Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: tVshvjgpYoZrTYgjYVQuQrVySJJWoGHoBYyMmxAKz3A=
Subject key identifier: 94:10:DE:75:FD:40:90:1A:F3:9E:C9:AA:DA:4C:EA:60:5F:DA:D3:82
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019A0035CF27E59897BE1A357DDC0955D425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 06:01:57 +0000
Manifest this update: Mon 20 Oct 2025 06:01:57 +0000
Manifest next update: Tue 21 Oct 2025 06:01:57 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: LX+eu0AnRfDV1rvbdZ5vkPTZhU7+eCw/IOkPb3PcigI=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:cf:27:e5:98:97:be:1a:35:7d:dc:09:55:d4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Oct 20 06:01:57 2025 GMT
Not After : Oct 21 06:01:57 2025 GMT
Subject: CN=9410de75fd40901af39ec9aada4cea605fdad382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:37:17:f3:fe:7d:04:bf:58:28:12:f4:e0:
82:8d:5f:e9:ab:90:99:10:bc:a3:5a:b4:66:16:24:
be:d6:ae:fe:c7:3b:53:62:92:41:c6:01:57:8f:47:
7b:7d:e9:42:45:1b:16:7f:1d:d2:f4:8b:39:27:61:
81:4e:66:f6:0b:2f:01:70:01:b1:5d:3d:bf:e2:0c:
a3:20:52:a5:d0:36:8b:84:55:d5:f1:3b:a0:db:64:
9d:3b:ba:d6:b9:04:21:77:bf:6d:49:27:d3:75:cd:
51:ee:24:aa:d6:61:8b:8f:f5:f1:8a:1b:f3:69:1d:
45:f2:61:e7:d4:02:46:bf:1c:b7:f9:70:7f:b8:13:
22:15:18:de:d6:b8:3a:9b:cf:78:ae:87:ef:54:98:
b0:fe:c2:24:5b:fe:eb:37:b9:6c:0d:89:a2:47:80:
33:bb:71:12:54:11:85:8a:30:62:66:0b:43:10:63:
0c:31:57:91:74:47:a7:8f:cf:4a:0d:9f:40:80:f1:
36:9e:d9:f0:bb:6e:06:a2:51:8b:ef:0b:54:f1:74:
78:f9:ad:ef:ae:81:8d:27:09:83:27:cc:bc:fd:12:
33:11:dc:df:24:7b:c9:67:9d:5e:1c:8d:b8:3b:2a:
fd:05:72:47:1c:55:56:ce:0f:a7:77:69:c7:19:a3:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:10:DE:75:FD:40:90:1A:F3:9E:C9:AA:DA:4C:EA:60:5F:DA:D3:82
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f0:84:58:e2:0b:62:78:e7:1a:4d:99:c3:1f:6b:d8:55:9f:
7a:9d:e8:40:62:ff:19:03:11:21:54:86:5c:82:33:a5:87:20:
df:ab:f6:ca:4f:dc:67:b2:51:da:32:d0:4a:64:9c:f0:40:d2:
fb:61:fb:a1:1c:2a:89:53:0c:e5:9e:16:11:11:14:13:af:7e:
b2:8b:a7:d1:15:0e:69:1b:08:c9:8d:dd:c2:6e:78:a7:bd:8d:
9c:4c:db:b3:6c:c0:82:ff:18:a7:b3:39:37:06:bd:bc:4c:e9:
dd:b8:bd:ea:1b:03:3a:38:32:f4:f6:c0:d4:de:4b:a1:31:6f:
6c:62:e1:68:f4:5b:4e:ee:c1:c6:09:ce:46:84:a8:8f:76:a8:
a3:b5:47:96:f7:70:f4:79:ad:2a:eb:59:94:bc:96:6b:2d:b1:
50:fb:ec:97:1b:86:ab:6f:60:b5:d1:9e:46:ed:64:d9:16:e1:
55:f5:a7:f6:b2:35:08:4c:6e:4d:d0:bb:d0:64:cb:6c:f4:09:
dc:52:d8:b3:d7:26:a9:9f:24:21:1b:2a:95:f0:b2:70:eb:ad:
9d:0b:cb:6c:a4:86:96:84:dd:0d:0b:a6:7a:77:14:6e:f0:b9:
f5:0a:39:40:72:c0:a6:c1:49:bd:03:3d:6c:d5:8a:2a:99:b5:
50:3b:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:15:00 2025 by rpki-client