Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: mw7QujPk0j1hryy8oZ70og1yQX7zaKhi9a2FFaou65M=
Subject key identifier: 63:92:2E:5A:90:D6:5A:07:B7:48:76:9B:03:D3:71:DC:6B:8C:16:A0
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 0199FBEAB19D740D80C72421B452432791D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 0FD1
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: PH/IVhJvj5L9Oh97/Y/fiXs9CyeQnzSWPB7BQP5dNj4=)
3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b1:9d:74:0d:80:c7:24:21:b4:52:43:27:91:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=63922e5a90d65a07b748769b03d371dc6b8c16a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:fe:2d:42:2d:de:84:4d:28:f1:b1:3b:b1:
f3:45:9c:92:58:c4:e0:f3:e3:9a:01:36:8a:0b:3a:
8c:36:f1:de:51:90:66:68:f3:1a:40:8b:9f:11:2d:
63:0b:63:d4:68:fc:a5:0f:1d:e6:9e:1d:a9:a3:83:
44:32:47:00:c5:6f:95:5e:2c:29:1b:07:e6:34:8f:
34:64:ab:56:cb:c0:eb:dc:83:16:e1:b7:39:d7:cb:
d4:ed:eb:fd:ce:29:7f:61:4c:87:92:0a:57:11:b4:
d0:43:b1:c1:9f:ec:7f:c0:d0:85:03:14:83:49:af:
aa:ea:31:d7:a7:bf:6a:75:9a:51:d5:fc:47:b7:68:
5f:68:dd:08:d0:46:77:7d:23:49:39:72:bc:bf:9b:
c2:97:aa:14:0e:61:33:bc:c2:0c:3f:ab:7c:b8:8e:
8c:3c:6c:d6:48:27:18:8a:3e:0a:50:96:0d:dc:18:
28:65:61:dc:d1:bc:3b:c2:ae:05:33:5b:98:8e:30:
c9:48:ea:f9:69:d9:e9:9c:69:63:aa:26:e3:47:9f:
2e:d6:4b:e7:57:7f:a0:7f:8c:2c:4b:ee:3f:13:7f:
c4:2e:c4:46:4e:2b:7c:6b:10:09:74:62:27:87:39:
63:35:3a:d2:96:a8:91:c7:9d:03:e9:06:f9:06:a8:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:92:2E:5A:90:D6:5A:07:B7:48:76:9B:03:D3:71:DC:6B:8C:16:A0
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:02:45:f8:43:1f:0f:4c:5c:22:89:c1:81:63:07:a6:0b:0f:
b8:4e:64:ba:6e:86:82:16:d8:cc:45:10:9d:71:31:10:7b:31:
b0:fb:5c:97:7b:97:91:69:e1:39:c2:9a:0a:cc:4e:eb:86:95:
b0:a2:59:d3:51:52:c7:b2:82:e4:3f:b9:a7:85:08:41:bd:30:
dd:db:1c:f8:d5:8a:bd:93:3a:9b:c4:91:57:e7:4a:56:25:c1:
01:dd:a7:05:10:2f:01:bc:85:af:ed:e6:fc:53:21:7c:b3:c2:
47:05:81:42:ca:91:78:91:a1:25:ad:2f:6d:6f:a0:eb:3d:50:
e9:21:4a:ce:b9:a8:8b:e6:3a:9a:57:da:e4:f7:b8:eb:c1:f5:
ad:fd:6b:1e:68:a9:2b:18:ac:89:50:e4:15:44:c2:75:82:1a:
62:84:b3:e1:7e:c0:6b:24:26:fc:4b:e9:d2:bb:37:2b:8a:7e:
1b:10:30:64:ee:57:12:3c:34:d1:25:95:39:fd:f8:8c:2e:24:
f6:d0:6d:90:95:32:c7:28:10:6c:3f:35:2a:13:9c:35:31:82:
b2:63:ed:b2:d7:f8:7e:be:78:0f:39:85:95:b7:62:e3:c5:7a:
3e:07:be:a2:f0:1d:df:d9:d4:05:80:8c:96:e7:11:d2:79:13:
35:bb:03:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:15 2025 by rpki-client