Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
File: pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json)
Hash identifier: qpiEF95l8a7DyYUpXne0z1QV+v2y+J6frJp9FMYmg4k=
Subject key identifier: 3C:1F:DF:9A:3F:04:B7:B5:C7:B3:E2:14:1C:FD:B3:D5:D6:6E:A0:3F
Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
Certificate issuer: /CN=a53272f37bee769fa23ea654b9e38fb023468d92
Certificate serial: 0199FCFD223F7D4628D9110C3C1D614BBDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
Manifest number: 0298
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: kl_zb47rnd8AaAP4vBoCuK61hPA.roa (hash: e2T6+pFfv8tCYwWL0QcrJLWjz1NsTR4Qy2fxVQvCN8Q=)
2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: xbjdXtDVdIdcQjRaUAYYwRcVZjOwtx/KuuCPfvz/uug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:22:3f:7d:46:28:d9:11:0c:3c:1d:61:4b:bd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=3c1fdf9a3f04b7b5c7b3e2141cfdb3d5d66ea03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:b4:11:a3:cd:a0:72:49:37:e2:9b:38:69:
3a:06:6a:27:33:ee:b3:c0:3e:94:ac:23:57:47:78:
76:52:0a:33:b7:57:e1:9c:91:c6:98:25:ac:3b:41:
64:33:15:3c:0c:d1:e6:c0:b3:f3:41:8f:d2:61:32:
ae:88:b8:4d:6f:c9:be:4b:39:62:10:fb:b3:8a:bb:
68:f0:bc:87:f3:6f:15:70:93:8d:cf:cd:5c:da:da:
99:1f:45:40:be:6a:c2:b5:eb:09:65:24:58:0e:e0:
d4:e3:25:3f:e6:8b:5a:05:c7:91:4d:4d:89:b2:3b:
03:55:32:7e:9a:72:32:08:8e:0b:a4:20:eb:65:0f:
7f:3b:9d:b2:aa:4f:33:7a:25:bc:4e:a7:d9:66:5b:
56:53:b7:73:a3:57:84:51:84:23:6d:f7:f2:bc:23:
c9:e9:a7:9e:be:61:ad:d6:b6:3d:f0:8b:a5:1f:fb:
eb:47:e5:88:b0:10:3d:46:28:57:a1:bf:bf:88:9d:
86:a4:cf:3e:9f:56:52:c6:1e:eb:68:8b:2f:f9:e2:
26:3c:a9:5a:ff:e4:d5:08:99:5a:73:4f:ff:00:30:
7f:29:57:e2:72:42:9e:a1:23:42:86:7a:d1:70:c9:
69:9b:0a:7f:43:ca:e9:93:77:b7:04:53:5a:06:eb:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1F:DF:9A:3F:04:B7:B5:C7:B3:E2:14:1C:FD:B3:D5:D6:6E:A0:3F
X509v3 Authority Key Identifier:
keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:60:4a:0b:37:9a:7a:27:8f:f8:57:1a:76:bb:f9:9d:e9:e0:
b5:60:e7:59:06:1f:f3:a0:bb:92:f4:0b:a4:42:34:af:ae:6a:
bb:95:ca:57:29:15:40:e1:4a:1b:f6:c0:dc:85:46:01:16:be:
7d:6a:e4:a9:2b:d7:b9:b3:d9:44:8d:29:33:0f:06:81:b8:e2:
62:b1:af:d9:c5:39:4d:66:60:2e:04:ec:d4:70:ba:c2:d8:8b:
6d:bb:f9:0d:7d:1c:f6:f9:55:63:68:f2:c1:34:a3:49:9a:03:
1e:a0:6c:11:35:9d:ca:b1:5b:38:4b:83:13:13:e0:5d:4b:18:
d3:98:a7:71:50:85:20:87:5b:e8:7c:00:31:00:9e:85:88:56:
c0:af:82:98:fb:2e:8a:ba:be:47:7d:b7:e3:4f:f4:88:71:2c:
af:97:78:f2:59:ab:a8:41:eb:fa:54:f3:c0:07:da:92:d0:83:
fa:cb:bf:95:9b:33:62:66:61:a2:1c:7d:df:82:91:63:07:d0:
4a:4a:15:6b:2a:0d:51:f1:4c:76:92:d7:ef:ba:b3:30:56:ef:
71:83:ba:45:16:f3:ed:f7:45:fd:a8:69:72:86:5d:7c:f2:89:
c0:f7:60:c2:62:20:3b:7b:eb:95:08:c6:ba:0a:92:68:b6:54:
87:c7:fc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:44 2025 by rpki-client