Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: T2lAhYU2TsASVfXVLTQWlDHHf6e8kDcJWFqXY35AOKE=
Subject key identifier: CB:45:4B:7B:8D:82:24:C4:9E:03:34:A6:A8:3D:E7:93:E0:03:40:32
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 0199FEEBA6BFA89116B07DFB192023D46FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 00:01:20 +0000
Manifest this update: Mon 20 Oct 2025 00:01:20 +0000
Manifest next update: Tue 21 Oct 2025 00:01:20 +0000
Files and hashes: 1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: TdOztsA/sWDYrxiELr7OfbixB6LekJpdwTN2oaKY5Z8=)
3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a6:bf:a8:91:16:b0:7d:fb:19:20:23:d4:6f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Oct 20 00:01:20 2025 GMT
Not After : Oct 21 00:01:20 2025 GMT
Subject: CN=cb454b7b8d8224c49e0334a6a83de793e0034032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:9d:47:46:f3:28:c8:26:07:b4:a9:31:04:
e8:9b:48:46:aa:fa:dc:e0:39:77:df:9f:e1:42:72:
5a:6a:af:3a:08:8f:5e:4f:6a:46:e6:74:23:aa:dc:
e4:d6:3a:76:9e:e4:20:62:f8:01:06:78:85:0e:9c:
61:a0:5d:ea:c5:38:25:a7:d8:fe:bd:8c:7e:b0:b5:
67:01:97:10:63:6a:e0:c2:fb:e3:bb:15:1d:3e:0b:
ac:40:c8:c1:45:e0:41:55:4b:cc:6a:76:6e:ef:0f:
83:2a:f4:d9:3b:54:f7:50:d1:9f:97:10:39:c9:ea:
59:fd:d5:52:0f:f5:3d:83:93:57:2c:97:8c:82:9b:
b9:ff:29:44:90:0b:01:1a:8a:b9:0f:cf:3d:de:c1:
12:c8:56:8f:48:f0:b6:ee:7d:f1:eb:1f:44:cd:8c:
ac:c1:e4:ee:49:77:78:cc:d5:f2:88:5a:cb:70:74:
60:c7:5a:00:8f:99:2b:87:82:6c:27:5a:2a:0c:ce:
8a:1a:be:6b:f7:07:8e:3c:e4:e5:e4:a1:33:e2:7a:
5a:95:c3:d7:4b:20:d2:9f:f8:74:0a:94:bd:c3:f9:
e3:42:87:70:16:3c:d0:74:2e:0a:8e:db:2b:9a:e6:
4f:bb:0b:94:58:48:f4:ee:32:84:34:7d:18:ad:52:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:45:4B:7B:8D:82:24:C4:9E:03:34:A6:A8:3D:E7:93:E0:03:40:32
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:9e:c8:ce:54:7d:57:dc:90:78:fb:7d:9a:06:7d:16:a5:79:
0f:68:87:68:39:f8:c0:71:99:62:7f:76:31:db:fe:45:da:13:
7c:bb:a2:d4:6a:2b:ea:00:e1:23:a4:04:9d:9b:af:f2:9f:db:
b9:f2:2b:fc:7d:2c:6f:ec:b7:dc:cf:55:8e:7f:4e:e4:eb:2c:
0c:4e:78:21:ec:ce:fe:1f:10:5a:e8:e4:9b:b6:60:aa:d6:3f:
7a:11:90:dc:8e:23:0b:28:a3:db:01:ae:db:d9:87:da:d6:ec:
46:d7:62:9c:cd:51:9b:0a:87:5a:9a:79:a1:02:1a:dd:ce:f0:
06:ca:09:6c:34:96:90:d5:0d:fb:64:bb:7c:10:0d:34:5a:8f:
23:31:4f:25:81:48:5b:54:4c:a7:b9:e5:13:95:62:07:66:2c:
6b:16:a4:2d:be:0e:c5:c5:01:c4:91:81:90:3b:58:97:b5:80:
b8:f7:be:4e:f3:53:70:6c:e1:8a:84:eb:4a:c0:de:b4:93:80:
9c:46:f0:26:b4:ee:09:52:0f:21:6b:b3:43:13:bf:74:63:ab:
8c:be:07:da:f4:e1:4b:cc:8d:71:9e:70:a3:4b:c0:50:92:69:
39:ac:5a:88:cc:64:f7:5e:35:bf:1b:96:ff:2e:e0:7c:d3:52:
1b:18:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:22 2025 by rpki-client