Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: fvnRRa/HBozIuxb89It4a2YFiWrzgNzpn5c3a0+F0Y8=
Subject key identifier: 33:0B:3F:21:5C:F0:96:4D:11:F3:7C:03:71:76:12:DB:66:78:ED:50
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 019A01B5216E47E8E2D176DC8EEB7B46619D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 140C
Signing time: Mon 20 Oct 2025 13:00:38 +0000
Manifest this update: Mon 20 Oct 2025 13:00:38 +0000
Manifest next update: Tue 21 Oct 2025 13:00:38 +0000
Files and hashes: 1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: zK2184vlBqNo1brDpYcygcIXL8QpEzjxrF0SD27NEjg=)
2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:21:6e:47:e8:e2:d1:76:dc:8e:eb:7b:46:61:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Oct 21 13:00:38 2025 GMT
Subject: CN=330b3f215cf0964d11f37c03717612db6678ed50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:a1:dc:4d:69:d9:cc:df:62:91:08:c8:ed:
6d:cd:5a:f3:3b:35:c9:e2:f6:9d:f8:f8:b8:f3:dc:
0c:ab:c6:d3:d5:4a:a0:60:b1:07:c0:55:a2:ba:f7:
1f:a2:84:4b:45:28:09:1a:95:d5:d6:04:42:93:2b:
e7:8b:93:6b:c9:94:39:03:c2:ef:e6:21:f4:11:2c:
ab:f8:9d:22:d3:cb:b4:3b:68:d7:4a:e6:8e:b8:6a:
ee:c7:db:bb:cd:99:4c:ad:91:34:78:41:ca:23:4b:
f0:26:cc:01:1d:09:45:0b:e0:0e:98:3c:da:76:60:
99:82:26:79:83:ca:34:0f:52:40:c7:56:f7:11:9c:
f4:c1:91:57:5d:16:9f:20:bc:13:47:3f:d7:f6:2a:
1f:e0:d0:68:0c:92:32:5f:5b:db:61:d0:86:3e:a1:
59:5a:49:8e:62:a9:43:3e:2c:34:66:fb:95:ad:0b:
14:c5:18:9f:c6:2b:e6:24:1b:73:d9:49:8a:d8:f5:
c2:7a:c5:26:17:62:70:ef:8c:2c:27:3f:57:1a:fb:
10:b9:83:70:97:24:a0:66:2a:99:f3:5f:eb:97:99:
4c:b5:5d:30:68:c9:ef:97:84:82:ef:a3:97:f3:62:
bf:1c:9e:b5:1b:a3:80:da:62:10:5f:32:3d:92:c4:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0B:3F:21:5C:F0:96:4D:11:F3:7C:03:71:76:12:DB:66:78:ED:50
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:70:76:c6:1d:69:3f:a6:ca:a3:b6:4e:2d:a3:11:ba:68:4c:
70:26:c7:f9:c6:05:dc:3c:4c:1d:cd:a7:5d:0a:1d:c4:41:78:
77:f4:cd:7e:e7:73:c2:0e:9c:29:d2:6e:2f:40:96:6d:80:fe:
8b:72:d0:72:be:ae:b7:8b:44:5c:e4:41:21:0d:aa:98:17:5f:
c7:1f:ef:ef:ff:04:b1:e2:48:53:15:d9:07:f8:ec:41:d8:ac:
a1:f3:c8:48:ca:b0:6d:f6:0b:34:f3:60:6e:1b:bf:12:a3:ba:
0d:c3:c1:23:3e:43:6b:05:d6:ef:43:b6:ce:9a:d9:ec:f0:e2:
ac:17:cf:4f:29:a1:e2:e2:85:a1:6c:26:bc:e3:ee:13:e3:7d:
02:da:96:00:c1:25:d6:0d:19:6e:43:63:29:93:b3:62:be:76:
34:a9:c4:51:2f:ce:45:77:d1:85:7a:78:be:a8:f1:06:91:21:
5f:08:a3:c0:ff:1f:c9:50:2b:b1:e9:ae:a2:9f:d6:09:df:78:
47:89:07:72:68:1a:6c:01:86:dc:9f:f3:74:42:98:93:6a:81:
d9:ad:51:78:74:f0:c3:4c:7d:6a:6c:92:b4:71:22:ae:da:d4:
f7:db:0c:01:46:8c:3a:26:f4:da:fe:5f:de:0a:46:c3:b9:d7:
31:ad:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:40 2025 by rpki-client