Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: NM7aBECLkweY/w0dnfKwhBJ0Tx2A8zO3fPp/wHiLlSI=
Subject key identifier: 01:09:D0:13:E2:CB:83:C6:30:07:69:B1:E8:24:FB:30:9B:B0:EE:2E
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 0199FCC6D906E63F9EB70555F7DB8E0028A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 029E
Signing time: Sun 19 Oct 2025 14:01:53 +0000
Manifest this update: Sun 19 Oct 2025 14:01:53 +0000
Manifest next update: Mon 20 Oct 2025 14:01:53 +0000
Files and hashes: 1: ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa (hash: IdApViwu1d+gOIrjS2rsEi8/hl56lvmzjtXUhg292sQ=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: Xj7ZnAzPmd1ewXTbhC2Rs+/NezeYwcQBtauZMyMMUQ8=)
3: s_VH1RJUenuP8OvNJaH6yu7OYsg.roa (hash: vyeEoRPPlhaqhjAq4VATA3B5K5D/1bqk7r9/7EELRFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:d9:06:e6:3f:9e:b7:05:55:f7:db:8e:00:28:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Oct 19 14:01:53 2025 GMT
Not After : Oct 20 14:01:53 2025 GMT
Subject: CN=0109d013e2cb83c6300769b1e824fb309bb0ee2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:17:f5:a2:f3:c4:f6:08:4e:6f:b2:0d:25:
56:4f:c0:43:06:b3:32:e7:6e:09:9f:0f:c6:f4:00:
63:8b:c3:c5:37:30:f5:42:88:97:c5:51:e8:61:11:
de:a5:5a:50:04:34:e3:ea:92:4a:66:d2:7b:f3:6a:
20:a7:0b:d6:02:85:e9:e5:96:8e:80:49:72:e7:8f:
ef:7e:df:a4:d4:59:10:2f:22:3f:09:d5:65:c6:0b:
eb:30:a6:2e:34:55:1f:aa:7f:e6:e6:c8:a8:e7:c3:
0f:34:cf:f8:5b:c5:95:5d:3a:02:4f:f8:32:6a:f1:
6c:e1:38:05:f4:67:30:0b:3c:c2:51:ae:1b:1a:58:
95:d4:62:a1:94:be:7d:6d:11:a3:c5:b1:e1:bb:45:
3a:d5:57:7d:4b:d0:22:86:08:52:86:fb:93:48:16:
83:8a:5c:bf:f2:e5:b7:c3:e9:7c:c3:24:bf:ec:8e:
d7:79:a6:b1:ff:e0:8f:f4:78:0f:de:95:ba:04:1b:
9d:71:f2:32:b5:51:b8:b7:c2:a8:4e:f9:0d:4f:71:
c4:ab:e0:e2:f7:a2:f0:45:77:95:b6:03:fb:b0:b6:
f8:9a:d2:27:c1:46:d4:bf:78:d6:1d:ac:1b:53:8d:
9a:c5:2a:85:29:a5:58:33:df:05:f1:9b:3d:45:b8:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:09:D0:13:E2:CB:83:C6:30:07:69:B1:E8:24:FB:30:9B:B0:EE:2E
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:31:a7:04:92:23:f6:14:89:b2:78:db:18:dc:3e:42:58:48:
ae:5e:13:c7:f2:01:18:7b:9d:3f:1b:78:0c:98:ea:41:fe:0d:
4b:07:7c:c8:88:8d:a0:06:76:cb:22:7b:c9:b6:74:34:3f:8c:
80:27:c2:22:3d:02:35:0a:c5:bd:ae:37:ee:09:fb:35:02:e9:
19:3d:5f:2c:dd:b6:8c:8d:11:65:ea:f3:ad:25:16:8a:a4:fc:
4f:9f:02:a2:24:36:5d:34:65:23:54:8d:61:e2:63:fb:0e:97:
b6:2b:fd:e4:eb:ec:32:94:ce:5f:4c:9e:cd:3a:f9:06:90:bf:
32:51:de:b5:b3:f9:8c:7e:32:c0:9d:4c:e5:a0:b2:5e:14:96:
ff:e9:05:f3:1f:d2:6f:f6:70:bf:d0:6a:f8:87:ae:f6:6b:e9:
9e:71:98:03:23:61:99:03:14:04:3e:00:27:bf:e9:ea:7a:14:
a2:da:64:0f:92:72:5e:f4:d4:d8:2e:5e:ab:60:a9:79:b4:06:
d3:84:50:6a:3e:37:0c:71:f1:c3:84:75:9e:17:e1:b9:e6:97:
95:61:50:5c:63:31:fc:47:c3:5b:a6:37:86:e8:47:5c:2e:0b:
fd:2b:21:e1:c6:9b:aa:b8:59:4c:50:4c:a0:8a:63:58:3e:5c:
6e:59:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:37 2025 by rpki-client