Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json)
Hash identifier: 4tvbesCcIATSsOoP7PY0dbR5968hwYDTHH3q4IM3pSg=
Subject key identifier: DE:56:11:95:BF:7D:63:DE:BE:67:26:21:DC:64:A7:81:A2:F2:B1:B3
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial: 0199FD3470A0F2E884DFF2287609495FAF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
Manifest number: 0376
Signing time: Sun 19 Oct 2025 16:01:36 +0000
Manifest this update: Sun 19 Oct 2025 16:01:36 +0000
Manifest next update: Mon 20 Oct 2025 16:01:36 +0000
Files and hashes: 1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=)
2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: wspghmOYsCKf7h5p/tACrh3hbHptajUkAQ8REXKj1Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:70:a0:f2:e8:84:df:f2:28:76:09:49:5f:af:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
Validity
Not Before: Oct 19 16:01:36 2025 GMT
Not After : Oct 20 16:01:36 2025 GMT
Subject: CN=de561195bf7d63debe672621dc64a781a2f2b1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:3d:f9:73:aa:fb:66:f6:2e:0f:55:f4:de:
34:40:e7:ec:19:4a:89:ed:de:0c:76:a0:72:9e:df:
23:ed:df:e9:b8:a7:87:e4:dc:8e:86:3a:c1:4e:0a:
7c:d3:91:46:93:75:a9:11:2f:f0:3e:30:49:a7:83:
9e:ef:5f:3f:2e:3b:97:05:ed:cf:35:14:15:54:be:
7c:8c:56:7b:fa:fd:3c:19:ab:81:fc:99:dd:db:76:
82:31:cb:05:03:d1:9d:68:73:a5:b1:fe:08:9e:ea:
3a:2d:29:62:e9:5c:93:80:b0:ac:73:5b:89:b2:ea:
9d:54:13:4a:6c:2c:c2:84:20:47:e0:f1:56:c2:bd:
aa:ad:f0:27:6e:ae:31:27:11:ff:26:34:82:3c:e5:
f8:f1:ec:d6:bd:a1:12:46:07:29:d3:79:a5:ed:07:
55:3d:e6:5a:eb:99:69:63:aa:07:39:0c:97:cf:6b:
5f:f8:33:86:34:61:74:62:f6:b3:41:4d:5b:9f:81:
17:cd:c9:13:99:7a:e9:3c:03:ca:88:15:45:0f:d0:
d6:fe:d0:fd:40:8e:35:a0:90:75:63:f1:d0:ba:c0:
fb:db:f1:b0:ef:4e:e5:16:76:58:ce:eb:e0:c2:cc:
42:20:18:68:c1:5a:4b:09:58:fd:3c:52:44:d5:1b:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:11:95:BF:7D:63:DE:BE:67:26:21:DC:64:A7:81:A2:F2:B1:B3
X509v3 Authority Key Identifier:
keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1b:90:e8:0c:9c:ad:35:b8:e8:92:28:b3:71:67:c9:72:f9:
c0:91:18:6f:08:80:1b:0f:6a:32:6e:fa:e3:8a:c7:ae:12:5d:
16:54:b4:2a:a5:8c:f6:40:57:68:cb:f8:98:94:56:dd:b7:4c:
51:13:53:c0:59:17:b7:2e:a5:64:29:bc:3b:bf:f6:a9:f3:1c:
41:e5:85:54:d7:07:bc:26:50:fa:c7:59:d9:5a:29:ae:d0:3c:
6b:76:43:ca:f2:cd:49:fa:2c:c3:ab:29:c8:24:31:89:d5:88:
cd:fc:da:7b:04:59:dd:fc:38:99:55:41:74:86:95:5c:33:87:
d4:bf:fe:6c:d8:05:c3:28:8d:aa:75:c8:98:f1:de:24:bc:d1:
e0:61:4a:8f:95:20:59:87:89:d0:a7:7b:61:24:a6:cc:79:97:
f2:9c:f3:9d:29:da:1f:60:9f:aa:60:3f:56:68:ff:5e:27:17:
7c:74:72:37:04:f6:6e:7d:1d:79:f0:45:2a:43:13:1f:ad:23:
b6:de:0c:c2:42:c2:66:06:09:8e:c3:2c:29:2d:df:9d:f3:cd:
2c:83:11:e8:19:e9:41:c6:8d:a9:fa:ed:59:31:d9:87:f8:be:
0a:7c:bb:01:c4:9a:ab:ae:a1:98:00:8b:93:54:d4:0b:7f:74:
9a:1a:af:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:21 2025 by rpki-client