Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: ulFEUTflBomSqBCCjyu6vKQB5orjnb60twWeoxauYUM=
Subject key identifier: 53:66:CE:1B:EF:75:21:F0:DF:8A:FC:7E:E0:9B:CB:18:E8:E7:51:ED
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 0199FBEBB0F35B1475B1CF208916F65CB368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 0343
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: KWPAsF0vFOD6kPsFU3LMV-L0lSI.roa (hash: VQvFUbsDDfVrBdoP9kicGC0pG5uJaNDDod3tQ4qnm70=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: r/G0433VFl0mxmwQIcpzsFg5K7WUZ1iOiyeVf1rM7wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b0:f3:5b:14:75:b1:cf:20:89:16:f6:5c:b3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=5366ce1bef7521f0df8afc7ee09bcb18e8e751ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:6f:a0:ec:3c:3f:f0:10:83:7d:1d:21:a9:
2e:e8:8a:69:29:2d:11:ba:dc:cd:8c:7f:8e:c8:2a:
1d:c3:35:87:96:33:ee:13:8d:0a:d5:66:ad:94:7d:
f0:8b:ff:02:96:87:77:ba:62:52:fc:ce:7f:22:d8:
4e:75:b6:a7:4a:d8:c9:e9:1c:29:a2:21:3a:55:bf:
42:da:af:fe:10:86:cf:91:ad:df:3d:a5:44:2c:6e:
cd:6e:0b:5c:da:4b:be:aa:7f:c8:ca:80:da:33:58:
3b:ad:53:4b:20:e0:9c:1c:9a:f5:db:0b:dc:cf:19:
37:02:f0:ac:31:7e:d8:3c:35:07:8a:ce:77:ce:9a:
d9:0b:1a:a0:cb:bd:a9:09:35:be:a3:e0:4d:1e:87:
67:df:35:86:22:7a:a9:67:2d:06:2a:e7:59:36:bf:
51:da:04:24:76:7e:45:93:6b:26:d6:82:43:5d:3f:
cc:20:53:ac:93:fc:84:bb:9a:cc:0d:73:d4:84:5d:
87:1d:4c:6c:81:69:c2:65:7c:7c:33:1b:a0:25:d9:
5e:29:22:6e:e8:15:ff:e6:1e:81:dc:49:7c:e3:d8:
a7:b5:e6:49:d5:cb:95:85:72:cc:15:db:ed:b7:50:
51:a5:ab:17:0b:05:c7:ea:21:01:d4:dd:22:71:df:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:66:CE:1B:EF:75:21:F0:DF:8A:FC:7E:E0:9B:CB:18:E8:E7:51:ED
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:30:4f:cf:c0:bb:2c:d2:0c:c2:d8:47:92:2b:a7:25:06:ee:
62:f9:1f:44:60:e6:94:7c:02:b5:57:70:78:46:98:81:cb:ca:
1a:1b:f6:6f:61:3e:aa:7b:64:ca:be:29:ea:32:89:42:85:ae:
c9:e4:1e:6e:1e:d7:e7:84:80:50:49:31:61:60:ff:0a:04:0d:
82:94:7b:69:f6:29:6f:2d:ed:e8:5a:63:be:3a:47:6b:61:5e:
fa:47:25:e2:4c:31:c4:a0:30:de:fd:5b:51:19:6e:07:7c:ce:
bf:f2:13:e4:f2:f5:19:4d:46:c4:69:fc:26:d3:11:66:30:78:
dc:59:44:3f:97:8d:e9:58:75:e7:45:71:97:fd:99:ff:5d:e8:
e6:77:b4:9c:3d:db:dd:63:5e:b3:1f:e4:9f:26:89:6b:30:57:
9b:b6:fd:d3:df:25:5c:b0:b1:8a:f4:87:b3:bb:66:d5:99:f6:
ab:18:cb:5f:b8:1c:36:25:9c:e4:b6:fa:4b:37:24:0f:82:94:
75:90:6b:f9:22:f7:44:8d:ac:d3:af:a7:f8:93:b7:e3:e7:58:
c3:95:d9:db:78:78:b0:4d:8d:a6:f0:0c:b7:10:ff:b8:55:36:
81:57:99:30:ce:b0:84:d5:5c:a8:67:31:4c:02:39:86:36:20:
46:78:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:43 2025 by rpki-client