72:
6f:2e:2c:ad:50:d4:1d:0a:3f:fe:ab:44:65:00:94:da:59:43:
54:4a:b6:a8:3e:4d:dd:fb:d2:23:88:1e:ca:18:00:b5:10:56:
4d:92:7a:48:54:40:fe:66:0a:68:51:b8:1b:9c:b2:34:aa:06:
ca:a1:41:0c:f2:14:74:db:05:2f:9a:2f:b9:3e:96:d7:8d:57:
27:50:7f:39:7c:5b:ac:76:bf:f2:36:bc:51:c9:30:05:17:96:
51:cf:19:a6:69:27:8c:77:4b:f3:ef:fe:14:cd:98:94:d4:f2:
76:d0:08:ff:39:1b:42:94:e3:a5:0c:04:67:92:c6:c2:de:21:
26:7c:e7:81:ae:98:e6:a4:8f:10:e5:3e:a3:46:09:39:a4:11:
19:12:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:13:42 2025 by rpki-client