Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
File: pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft (raw, json)
Hash identifier: EcM7RaF1tQ1OahD1JbmhJzFPrMD1U6ERiUobUlzguaM=
Subject key identifier: CB:BB:A8:57:B5:A8:E6:B0:A5:1A:B4:E5:DC:5A:0A:F1:3F:62:96:E2
Authority key identifier: A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00
Certificate issuer: /CN=a5cde204a3669f9281ee1fc1d5f248542a805e00
Certificate serial: 0199FAD838E7B4EA1EB08A13B338A31FD7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
Manifest number: 0E
Signing time: Sun 19 Oct 2025 05:01:38 +0000
Manifest this update: Sun 19 Oct 2025 05:01:38 +0000
Manifest next update: Mon 20 Oct 2025 05:01:38 +0000
Files and hashes: 1: 1-DK7gQMR3zOiiYwp61HeTTqzJBE.roa (hash: 67WBQ3gib1UB5ugiA0n6m252R05HZIyEYElD2sa4klI=)
2: pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl (hash: jMWMdqASwJv56Bie3iIJWML4UNFpm5TIKpCsIcu6uWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:38:e7:b4:ea:1e:b0:8a:13:b3:38:a3:1f:d7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cde204a3669f9281ee1fc1d5f248542a805e00
Validity
Not Before: Oct 19 05:01:38 2025 GMT
Not After : Oct 20 05:01:38 2025 GMT
Subject: CN=cbbba857b5a8e6b0a51ab4e5dc5a0af13f6296e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:36:d6:a2:b3:70:a9:6f:35:2f:d4:cb:2b:15:
72:26:4b:27:69:28:e3:db:5a:77:34:ac:0c:f8:93:
a7:18:7d:3b:c8:72:c3:36:30:47:24:83:04:a3:54:
c3:0e:98:07:55:47:ad:6d:9f:e5:52:ef:c1:1e:c1:
7a:b7:75:fd:24:89:6f:bb:82:ff:38:cd:9a:ac:6c:
62:82:6d:28:c6:66:76:fc:2c:f3:b7:88:d1:be:36:
5a:b1:bd:29:9c:bc:ba:47:a1:56:49:95:84:c9:31:
3f:78:b8:ec:f4:71:29:1b:0d:40:8f:4f:f5:33:9c:
c2:25:9d:cf:9e:25:e7:85:54:da:c7:87:b5:cb:6a:
ac:25:c7:fc:bf:5a:f7:d9:f4:a7:e6:90:92:ba:35:
ed:48:bc:23:3b:d1:e5:18:61:fb:65:6c:9c:ac:62:
5e:c1:9f:56:17:a6:69:ec:5a:68:05:ee:38:2f:e9:
98:a5:3f:00:8a:30:8b:58:02:92:24:5e:af:e2:6d:
92:93:19:c3:86:dd:03:1e:eb:b7:02:62:8e:d2:81:
33:2d:c5:89:0d:26:0c:aa:0c:ed:d7:ff:d0:07:b5:
5c:a0:3a:79:99:aa:61:b2:dd:01:73:91:8d:77:bd:
21:76:79:3d:ec:5c:47:ab:07:0b:f3:55:5f:75:a6:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:A8:57:B5:A8:E6:B0:A5:1A:B4:E5:DC:5A:0A:F1:3F:62:96:E2
X509v3 Authority Key Identifier:
keyid:A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:e2:c7:b1:8f:41:e3:de:4b:b3:6a:a2:87:4b:15:5b:7c:
6d:f4:c9:28:6e:86:ca:2e:f1:1c:d4:f0:9b:49:e8:04:b6:12:
a2:92:fb:f0:aa:0b:43:19:63:7a:ef:ad:17:93:be:ed:38:99:
21:4d:d9:cc:fc:ef:74:48:18:95:85:76:70:4e:57:27:d5:b9:
ac:35:3a:4a:b7:1f:a1:7c:34:ef:14:2a:8a:c2:b6:2b:9a:2f:
73:5f:5f:98:ed:e3:a1:6a:94:48:5d:6c:11:43:31:15:01:48:
12:aa:cc:b5:be:9a:35:b6:f1:d5:ce:03:83:02:de:47:0a:e4:
e0:57:34:c8:d5:22:1b:ee:42:73:61:ee:ee:57:44:10:ee:80:
f0:3b:92:2b:32:89:53:51:19:ab:73:8f:d7:58:2a:48:ec:e0:
48:cf:e4:22:e8:27:c1:9c:38:e6:a3:74:1c:1b:dd:60:22:0b:
10:2e:90:04:33:82:45:00:13:e0:12:b2:a4:d5:1b:a4:3a:9e:
5d:6b:2e:4c:53:0c:9e:b6:43:aa:af:ad:c7:f6:a5:29:af:3d:
0b:91:77:dc:04:ea:6d:9c:99:9a:7c:98:68:7b:a8:ca:f9:5f:
25:96:17:e2:b9:fd:7a:c4:07:6e:ee:55:bb:61:b6:b9:40:5e:
cc:11:98:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:14 2025 by rpki-client