Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File: PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier: ZGSzQyniZn0S4xiy5APtYeE33T9q2eMftKD2i0/W/5c=
Subject key identifier: 95:F4:19:99:0C:6E:21:C1:78:DD:C4:56:82:A9:72:D4:44:B3:3A:14
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer: /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial: 0199FC8F8ADBDE783DA684FAD9316214C252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number: 0E0C
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: AuOuUKhz7LbWM9xXAFqUFIS1KQI.roa (hash: yQUlcBfkC7CQTeK1Wv3DBode7pqw+A1kJYyGEQOXp9g=)
2: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: /KfourDdbsLP3nuCEVtD5iUuKMwUrh2mWdWPJ6udpwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8a:db:de:78:3d:a6:84:fa:d9:31:62:14:c2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=95f419990c6e21c178ddc45682a972d444b33a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:7f:1b:c0:38:66:d3:b0:e5:39:cc:aa:a6:
39:70:b5:66:ac:16:eb:f3:b3:63:08:87:a3:e2:db:
6d:f9:e9:77:87:67:ee:6e:e1:b7:24:17:e4:95:ef:
15:c8:c0:c2:48:ed:99:87:cc:57:79:e5:42:5b:d7:
55:0d:29:0f:e2:16:d4:a2:03:d9:c8:9b:e0:6d:80:
96:97:f9:5d:d3:1e:c2:0a:d2:43:ec:88:36:69:4d:
eb:9d:2c:a4:75:22:98:2f:04:c1:95:57:07:70:f5:
a3:cf:28:49:4f:3d:cd:b8:4b:36:d8:a8:7f:69:64:
a9:f9:1a:03:57:d1:c9:74:64:db:d5:65:a1:04:d0:
8e:35:7b:dc:0b:75:70:c6:3b:b6:c1:97:43:f8:26:
2c:cb:35:5f:3a:44:d9:35:ff:7c:fb:6e:50:75:2b:
16:b2:35:04:19:16:a0:4d:58:3d:20:3a:05:57:cc:
c2:cc:bd:65:a2:14:59:a8:3a:24:05:5e:3e:f3:6b:
da:0f:4b:8b:96:79:5d:83:bc:f9:bf:f6:f5:9d:2e:
c6:09:4e:9e:1a:a5:c3:e9:eb:67:8d:14:86:99:0d:
a3:69:15:8a:48:69:d0:e3:67:6f:f8:05:4f:1a:8b:
c2:99:4c:9c:14:7c:14:2e:54:d3:59:d4:d6:ea:65:
da:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F4:19:99:0C:6E:21:C1:78:DD:C4:56:82:A9:72:D4:44:B3:3A:14
X509v3 Authority Key Identifier:
keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c5:3c:52:b0:cf:9d:67:35:55:56:0c:44:15:63:e8:71:67:
1b:a6:ca:70:62:72:4d:b0:83:79:2e:8f:41:19:f3:e2:bb:a0:
ae:f0:f6:2d:79:ea:8f:ac:65:14:c9:cd:4c:a8:1c:52:a6:78:
85:5b:3d:74:e8:5f:b7:72:a8:e6:82:92:f5:d2:3e:ef:74:f8:
2d:57:65:fb:aa:0f:7b:1c:71:60:82:74:ea:20:cf:5d:fc:86:
6c:79:29:5e:a6:bf:a9:f2:19:6f:4e:77:d1:60:82:a0:7c:e8:
5a:ba:b1:f8:51:63:d1:14:af:4c:9f:f8:e4:44:ce:ce:ed:c8:
97:ff:4d:a4:94:7f:c2:8a:66:07:7d:c6:6a:0d:cd:d5:d9:56:
ad:0c:1c:1d:e7:38:e9:2b:47:d7:14:2e:fd:de:7a:c0:eb:f0:
6a:ac:3b:1b:8b:83:02:7a:e2:8b:21:2c:c0:f5:38:1c:9c:ff:
6c:b1:8a:f2:74:69:92:3d:4e:f4:29:54:4b:96:d5:0b:84:36:
64:67:da:b7:1e:e4:67:ce:1b:35:46:7b:7b:dd:0e:64:21:cc:
61:8c:8b:70:5a:5c:06:a5:d3:46:9f:d0:b7:67:92:58:a8:93:
1f:ea:77:57:d3:c9:13:49:6a:24:04:ea:90:d9:0d:29:57:b9:
81:d9:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:39 2025 by rpki-client