Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier: wF9TN9K4UwB7+YdVFkAzOqdZHm72xWBbZ8c70wwY/Ls=
Subject key identifier: F3:9E:9D:5B:EF:C3:21:B7:D5:E2:DC:28:4B:E2:A2:FD:B0:E6:F2:6E
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 0199FBEA73DA7203422F4E53B7977F8651E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number: 0677
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=)
2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: GIHBMsTp75PB0yqK7DH9XUrh5IIS2KrFxsrsQw2a3uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:73:da:72:03:42:2f:4e:53:b7:97:7f:86:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=f39e9d5befc321b7d5e2dc284be2a2fdb0e6f26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:b3:ab:c0:88:4e:cb:c4:26:da:d2:f6:47:
c5:31:b6:9d:cf:db:73:89:2c:98:a1:ed:95:f1:76:
f6:84:54:9a:5f:8f:23:83:60:2f:16:cd:a3:7c:2e:
eb:1a:4e:7f:1b:ba:a9:99:61:86:c6:08:66:d8:23:
62:23:f1:82:ed:86:53:bb:2d:d6:6a:58:cd:0c:e5:
f3:ba:d5:11:d7:b4:12:aa:d5:1d:35:14:d6:8b:e5:
e9:b5:a1:b0:4c:5d:a2:9f:25:7b:73:40:2b:c1:ed:
06:65:4d:e5:08:74:a0:f6:49:22:81:63:30:cf:48:
37:f6:52:72:b9:a2:aa:31:06:15:46:9e:c7:3f:61:
83:45:fc:d4:32:b8:b7:db:4e:1b:46:80:84:7d:01:
dc:5c:a0:b5:a8:07:86:d7:5c:e8:90:a8:66:00:09:
61:46:f9:32:3b:47:48:fd:de:6e:74:a7:45:9f:36:
8f:71:e0:35:45:96:97:c7:3e:b5:9c:27:3c:e5:5d:
48:92:b9:26:d2:13:ac:1b:e2:2e:ae:d2:5c:eb:11:
71:e7:ae:e5:30:54:26:4c:88:d1:76:bc:96:75:2c:
19:58:eb:88:8b:52:d8:a1:1b:ea:d8:87:96:f8:54:
a8:15:89:24:1a:c8:b4:86:47:e5:d4:6e:d4:76:1b:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9E:9D:5B:EF:C3:21:B7:D5:E2:DC:28:4B:E2:A2:FD:B0:E6:F2:6E
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e3:49:b6:21:f3:ec:8b:07:71:24:be:74:cc:5a:9a:97:62:
44:a1:15:c2:b0:60:23:bc:cd:82:70:79:c5:53:c2:e9:ca:72:
8e:9a:70:6b:05:7d:5d:55:ee:34:77:fb:14:f5:5d:ae:7b:61:
a8:04:34:98:be:59:85:9d:8d:89:04:a5:17:e1:13:41:00:6a:
82:c2:9c:d8:3a:e4:f8:9f:bd:8f:ec:60:c6:de:9f:7e:c7:c1:
57:7d:08:65:b3:b3:75:77:bd:60:75:9a:46:2d:2e:18:d5:92:
1e:d8:4d:82:32:0a:7b:22:8f:e8:8d:c3:31:d9:15:26:5f:a4:
73:07:09:f4:d6:a6:56:8f:35:8e:1f:8f:3d:67:a2:f9:8a:87:
f8:f0:f9:76:f0:c6:cd:9d:3b:ac:55:ec:7a:86:ba:1f:47:67:
1e:cc:b6:e1:04:90:e3:2e:cc:50:68:6c:ad:c1:a8:2e:8e:89:
0d:14:91:03:16:d9:47:9f:b8:58:6c:5b:51:bf:1a:46:5a:d9:
34:13:59:58:11:13:87:fc:02:a1:01:f1:52:ed:8f:5e:aa:a2:
a9:ad:04:63:0f:a9:d7:7d:22:eb:b3:aa:3f:6c:a0:8b:b0:b7:
38:19:53:6b:b3:f7:98:b9:e6:b4:42:c8:a7:45:1c:fd:70:28:
68:8a:36:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:21 2025 by rpki-client