Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: 2ScqWtuS15OkYhm2/IFYWVB6zS3Ypf3TwMPUlhOh2+g=
Subject key identifier: AD:59:74:CC:54:0B:6E:D5:B9:64:48:7F:12:9A:C9:47:0D:00:2C:AF
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 0199FDDA3365BCC7D614CA3A5D5C1EC8CCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 01F6
Signing time: Sun 19 Oct 2025 19:02:39 +0000
Manifest this update: Sun 19 Oct 2025 19:02:39 +0000
Manifest next update: Mon 20 Oct 2025 19:02:39 +0000
Files and hashes: 1: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: 9XrZlyr9EILqBz0LRw3HxVdcWmiHD7SJqOpPdae0q5Q=)
2: QmVb0SoXYnlMedY0w_3_iXHpV1g.roa (hash: a3gXOD/NjdWHnE6P9SQzEQhqDOtbuugfMMDorP0aI2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:33:65:bc:c7:d6:14:ca:3a:5d:5c:1e:c8:cc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Oct 19 19:02:39 2025 GMT
Not After : Oct 20 19:02:39 2025 GMT
Subject: CN=ad5974cc540b6ed5b964487f129ac9470d002caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:b7:1a:96:e2:e6:dd:c5:6e:d7:be:8c:ef:
c1:7b:9f:30:c6:19:4e:25:3b:1d:7d:2a:21:d9:4e:
84:ce:21:44:0b:d0:6b:e1:bb:20:1f:42:b0:21:71:
2b:28:5a:67:3c:67:45:83:09:f2:f5:f6:31:66:8f:
36:4b:52:4b:57:05:b7:1f:36:00:54:f0:ea:72:c3:
b5:32:0d:c2:2d:31:c4:a5:6f:29:b7:8d:c3:99:88:
64:80:d4:9d:f3:53:8c:15:38:4a:60:7e:88:f4:4f:
12:58:f4:ea:f5:31:d9:57:41:18:b5:c4:f1:7c:b0:
a3:e7:93:db:f2:5c:b8:27:45:0d:5c:80:95:0f:98:
9f:9d:f4:1a:07:f2:ff:cd:a9:e3:2e:b6:ef:3a:18:
f0:92:e7:07:ab:26:67:5d:85:0f:1e:98:82:52:77:
9a:9d:5c:c7:37:52:62:3b:fc:f1:7f:b5:c1:ef:42:
4e:db:ef:62:2b:ee:73:b7:0c:47:4f:2c:33:61:19:
b9:4b:b4:78:ff:15:f6:fe:e1:a4:39:37:a1:f3:00:
08:0c:56:7b:49:6c:3e:2d:90:f3:38:2c:49:99:64:
ad:e1:c7:77:0d:39:e6:f5:e0:d9:ca:a9:ac:2f:00:
b9:e3:69:c9:a5:6e:29:e3:3e:2d:ed:e4:87:66:31:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:59:74:CC:54:0B:6E:D5:B9:64:48:7F:12:9A:C9:47:0D:00:2C:AF
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8d:1d:b9:61:75:37:ef:c4:78:03:58:d4:9c:56:dc:94:91:
c2:1b:38:83:2d:80:0b:87:b9:d7:1c:fd:3b:ee:01:9d:32:42:
54:00:cf:69:2d:db:8d:25:e9:d5:ad:67:89:a9:ce:af:4f:5e:
48:c3:36:68:88:39:e6:c6:3b:bf:61:5e:92:63:8f:38:6d:d2:
65:54:e5:30:e3:56:ee:df:50:ad:c4:9e:92:74:57:89:ed:b3:
ae:f0:0c:31:c9:a3:a9:78:28:6c:79:ab:12:3a:47:5f:3e:7b:
bf:12:61:a3:ee:b6:89:9a:a3:d0:45:52:37:17:9e:43:73:8c:
ab:98:59:d6:e8:b7:b7:5d:23:12:1a:43:8f:a8:5f:eb:39:a3:
36:21:a1:55:69:72:07:d2:24:5a:67:5f:1a:2e:a9:87:05:0b:
fe:26:50:a0:c7:77:dc:e7:a0:57:56:50:a2:19:c8:e6:f4:b7:
a1:d2:ec:8b:a1:82:9f:3e:66:44:94:8d:62:68:29:0e:ab:2c:
78:15:84:53:20:64:bc:42:96:51:7a:c3:41:89:ab:f2:74:63:
98:eb:fb:78:bd:4f:eb:2f:10:f4:9d:ad:a3:1e:4c:44:2c:47:
51:a1:c2:ec:73:b8:5e:65:ac:47:a9:0b:7a:4a:40:4a:c9:7a:
83:bf:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:33 2025 by rpki-client