Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: NiLBrr04qcg3vHKm5G4eE3jt46EOn4kZKI4r35wXhq8=
Subject key identifier: D8:9E:4F:C4:A6:0A:23:A0:C2:F6:8D:0E:9E:FF:91:4B:D1:D3:87:BB
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 0199FBEBA101BC3CF33A99552FB823FA0DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 10:02:27 +0000
Manifest this update: Sun 19 Oct 2025 10:02:27 +0000
Manifest next update: Mon 20 Oct 2025 10:02:27 +0000
Files and hashes: 1: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (hash: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=)
2: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: SDreG6/CHntdqfTXyhePlcH+vN030cuzUTTQqWEmr74=)
3: vFJBXwiLiT0SV6hpYm9T1KH_3Sw.roa (hash: iZ/rALDyZJ1JAyWAtw5uSLsZV8Z+UzVJnNgd7eGfu2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a1:01:bc:3c:f3:3a:99:55:2f:b8:23:fa:0d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Oct 19 10:02:27 2025 GMT
Not After : Oct 20 10:02:27 2025 GMT
Subject: CN=d89e4fc4a60a23a0c2f68d0e9eff914bd1d387bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:8e:21:19:7f:03:a2:fc:5a:c3:8f:de:a1:
ba:21:ed:0c:9f:24:08:58:0c:aa:dd:77:63:45:4b:
5f:2d:9a:22:cc:6d:e3:a9:9c:84:89:f3:6d:70:5a:
47:e1:4f:3a:5b:ec:65:61:75:66:6a:f6:bb:1d:ad:
15:68:13:70:1c:10:1f:98:98:8a:16:0c:43:55:f2:
b8:46:67:5f:fa:51:5a:07:6d:3c:28:45:62:89:23:
05:56:40:1f:ea:05:98:0e:82:92:88:bb:28:ab:0c:
04:05:4d:b3:22:fb:ab:ed:03:56:c6:70:0c:68:3a:
0e:fc:d0:a8:da:dc:2a:85:82:1c:75:c2:10:0e:9f:
84:fa:88:4c:62:c7:06:16:93:45:b9:71:00:e6:40:
b3:38:d5:e7:96:51:67:7e:b6:75:54:17:3a:cd:bf:
c3:37:28:74:54:2f:40:72:30:a1:ce:4b:c7:95:57:
65:60:62:e4:99:2a:09:bd:22:09:05:96:e3:bc:97:
59:e6:99:05:c4:f9:46:1c:e7:26:ce:65:ee:80:b5:
7f:1b:7d:3d:bf:9e:3e:22:ca:04:90:1f:4d:e4:e8:
b2:9c:83:0b:5e:e1:c8:14:45:4f:53:40:83:74:62:
2d:0a:ad:3d:9d:49:a9:18:18:b3:59:e9:75:ae:c8:
00:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9E:4F:C4:A6:0A:23:A0:C2:F6:8D:0E:9E:FF:91:4B:D1:D3:87:BB
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b1:cf:ed:bd:91:1d:d7:5b:62:2f:c6:1d:08:9e:b8:c8:ef:
f7:4b:8d:9a:06:7a:c3:c4:66:f6:a0:c5:c6:36:c3:43:3a:16:
3c:4e:11:44:48:76:c9:20:d0:0f:50:58:b9:17:2e:95:99:c1:
66:67:a5:d2:b2:15:ee:ad:b4:81:e6:fb:f0:8f:25:40:13:fc:
d1:13:86:2c:42:f8:a8:1b:85:1d:d7:9f:47:9d:39:92:32:aa:
9e:13:41:c8:10:cd:fa:b8:62:70:03:a2:9e:c0:09:3e:b0:af:
df:1a:8e:44:8e:49:9d:85:99:75:5f:08:5e:50:d3:ee:bc:34:
7f:e0:00:38:42:0e:e3:74:3d:26:b8:c0:91:f6:65:57:eb:55:
d9:f6:67:00:36:dd:5c:1b:f6:bd:cf:14:d4:64:8f:50:f4:42:
c9:2c:40:0e:dc:40:28:36:7a:6e:0e:bd:c1:9f:c4:57:42:50:
84:d4:5c:3f:d1:bf:54:ef:eb:2b:98:1e:b8:90:6b:53:68:13:
e2:a0:24:fb:6f:de:05:50:3f:fe:ff:6f:a6:9d:79:e7:3d:80:
6d:aa:db:95:be:b2:01:53:86:2f:b1:27:20:a4:10:27:39:f2:
6b:76:32:8b:cd:4a:05:43:9a:bc:81:0c:ad:78:da:b5:ed:3a:
00:92:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:01 2025 by rpki-client