Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: vaX0HLt2NJ1QpospjALOTyv0VxQZrZKeUHY6bYk6XJ8=
Subject key identifier: C7:AD:D1:E2:D3:AC:B6:F1:47:0A:DD:72:56:E8:C7:58:C9:AC:79:CA
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 0199FAD823FDF99B86E1A8D58B73BB9D35B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 0E5B
Signing time: Sun 19 Oct 2025 05:01:32 +0000
Manifest this update: Sun 19 Oct 2025 05:01:32 +0000
Manifest next update: Mon 20 Oct 2025 05:01:32 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: gEKb4zW17KixkKF7ljkH400tgiatVHSlXIRcUIsq128=)
2: mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa (hash: 9Fpz5SGKImESLClWOjbnaFAMtUoqIoi74+/yK2yHMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:23:fd:f9:9b:86:e1:a8:d5:8b:73:bb:9d:35:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Oct 19 05:01:32 2025 GMT
Not After : Oct 20 05:01:32 2025 GMT
Subject: CN=c7add1e2d3acb6f1470add7256e8c758c9ac79ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:ca:c2:76:35:61:0a:82:5f:f8:f5:e1:f8:
ff:33:83:23:05:90:c8:4e:46:2e:6e:5a:16:6e:00:
bf:da:3a:ab:e7:ae:14:28:33:fa:c9:f4:5c:dd:b2:
40:00:f9:51:ae:34:cd:a9:ee:b4:99:bb:f5:2c:60:
9d:10:6d:46:92:12:5d:6c:e3:f3:ef:b4:d7:4c:dc:
8f:5c:35:bd:79:5e:1f:e5:f5:d1:2f:6c:47:68:f6:
b9:f9:82:be:f4:77:5b:98:79:e1:57:7f:63:d1:8a:
eb:85:d3:c2:8c:4d:8a:84:bf:7a:00:be:96:8e:e9:
c4:89:5a:af:75:70:32:00:4d:95:33:fe:ba:bb:c3:
a7:70:af:67:55:eb:5d:dc:c2:8f:b4:e2:68:05:6e:
a0:58:44:a4:a1:2d:4b:51:c4:c7:2d:27:fa:56:af:
2e:a4:b1:09:b8:74:13:4e:1d:9e:ca:b3:ae:a2:e5:
81:c0:d5:6f:43:cc:62:6a:ea:a8:53:08:a7:c1:58:
a7:99:8d:ee:50:61:69:10:f4:b0:34:99:f0:18:15:
91:11:cd:c8:d0:4c:57:f1:94:bc:85:19:31:86:1f:
6c:37:07:40:46:08:f3:17:b0:71:fc:d6:02:bc:bc:
8e:81:2b:9f:4f:0f:9c:93:46:04:22:56:8f:b8:63:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:D1:E2:D3:AC:B6:F1:47:0A:DD:72:56:E8:C7:58:C9:AC:79:CA
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:bf:af:d0:c1:27:38:fb:24:7c:24:73:b5:d0:2f:66:13:7c:
74:fe:b5:16:94:cf:8f:10:e1:82:a7:c4:43:5f:e2:6e:b6:85:
c7:42:6a:5f:ce:c5:85:9f:db:50:ed:88:e2:d7:9d:b0:94:e7:
a4:1c:c7:c0:02:f5:df:53:4b:7b:6c:f0:5b:ff:af:8f:5c:f5:
34:1c:7e:5f:39:0c:d4:d0:95:f7:74:93:ab:32:3f:f0:58:4d:
76:97:5c:4f:45:e9:b1:74:3f:14:1e:d5:ef:2c:4b:4a:06:eb:
e7:66:2c:14:1b:06:b8:2c:54:d3:a3:77:55:16:ed:1c:44:7d:
83:fe:5c:10:3d:9b:3b:b9:8f:c1:06:a0:ff:dd:61:eb:70:a1:
fd:6e:28:d3:91:4c:d7:86:10:b2:0c:20:23:24:0e:90:1b:b9:
09:cf:22:1a:28:78:95:68:0e:29:ae:b8:19:ba:81:0d:36:3f:
3a:32:56:71:6a:af:4e:82:60:12:7a:c4:f3:b5:02:8f:64:dd:
5d:b0:25:9e:6a:ed:c0:79:98:b9:f2:4e:ff:af:6b:00:db:d2:
7d:ef:4e:36:16:16:93:f5:dc:0b:6a:b5:36:25:b9:97:f9:1f:
28:fd:62:7a:ae:94:7b:6b:97:42:ea:9d:4c:8a:c1:d9:bf:02:
a1:24:5e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:04 2025 by rpki-client