Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: 48sWSAxquQ4G6ULJXQaZfk4R8aBBfRG0mg7396wZUUI=
Subject key identifier: AE:AA:02:AF:DA:B4:2B:D3:5F:79:3F:4C:18:74:D1:E3:79:A3:F2:D8
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 0199FC8F8F25FC4F960033855F0B8326BEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=)
2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: yQUMX3GWNUd5SQycwvyxtWrwEvQy+1WDDgKwE6VPbpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8f:25:fc:4f:96:00:33:85:5f:0b:83:26:be:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=aeaa02afdab42bd35f793f4c1874d1e379a3f2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:2b:bf:c2:b1:7f:ed:f8:5a:92:80:30:0d:
9a:19:10:66:b7:22:b9:49:5d:04:96:9b:ef:aa:ba:
44:4e:2a:d7:53:de:6e:49:93:2a:b5:7f:78:fa:13:
bc:a9:e6:06:ce:1e:46:df:cf:b3:5b:73:6c:a5:9f:
e5:80:ee:51:30:d5:3c:ad:48:f8:b1:8a:b6:04:b4:
1a:dd:fe:1f:c8:b2:7d:de:97:c4:ab:8b:b7:0b:d1:
47:33:e5:b3:fa:89:32:8b:76:26:19:bb:0e:c1:3e:
bc:c3:bc:b8:a5:97:25:26:4c:01:58:5f:0a:1a:4a:
28:2c:0d:1e:5e:e4:8e:1a:a5:8c:a4:bd:1f:db:aa:
8a:8a:6d:94:d2:04:b6:c9:5b:66:51:10:02:e8:49:
90:ad:82:db:ae:a1:9c:9e:7c:cb:1b:b4:e4:22:50:
8b:ea:84:27:0c:d4:76:65:b8:93:cc:8d:b0:35:4a:
a8:0e:d4:0d:ac:5d:e7:c0:4e:a0:37:ab:69:96:e9:
84:a1:00:88:50:49:5f:4e:61:a9:71:70:8e:d3:e2:
9c:aa:36:53:e1:3e:22:01:61:6f:9d:43:be:f0:f2:
56:b2:d5:db:91:52:67:96:1b:bb:a0:49:ca:c7:bd:
b8:08:35:33:1a:20:3f:17:17:1d:26:aa:b4:bd:0c:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AA:02:AF:DA:B4:2B:D3:5F:79:3F:4C:18:74:D1:E3:79:A3:F2:D8
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ae:42:30:6e:44:d3:66:8c:83:bd:16:86:26:5a:ae:6c:86:
b3:ce:1c:bb:22:72:14:b5:e2:71:2d:55:94:76:25:d6:69:0a:
1e:4d:b8:af:86:93:a2:6a:0c:97:35:47:12:75:6b:8b:3c:b2:
91:01:00:73:1f:de:de:2f:32:8c:37:b2:6c:52:f0:8c:b3:a8:
78:4e:65:68:9f:2f:be:88:a0:1e:cc:51:3f:59:2b:5e:6d:07:
b5:ea:52:de:5e:dd:e0:b2:05:dd:60:a8:21:8a:1f:25:dd:c0:
55:53:e7:ba:30:56:da:ce:fb:c1:60:3a:b5:fa:f9:d1:a0:cb:
81:52:2f:cb:b6:3c:db:0a:65:d9:29:47:8a:29:50:bd:f1:bb:
67:93:2b:bf:c6:8b:85:fd:f7:a2:28:fd:17:69:31:02:8e:94:
71:41:39:db:4a:9b:4f:f6:f6:3e:60:28:0f:ee:87:68:22:4d:
0e:17:8b:e4:e3:bb:15:e2:e3:c7:c3:1c:da:c4:55:67:4b:73:
a9:03:02:50:d5:b2:df:05:50:12:70:2b:2d:38:c4:e3:b4:4a:
d8:2a:55:30:d3:d6:f6:0f:09:ae:7e:3e:80:9c:71:bd:f4:51:
70:ce:af:3e:6c:30:43:df:1a:d7:c3:59:63:60:43:12:a9:51:
aa:ae:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:47 2025 by rpki-client