Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: LiDaFMK235A8AYtE7YHTROFMTWSksLxAQH/316mHHV0=
Subject key identifier: C0:52:F0:6A:18:8C:08:60:D7:9C:57:DC:36:49:44:63:98:6E:71:8A
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 0199FF59A3F2D9835EA333942CB549CEB297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 02CE
Signing time: Mon 20 Oct 2025 02:01:28 +0000
Manifest this update: Mon 20 Oct 2025 02:01:28 +0000
Manifest next update: Tue 21 Oct 2025 02:01:28 +0000
Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: tBaEgGU7UZbg7pA2LiCkmDPrVmRCin9a3/+ApX2vVR0=)
3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a3:f2:d9:83:5e:a3:33:94:2c:b5:49:ce:b2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Oct 20 02:01:28 2025 GMT
Not After : Oct 21 02:01:28 2025 GMT
Subject: CN=c052f06a188c0860d79c57dc36494463986e718a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:19:e2:dd:51:12:a3:d5:93:b6:ff:8c:7d:
b6:64:c3:0f:30:86:cd:ee:fb:54:ed:bd:d6:55:72:
aa:64:d2:d7:d3:c6:07:5d:a7:fa:64:d4:c3:e7:3b:
60:2e:97:43:a8:c1:58:76:f2:fe:c6:b9:30:bd:5e:
8f:4e:86:f5:33:ee:1d:2b:cc:e4:96:f7:b5:b6:c1:
a8:69:48:e1:f6:a2:c6:dd:ac:f3:8f:f2:47:b8:3e:
da:a7:e1:da:24:69:76:2f:5d:2d:80:ec:b1:90:d5:
4f:48:e2:88:2a:5a:4c:d2:ff:89:df:ee:90:14:9e:
50:16:9c:6d:b1:4d:f9:df:cb:a2:33:76:3b:88:48:
d2:53:6b:89:5d:da:e0:18:c4:e8:7a:5c:7f:8a:33:
91:be:f6:2f:73:7d:42:52:93:da:d2:f4:4e:0a:0d:
d2:7d:51:c1:d3:44:35:20:e6:71:29:85:e4:8c:95:
f1:b7:81:50:c4:f0:2b:69:7c:e2:5e:70:d1:40:c5:
72:a9:33:e2:ab:af:91:8b:8e:c5:1f:0a:ac:1d:c4:
bf:88:02:5c:23:0a:87:ac:42:85:01:75:91:c8:18:
09:c4:f1:dd:41:74:c3:d2:c4:5d:16:ae:ba:7a:17:
08:c5:71:51:1a:f2:4f:8c:3e:ff:ce:78:e7:89:6c:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:F0:6A:18:8C:08:60:D7:9C:57:DC:36:49:44:63:98:6E:71:8A
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c7:cc:02:2f:1d:f9:77:cd:e0:56:57:76:be:5a:3c:ce:5b:
8f:b5:c4:df:d2:70:62:5a:fe:f0:b5:80:a8:e9:17:86:a7:32:
b7:3a:d5:64:f1:d0:c4:57:bc:2a:70:36:18:5e:88:b0:5a:90:
43:d6:29:c1:a9:2f:75:65:b7:41:0a:fb:1e:4a:d2:a9:a9:6d:
4b:70:c0:1e:61:0b:a6:10:58:90:23:60:91:1c:41:4f:f8:bf:
2c:f5:3c:a5:63:5d:cf:76:0a:c8:b4:9f:da:93:e6:fc:0f:a8:
67:9a:34:bd:75:a9:89:0c:3f:de:bc:ed:52:a0:18:c9:05:42:
2c:80:65:ca:72:ae:8c:c4:06:5b:df:0e:d8:a9:4a:aa:e0:d3:
4e:1a:d9:f6:0a:30:81:bc:1f:05:0a:fc:3d:c2:21:73:5d:42:
63:15:b3:43:ee:e0:14:f8:83:e0:1d:2f:8c:56:12:6e:ae:6a:
8e:e7:be:69:b4:aa:5a:e8:ae:ed:0b:cb:3a:54:c9:d9:31:2e:
b8:64:a8:f1:dd:f1:3d:df:36:af:d7:19:c1:f7:b7:04:e0:4e:
e0:6a:4c:54:2e:80:c1:d4:5e:6a:54:4d:0f:bf:98:4f:af:c7:
55:14:e3:07:d7:23:79:1e:8c:c1:38:c2:2f:1e:83:81:d6:49:
ed:86:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:56:02 2025 by rpki-client