Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: LO/Ji0YDh55YIMXOO45KIVIrPaghXXf6bagEjkmUJEw=
Subject key identifier: C8:0D:D7:0A:DF:4B:6B:C2:72:1F:8F:4C:8C:D3:6D:A2:12:86:70:E7
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 0199FEB50B58E54BD8A412564AB592AA2515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1121
Signing time: Sun 19 Oct 2025 23:01:41 +0000
Manifest this update: Sun 19 Oct 2025 23:01:41 +0000
Manifest next update: Mon 20 Oct 2025 23:01:41 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: 3WvlivO0q0f9v5iw4p0q+aawCPNB8bzvajFDzGEQvIg=)
2: X4mIRbShCI_swD4AYibAfXumzPE.roa (hash: ZCD8FV34ZVGGbkTB2fH3uXc5W92QDu1a+e1QI3r0+es=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:0b:58:e5:4b:d8:a4:12:56:4a:b5:92:aa:25:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Oct 19 23:01:41 2025 GMT
Not After : Oct 20 23:01:41 2025 GMT
Subject: CN=c80dd70adf4b6bc2721f8f4c8cd36da2128670e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:f0:c2:85:89:da:3e:25:54:0b:1d:cd:1d:
b2:5b:73:8b:4c:c8:2d:49:e7:ae:fb:9a:4b:85:c1:
f7:eb:91:24:5d:d2:e5:1e:18:31:22:14:06:34:3c:
e5:10:04:d8:5a:16:25:30:ed:e8:34:53:91:62:30:
54:6a:6e:7e:26:a9:a9:a5:8a:24:77:bb:61:4f:f7:
a9:aa:83:fa:7f:4d:fb:d4:9d:18:5f:5c:91:76:76:
93:d9:55:22:2a:77:d1:b0:db:ff:64:9d:52:8a:b9:
29:ef:ed:13:eb:1c:9a:76:3e:65:34:5a:ab:31:06:
ab:53:1e:18:e7:ac:92:eb:c4:d3:06:4f:1f:86:bf:
d2:ea:a4:3c:b4:7c:7e:2b:b4:07:fd:99:81:b0:f1:
18:79:1f:a3:7e:71:dd:64:52:f9:30:7d:fe:2b:54:
a9:ea:4a:a3:c6:b6:07:e6:73:bc:f6:16:5e:86:98:
03:db:4f:cc:17:63:b5:df:11:cf:51:21:d6:a8:3d:
b3:83:ee:ed:29:fd:1a:67:29:77:38:f1:42:e2:db:
85:50:fd:c9:4d:fd:eb:92:8c:f4:12:35:05:6a:e1:
4e:f9:96:c2:5a:cf:20:7e:4f:b9:4c:ca:e9:66:a3:
91:73:80:8e:37:1d:3d:d5:00:bd:35:00:f2:c1:22:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:D7:0A:DF:4B:6B:C2:72:1F:8F:4C:8C:D3:6D:A2:12:86:70:E7
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fb:cd:4e:e8:df:4b:5e:15:c1:ef:9f:2c:a7:72:52:35:2f:
6e:8d:71:9c:ae:35:61:53:53:77:9c:46:7d:a7:53:3f:5b:04:
a7:85:81:7b:c4:3b:1f:14:ad:f5:77:ec:7f:51:1c:e3:4a:6a:
b1:56:bc:dd:06:54:2a:dd:d5:e0:15:83:98:55:11:2d:18:32:
84:38:99:63:c3:10:a5:ce:04:d3:f3:f5:72:ba:1f:9f:55:ef:
83:4f:71:93:c9:60:89:49:12:5f:4f:db:3c:1b:e6:af:71:99:
42:fe:12:c1:9f:69:b5:80:49:d9:1d:5f:16:b9:f6:2d:2f:47:
cd:27:44:b0:dc:f2:43:c0:9b:ec:35:b5:75:89:98:fc:8c:9c:
e0:24:21:af:1d:7f:34:9f:e8:f1:16:22:08:31:ee:35:8b:75:
97:6d:20:46:c5:c4:d2:7b:c6:1c:04:a4:9b:52:b6:34:39:83:
7e:28:33:9e:8c:0f:2f:a9:a2:81:fc:58:7f:34:9d:17:5b:b1:
c6:97:d3:f3:2b:0b:03:5e:87:a2:6c:1a:f6:68:84:52:5a:99:
9c:92:d9:95:6d:da:7d:6a:d4:ec:7e:04:59:8f:d2:d5:02:38:
bf:0e:be:98:ce:df:ca:78:19:97:25:cc:d7:28:c1:12:65:be:
c1:fd:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:08 2025 by rpki-client