Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier: dkVgkkBvaa608h0LWFMaolM+uSkaJjygk990tleeCHI=
Subject key identifier: D3:D0:77:AC:08:90:69:84:E4:FB:D5:D3:AB:F8:44:4B:59:22:33:D3
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial: 0199FC58297C6E830877B31BFA4672298FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number: 0426
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=)
2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: BcVTTR2go9LaztopCsDgBK6xpz9QqC876jvXQmw+cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:29:7c:6e:83:08:77:b3:1b:fa:46:72:29:8f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=d3d077ac08906984e4fbd5d3abf8444b592233d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:c9:82:6a:e4:d3:c0:fe:31:27:12:80:0f:
1a:69:0f:09:e3:28:17:c8:6f:b1:b9:a1:f2:29:0b:
c3:42:de:e3:cc:8b:b8:35:67:cf:c5:2e:79:7d:bb:
e3:da:8b:37:7b:db:cb:25:e3:21:f7:48:5e:c3:b0:
ff:6e:50:64:18:b9:69:a6:fa:66:c9:6e:14:2c:d8:
4f:36:46:b1:bb:8e:77:be:45:5d:b4:49:74:34:98:
d7:77:81:db:b5:a2:33:16:ad:f1:b4:dd:0a:09:79:
32:e1:b1:2c:cd:a2:c7:77:47:b1:89:4e:aa:80:3b:
ee:33:80:cd:33:28:38:75:54:ba:f0:8e:04:b3:40:
35:b3:b1:43:71:60:0d:ab:5c:2a:3c:d2:28:91:a6:
e1:d9:21:3a:74:27:d3:08:4d:ae:cf:27:18:97:f5:
b9:d9:db:dc:a5:73:1f:60:1d:61:f4:07:0b:0a:8f:
c5:4b:43:18:3e:b6:bd:fe:e9:e9:ba:98:15:67:94:
ae:ca:77:4d:ae:39:6f:35:53:95:57:df:49:b2:fe:
34:e9:d6:ce:9b:88:35:ef:02:4c:fb:d1:dd:e9:64:
0d:cf:f7:c6:26:42:f3:ae:fd:19:92:e5:97:94:16:
c9:af:4e:c3:9e:cb:18:f0:e0:6a:68:67:f8:d8:13:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D0:77:AC:08:90:69:84:E4:FB:D5:D3:AB:F8:44:4B:59:22:33:D3
X509v3 Authority Key Identifier:
keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e1:d9:3e:a5:57:cc:24:48:44:34:46:3f:c1:4d:a4:79:1d:
3c:7c:6c:b2:76:02:ce:b8:c5:7b:d9:a0:f4:77:ee:86:01:a4:
b2:11:40:fe:a2:db:37:24:d1:38:fe:b5:06:83:78:1c:c4:75:
5e:f5:b7:1e:db:e8:79:f2:4b:e9:c6:f7:88:91:ea:ad:73:c5:
68:21:15:38:ca:f9:57:0d:be:08:f4:57:9a:8a:f3:46:d8:b1:
06:aa:a5:53:27:16:4e:f1:2f:81:9f:e8:03:4e:98:1f:6c:79:
b5:ca:80:b8:6c:41:c8:b1:87:3b:13:fe:13:a2:23:cc:64:3e:
cc:83:75:39:4d:a0:97:09:fb:6c:2d:00:7d:eb:8d:93:3d:5e:
5d:30:af:56:a1:2d:c3:b2:51:5c:30:a6:9c:f0:da:4c:44:e6:
88:07:fd:e0:d2:0f:ef:8a:a5:23:45:64:6f:4a:8e:b1:cd:ee:
bf:48:e8:ba:6e:bd:7e:67:c6:a3:1b:4c:f5:b0:17:07:c0:d2:
c8:ea:d4:22:bf:79:ca:ce:ee:60:af:da:fd:bb:fa:53:1e:5d:
e1:8e:73:bc:eb:29:9e:28:6f:a4:61:66:49:26:40:ec:f3:18:
7e:33:a5:34:e1:2b:37:c0:3c:87:bf:af:b4:be:8e:78:63:38:
7e:61:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:54 2025 by rpki-client