Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
File: pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json)
Hash identifier: kba7aJQHxWNkshe9mfgIYnHdAKiHPp1YkSxuJBr7T4M=
Subject key identifier: 9F:94:16:3E:BF:36:D2:92:50:F5:48:B6:30:8F:81:FB:0D:D2:7C:EA
Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce
Certificate serial: 0199FDD9BB9B3EAB8E9561E3E10A831701BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
Manifest number: 09BD
Signing time: Sun 19 Oct 2025 19:02:08 +0000
Manifest this update: Sun 19 Oct 2025 19:02:08 +0000
Manifest next update: Mon 20 Oct 2025 19:02:08 +0000
Files and hashes: 1: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: FZWc9ph+yXSgz+UKzdgiBXWY5Q3EZM2/7m2x0c1hgkU=)
2: rWk5sIUEQt5GM5tD9jvlVGxlmoc.roa (hash: bdSHmybqlxfqe2LDlmT/vhR2hatifsBsFgj+STLVUXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bb:9b:3e:ab:8e:95:61:e3:e1:0a:83:17:01:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce
Validity
Not Before: Oct 19 19:02:08 2025 GMT
Not After : Oct 20 19:02:08 2025 GMT
Subject: CN=9f94163ebf36d29250f548b6308f81fb0dd27cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:71:5a:bb:f2:6b:f8:fa:6b:b6:12:1b:8c:
79:bd:e3:0f:4d:12:82:3c:f1:29:0b:76:f7:c1:a9:
af:e9:74:f6:5a:0a:0d:bf:9d:e4:d4:36:78:9b:ce:
04:9a:db:0a:78:65:3a:6f:e9:9d:6c:d2:b1:94:ed:
95:83:45:77:4d:53:ca:e5:c4:35:8f:70:db:47:9a:
97:cb:c3:46:e8:8c:1e:4f:88:c1:b6:74:5b:aa:31:
e3:ca:51:a3:f5:67:a9:a1:3e:6f:9e:a0:7e:f4:a5:
69:a6:af:01:6f:7a:c0:c9:3a:84:fb:5a:4f:4a:e3:
6a:0a:43:f5:59:bd:2f:9a:53:0d:04:20:8e:30:f2:
b0:d1:51:e3:50:41:21:c9:2a:b5:25:41:d1:25:bc:
43:0a:a4:cc:38:29:43:31:e9:0e:ea:3b:50:b0:7f:
e3:81:1f:c4:0f:0e:13:57:7a:14:e1:de:07:53:0a:
31:7d:e0:f9:bf:ca:c9:76:5f:bb:76:6d:48:09:05:
95:ff:f5:72:c1:e9:85:d2:f3:fb:db:48:f9:92:38:
d1:65:6c:00:28:49:76:5f:06:6d:9d:a7:f1:95:7f:
7a:d7:6e:77:94:75:19:1f:0b:ef:5d:90:ae:36:cd:
db:16:76:07:e7:1b:5a:62:a8:6d:b2:68:81:50:06:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:16:3E:BF:36:D2:92:50:F5:48:B6:30:8F:81:FB:0D:D2:7C:EA
X509v3 Authority Key Identifier:
keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2c:5f:bb:cc:1c:a3:d2:41:35:01:22:ce:cf:98:c3:27:c6:
56:b7:c5:2c:92:e7:a7:3c:a8:59:91:f5:19:d4:a3:e8:16:8d:
ab:3d:04:99:07:fa:88:05:c4:17:fd:d9:b7:39:d5:ea:6a:00:
25:7f:ce:01:39:c8:dc:75:53:03:aa:1d:b0:5f:5b:83:85:19:
21:61:1a:9f:dc:28:a8:ae:8f:02:da:33:f5:f7:09:be:53:7c:
4d:a6:6a:29:ed:a6:e3:ba:d3:de:7d:62:e4:65:e7:ad:b0:87:
92:38:84:a5:ec:12:ed:27:37:45:e3:14:e9:78:ec:87:cd:69:
91:af:63:69:e9:5e:71:b6:23:e4:16:55:cc:45:c6:2b:a0:51:
73:59:b6:c3:14:7c:0d:00:35:36:13:ad:3a:30:36:20:fb:33:
39:1c:7f:9a:67:a1:43:db:d4:28:06:b4:6b:73:58:db:b7:11:
3a:af:83:34:36:0a:d8:cd:05:c5:23:27:8f:e3:d1:8f:42:28:
86:76:2a:02:99:c1:9f:aa:10:03:e3:00:c4:a9:d5:42:1e:22:
7a:97:e1:14:c2:8c:36:99:f4:a2:44:d9:ac:02:1f:ec:9f:ce:
b9:14:78:b0:28:56:eb:57:ee:e4:42:9d:7b:29:1e:5b:f3:6f:
d0:39:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:39 2025 by rpki-client