Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft (raw, json)
Hash identifier: 7RW5obOxUoCvU/2x1x2IFr/eXGtA6WzleAgvnBvtTms=
Subject key identifier: 10:0D:49:3B:54:9E:3C:C8:89:BD:F0:4E:E1:DA:AA:3B:3D:AC:F7:CF
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial: 0199FBEBA8F0AF73AD832E4550F082CC7A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl (hash: CV8fWv+FTlhJ3RQ7fKQUswHDKEZgPUj7i6QXJNOvDHk=)
2: baHbcRR9kf1ghjeGFAS82cVbM5E.roa (hash: ryV49aEsL3mdbzWN2VnZ4BiiOTM51N9BlYGHQV8L9fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a8:f0:af:73:ad:83:2e:45:50:f0:82:cc:7a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=100d493b549e3cc889bdf04ee1daaa3b3dacf7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a4:0e:0e:a7:cd:f2:f5:42:36:50:ee:07:db:
57:b9:94:04:c6:0c:25:41:ba:ad:95:6a:27:de:c4:
a2:8a:3d:c3:6b:f2:f2:9f:ed:86:24:27:89:61:49:
09:5e:78:f3:5e:f7:17:f8:28:90:c8:c8:b0:40:81:
53:48:55:a4:2c:2e:e3:54:f0:33:87:3e:1a:0b:35:
2a:41:fc:4a:44:56:a6:e1:83:72:d1:8b:8c:58:b9:
43:0c:47:bd:4a:38:e2:1f:d7:2e:72:a0:36:5f:06:
f1:60:77:e3:e0:73:c2:62:5d:bd:3e:cb:26:25:27:
32:60:5a:00:aa:07:89:28:7b:50:51:f5:82:8b:b1:
fe:ad:39:d9:b2:52:0c:16:0c:1f:8d:c3:03:b0:03:
1c:1f:bf:3f:0f:64:49:8f:26:3d:38:e7:31:f5:e4:
44:ff:aa:e2:e7:37:35:66:c0:05:54:a0:58:0a:7f:
88:f5:e8:67:c8:2a:c1:4a:3e:c4:bb:63:12:ff:10:
26:f5:80:b1:62:58:3a:29:c7:45:76:e9:ce:99:34:
ed:7f:00:f5:98:a6:66:d6:ae:bb:b6:bf:1b:4c:e4:
ed:82:bb:fd:22:e6:84:99:3f:52:7e:7b:38:2e:d9:
5b:65:10:44:1e:f0:2c:43:7b:63:78:2b:1b:ef:fa:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0D:49:3B:54:9E:3C:C8:89:BD:F0:4E:E1:DA:AA:3B:3D:AC:F7:CF
X509v3 Authority Key Identifier:
keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3c:fc:ef:e6:a2:6d:2e:c5:21:29:5f:49:77:41:bf:07:bf:
f6:fd:dc:a9:24:59:3b:bd:7d:01:5a:cf:b5:c2:7a:8a:61:34:
51:9c:2a:9e:fd:ad:15:33:de:83:a9:f5:91:c7:41:d8:13:83:
dd:9a:fb:1c:9c:ab:cd:e5:f7:3b:3b:6c:be:2c:9b:1b:6b:84:
92:54:aa:ac:b1:52:f2:d4:d4:81:eb:c6:93:60:4d:d1:5f:b1:
70:e4:47:bf:d3:d8:57:64:74:7f:23:9c:da:92:2d:65:5e:19:
6a:4a:a5:f4:4c:cd:fa:85:32:3c:40:23:bc:12:33:57:6a:1f:
b9:5c:0c:fc:5b:18:93:ab:c7:e1:23:60:84:6d:65:40:82:10:
e7:9c:95:e0:4e:b4:fa:eb:f6:3b:50:aa:37:03:3e:29:6d:9d:
df:b5:66:0c:f5:24:6d:4f:7a:ad:8e:67:94:70:a0:ba:ee:92:
19:87:90:e9:3e:8c:01:b8:6b:f8:97:0b:d0:79:1f:5e:29:43:
2a:fd:c1:49:5e:a2:2a:5d:c1:6a:fe:7f:78:92:0f:98:ab:e9:
aa:ee:9e:6b:a7:ef:87:33:a1:ef:19:a7:76:ed:17:54:78:64:
44:8b:36:2f:11:5d:1c:76:04:0a:df:85:0c:e6:fc:a2:26:56:
f3:4c:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:00 2025 by rpki-client