Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier: lP5DG4tCfzZFyXuCQIMcS1A0IQgk24IheBBTS6jLXgE=
Subject key identifier: B6:CA:7D:51:E1:33:EB:0E:38:42:8D:64:1A:A5:8B:37:B6:04:77:59
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial: 0199FD33E233E64C7008A8A1917D57FACF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:00:59 +0000
Manifest this update: Sun 19 Oct 2025 16:00:59 +0000
Manifest next update: Mon 20 Oct 2025 16:00:59 +0000
Files and hashes: 1: 3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa (hash: bNvleSp/4QB52V4DZ5fxsf4u+utsXgrzdigeABa48Cw=)
2: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: +BgN6yjw4D1AEd3aUNzYNW4ON4JnUcnUwDvFTC5R1gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e2:33:e6:4c:70:08:a8:a1:91:7d:57:fa:cf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Validity
Not Before: Oct 19 16:00:59 2025 GMT
Not After : Oct 20 16:00:59 2025 GMT
Subject: CN=b6ca7d51e133eb0e38428d641aa58b37b6047759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:02:64:5e:7e:cd:26:25:48:99:8d:17:2d:
c3:5b:60:84:c4:63:ec:c5:be:93:8b:d4:fd:e0:b0:
62:d1:8c:f8:4a:f9:c2:a9:a7:a9:0a:43:f7:c8:ae:
70:44:54:50:33:ec:29:78:a4:68:ea:a8:08:1d:53:
2e:b7:2b:d0:7d:ef:e2:19:65:2b:16:12:ea:5c:a3:
62:01:98:99:d3:22:9f:0a:3c:a9:5b:20:9f:98:53:
5f:35:43:ba:c8:dc:12:c9:76:03:3a:8e:9a:4b:29:
26:6e:19:47:07:e5:ea:61:ba:db:2e:73:60:d6:fb:
c7:f2:ec:64:81:bc:62:6e:db:6c:63:62:da:14:73:
e5:51:94:ed:09:4c:85:1f:23:73:0a:5a:3d:94:24:
af:53:b5:09:fb:25:24:85:28:11:ed:d2:a1:9d:39:
e9:93:74:53:15:43:21:df:8f:5f:15:5a:9e:4d:88:
ed:d2:7f:92:2e:a1:9a:68:18:23:5f:a4:52:d8:8c:
12:bc:9d:fb:cd:5e:25:bb:a9:cb:95:48:05:5c:f1:
d7:56:33:59:ee:51:da:39:4e:fb:76:45:dc:c4:6d:
e0:36:c8:66:63:a9:1d:4d:ce:47:26:f7:92:b9:40:
96:ae:1c:79:cf:4b:e5:e8:72:58:44:45:4b:30:b8:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CA:7D:51:E1:33:EB:0E:38:42:8D:64:1A:A5:8B:37:B6:04:77:59
X509v3 Authority Key Identifier:
keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bc:19:45:6e:b8:1e:90:27:b6:d3:b1:87:e6:ae:b6:ba:ab:
90:59:54:08:f4:8a:e4:bd:e6:85:d9:4f:45:15:41:84:0c:f5:
69:c7:ec:1f:d2:44:61:dd:da:cc:c6:df:e9:15:87:c5:39:47:
ea:94:ed:1b:6a:a2:93:63:99:7a:d2:eb:72:d0:af:79:93:80:
c6:2c:a7:64:7f:2a:4f:b4:88:bd:63:35:f8:8a:74:a3:d7:4d:
9e:6d:8a:8b:aa:e9:70:77:5b:20:f0:e9:db:b7:01:83:5c:54:
b9:60:71:b9:47:b5:a7:f4:d5:f1:44:e8:08:f9:d9:87:3e:16:
14:2a:02:f4:a7:62:a8:99:ee:8a:63:5e:62:60:35:0d:ae:d6:
74:a5:ae:1c:db:8e:f5:cb:df:b8:05:d4:6a:bd:f2:57:e7:37:
7a:a8:b6:1f:f6:98:1e:0d:ba:6d:f9:d2:95:d0:bf:1c:2b:30:
04:c2:2f:79:99:1d:9f:6d:81:bd:ef:4a:fa:d0:4a:3d:7c:32:
e0:79:b6:cf:8a:5d:7a:c3:a6:d1:d4:2e:1f:61:dc:92:7e:04:
1d:ce:91:fd:d4:fc:cb:59:88:16:86:c7:82:b4:f5:39:46:bc:
61:e8:e2:f8:ed:4a:fb:cb:de:a9:53:f1:64:a2:4f:40:5b:39:
c9:77:cb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:53 2025 by rpki-client