
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File: PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier: /UNg8ptP4eYGRF2x/Bk1FztTyecvQl0jH3jl7Vndme4=
Subject key identifier: 42:1A:AB:2C:97:E9:4E:AC:EB:15:A6:C2:05:D5:38:03:A7:A9:F1:F8
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial: 0199FB4603F7FB194CD98D70923A2749F969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=)
2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: k5+6TKWawjUYQ3OlH9z7VxfCnagMcgQdPxBpyWyMhGM=)
3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=)
4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=)
5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:03:f7:fb:19:4c:d9:8d:70:92:3a:27:49:f9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=421aab2c97e94eaceb15a6c205d53803a7a9f1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:ff:a1:2c:41:13:63:e5:27:d5:a9:df:c9:
d1:31:4c:c9:06:ce:24:71:7d:c0:f6:ca:48:cd:fe:
6e:ee:ef:f3:aa:5b:9b:8d:4f:fd:6f:c8:9d:12:04:
ce:4e:29:dd:07:0d:21:0c:a0:f8:59:ce:f2:fd:9c:
6c:6b:5a:ff:7f:5b:dd:ec:d3:48:f1:66:01:14:dc:
10:d9:46:d5:1f:dc:bc:a8:61:6b:6f:63:8a:cf:25:
52:e7:cf:7d:1a:c4:a2:65:74:e8:65:8a:64:b8:5e:
d4:4a:82:f0:f6:69:2d:02:64:b1:f5:9d:93:a6:52:
99:6f:7c:c0:f9:60:19:db:da:0c:2f:47:d2:d0:67:
65:f7:d1:73:69:7d:33:d2:68:84:65:a8:ca:d3:58:
20:09:d6:0f:33:61:be:9e:14:d7:04:2a:61:5f:33:
57:f7:1f:73:f2:28:22:fb:5c:84:63:eb:32:33:78:
c2:47:14:02:a1:9d:36:2c:8f:d1:ad:44:67:ff:37:
f8:e2:39:c8:d4:9a:79:ce:ac:56:cc:13:ea:95:e6:
5b:cd:1d:1f:97:e2:8d:dc:e4:e9:54:8f:d2:0b:69:
e6:94:3d:64:80:df:cb:55:13:e6:85:f2:ca:d2:75:
f9:3f:90:ce:05:22:a2:97:3f:a2:15:04:47:80:3d:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1A:AB:2C:97:E9:4E:AC:EB:15:A6:C2:05:D5:38:03:A7:A9:F1:F8
X509v3 Authority Key Identifier:
keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:89:2f:aa:c4:eb:43:a6:21:65:f1:31:82:08:4f:91:2f:2f:
24:cf:3a:cd:02:5e:1c:c4:be:27:2d:0b:47:b9:63:99:f7:0b:
d8:7d:29:63:6b:7a:35:7c:c6:9a:3c:0a:79:d3:71:c4:71:f8:
71:4d:35:d1:05:03:cb:54:2d:9d:63:cf:24:a0:16:9d:f5:b3:
6f:39:9c:13:cb:f4:98:6b:35:f5:3d:0f:49:a1:ed:cd:1b:f7:
56:0a:5b:d8:73:34:8d:74:23:e9:1c:f8:e0:23:99:02:ed:4e:
3d:0d:f7:14:d8:0d:fe:1d:0a:08:fc:c0:90:fa:7f:00:4c:09:
41:03:04:51:14:11:c7:19:85:a0:d0:17:80:24:44:8a:e8:92:
b1:59:03:18:89:7c:6a:9b:c8:28:e7:1c:09:c2:a6:41:6a:c4:
bd:0b:b2:24:c3:d5:82:b5:b3:dc:72:92:e9:54:2f:98:38:ce:
bf:42:d4:1c:bb:1f:f3:e1:08:b3:d3:41:42:f4:4c:fa:1d:09:
fe:3f:72:29:5e:78:6a:e5:7e:70:77:c6:62:0d:52:4f:ab:7f:
11:9d:81:40:07:7e:26:e7:3c:56:8f:07:35:45:be:5d:bf:68:
b3:c2:ac:e0:ee:f4:aa:b9:49:8f:ca:9e:62:b7:95:12:b7:49:
90:b4:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:53 2025 by rpki-client