Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: J4BlArRrMut6Cp3GuuQRy7st6NEoEWOvK7r3MmiVB5g=
Subject key identifier: F7:67:42:F6:B3:31:3B:85:F0:C6:A5:89:8D:AE:A1:E7:D4:13:C5:42
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 0199FB0F4AAEF59862E080C4D666247B6197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 160F
Signing time: Sun 19 Oct 2025 06:01:47 +0000
Manifest this update: Sun 19 Oct 2025 06:01:47 +0000
Manifest next update: Mon 20 Oct 2025 06:01:47 +0000
Files and hashes: 1: 09rZaDf9P6R4diZdTpqbdJFmS5g.roa (hash: nJaLySku8ZYvCwVFCoV24PH4wOMxHH06lLCXG71Fdv0=)
2: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
3: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
4: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=)
5: OSXtgZFTRCqapZbj1Rss-9P6qbI.roa (hash: AUmjKUojOqL9JzPQrWExZ3cDw/gVJywbQJ3W19HFEWU=)
6: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: IJHrNtjRMstFPHqulwzIsCFNH5/2No7Xoya/cM4xR04=)
7: _9T_S-kr42TO8YpZQ1p1cNkCs8k.roa (hash: DCwl+cJRNegCixrl6T1943uL08w3GonOBX/1cFtnPHo=)
8: pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (hash: uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:4a:ae:f5:98:62:e0:80:c4:d6:66:24:7b:61:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Oct 19 06:01:47 2025 GMT
Not After : Oct 20 06:01:47 2025 GMT
Subject: CN=f76742f6b3313b85f0c6a5898daea1e7d413c542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7c:59:88:c4:83:18:aa:d1:37:d8:d4:53:01:
71:82:7a:eb:8f:49:6f:be:ab:d3:d5:af:6a:d7:cf:
81:10:93:4e:1a:ee:ce:e7:77:c4:62:16:54:8e:58:
a1:65:6a:95:d6:6a:21:5c:ec:5a:8f:49:19:bc:ec:
21:1e:b6:00:12:f2:ca:03:5c:af:dc:dd:9a:fe:9f:
05:51:da:a2:3c:9a:60:98:1f:c7:85:e9:e9:14:97:
84:27:54:7f:4e:cb:43:f7:d2:76:c2:a4:53:e7:80:
f7:fe:4b:e9:b9:21:28:5d:f2:47:35:fe:7f:d5:e8:
44:05:b2:c0:be:6d:38:c8:58:6e:ee:f6:17:a7:32:
79:86:c7:94:c7:2a:6d:01:dc:bd:cc:e6:3c:58:00:
da:ca:bd:f0:0f:42:a9:81:c0:df:fb:6c:57:ca:db:
91:ab:e7:0c:df:f1:b9:08:2c:7a:7e:44:e2:12:df:
09:da:d8:37:9e:52:f7:e7:6a:6a:a5:e3:bc:d5:65:
43:99:9a:2b:d7:fd:a7:0c:c8:fb:3e:a5:df:9e:08:
62:5a:07:0f:bc:62:9d:3f:e1:d3:26:47:9d:2f:a0:
d7:71:0b:b6:59:81:a1:d3:22:17:60:cd:32:4d:90:
b7:34:1e:2f:d6:eb:14:22:82:1e:78:d3:fd:76:f4:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:67:42:F6:B3:31:3B:85:F0:C6:A5:89:8D:AE:A1:E7:D4:13:C5:42
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d4:fa:20:86:cd:43:16:6e:d4:94:0d:e6:09:00:fa:9b:9d:
37:ac:12:e1:ae:a6:ef:8f:37:ef:82:87:82:e6:83:e8:cf:c0:
c0:be:18:c7:d2:0a:14:4f:51:31:4d:8c:84:92:13:36:53:70:
46:e9:fa:17:86:23:67:88:18:5e:61:e8:5d:9d:be:c4:87:e5:
75:a1:aa:83:6c:78:7c:23:7f:0b:72:4f:f9:c5:d9:d3:31:e0:
46:99:3d:6e:52:41:34:52:e5:ab:43:a5:e2:e7:5b:91:13:a5:
0b:8f:c8:ce:83:f8:44:00:7a:26:e3:85:0f:dd:ca:c2:d9:80:
55:3d:c0:37:4f:05:92:87:43:90:bf:67:34:7c:80:f3:73:ef:
99:c8:57:c1:a7:5e:98:96:5a:ed:95:82:02:36:4f:8c:29:8a:
89:a5:a3:26:8a:33:c2:9a:33:57:7c:a4:27:0b:ca:b5:f5:94:
a9:83:f5:99:d2:72:fa:9a:a9:20:2c:c7:3f:52:9a:85:ef:a0:
41:03:71:4e:62:3d:be:c0:54:6e:47:3b:e3:a1:04:18:c7:be:
c3:1f:59:1f:10:fe:96:49:94:0f:d3:a7:bc:74:ff:42:8f:c6:
5e:51:e3:9b:1f:2b:82:16:53:9d:cb:40:cf:29:49:f1:0e:2f:
2f:70:8d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:08 2025 by rpki-client