Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File: PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier: E67TyUVwUmbs9faQnfv47gMieim9RA/mL4x3Zd0gURs=
Subject key identifier: 30:BB:05:7B:5D:8D:9B:4E:88:55:F2:7E:B8:79:04:F6:83:AE:CB:E8
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 0199FCC6142EDD80E27F1717BB21330AE032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number: 0AEA
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: GQiJ6A3TQvBKFhpquOxaF9eGGSM.roa (hash: 6erLpsgMI9bO4qfOCcfgJUCMEDYhGzxWY2AMUbeslCE=)
2: IHvKxmr3uwpJKwkutA9nKfip_F8.roa (hash: E257yWlPmy47lDQ49F17JotJ+RKeZHzV+AfLNrTNJCw=)
3: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: DoTJx6kSUbGWc3XvaXlOFK4YtsKqGoW1Rx/TMoTh7xk=)
4: pqLRP6br3Tf8MSpYzZpv7JQJdvI.roa (hash: t46mDE1wE8ruzgJ1jDR113WnhduQHovpLeyn+ltLQ0w=)
5: sS3umUajXXmqMBA_9lX5Ye0iJuQ.roa (hash: IM/xG6YgVa2blydnHEIN0rcU5aCmvFCbaiZgSErPPdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:14:2e:dd:80:e2:7f:17:17:bb:21:33:0a:e0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=30bb057b5d8d9b4e8855f27eb87904f683aecbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c5:2c:99:65:4b:b0:47:ba:b0:b8:ac:39:69:
7a:b7:cb:2c:06:4a:49:21:b8:3c:d1:99:09:2d:39:
51:db:42:4f:50:e1:b6:31:94:99:c0:ec:43:4d:07:
4c:cc:08:d5:19:dc:31:dc:38:60:f5:8b:0c:98:30:
3a:7f:0a:f4:ae:e6:44:58:2a:ce:d0:c9:9f:54:2f:
ce:b8:02:37:bd:30:76:1a:e4:80:d3:54:74:db:0f:
75:cd:18:6e:e4:81:52:3c:c1:a7:c6:b2:9e:6c:c7:
7c:c8:43:22:dc:17:f6:1a:75:bc:26:33:68:cc:03:
b5:12:6c:1d:c0:c9:93:dc:5b:8f:31:26:ef:ce:18:
6b:c5:d2:c3:47:08:06:bb:80:b6:90:6e:f9:29:2f:
9d:67:83:8b:b5:fa:1e:a8:f3:e6:9e:e8:4c:b8:63:
18:62:06:90:97:05:ab:ca:f2:10:7b:81:cb:ef:27:
70:47:34:db:70:b0:0f:bf:47:dd:cb:a2:83:41:87:
bb:e6:6e:bb:28:d2:fb:a4:54:74:c8:ee:dd:63:c1:
d8:4b:f7:70:28:b7:a1:e2:c9:c3:b2:58:79:20:e4:
65:66:60:dc:04:2f:eb:71:00:74:fc:0e:51:c6:a9:
6a:30:28:06:60:d7:bf:55:15:6e:85:ba:b4:c1:10:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BB:05:7B:5D:8D:9B:4E:88:55:F2:7E:B8:79:04:F6:83:AE:CB:E8
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5a:1b:b3:7e:4c:c7:ff:f0:3f:25:3e:17:12:e2:fd:72:08:
83:91:b4:f8:02:e6:72:81:7e:68:98:bb:42:b9:f1:73:be:28:
a7:e1:0c:e4:aa:16:b1:13:8b:46:c8:30:a5:df:d9:87:35:d1:
5a:43:26:da:dd:b6:f4:69:ae:83:3e:76:bb:d0:7b:bd:68:43:
e5:30:5e:f2:8c:d5:aa:5d:38:5f:fb:21:4d:d3:1e:c9:81:43:
21:64:b7:7a:ee:a0:a2:7c:4c:db:da:f2:db:ea:2b:47:a7:fa:
7a:a9:56:32:e2:92:12:77:22:ed:67:9f:18:46:f1:1e:16:4f:
35:5f:2c:be:b8:ef:84:ba:df:1e:de:19:98:4d:4f:cf:dd:d8:
9b:af:d6:23:77:3e:4f:7f:33:35:1c:f4:13:dd:7c:d1:73:8f:
07:6d:96:da:4d:6d:67:cb:a2:99:de:e3:85:3e:90:d4:f4:6c:
b4:64:f1:a3:74:52:70:22:17:8a:a6:7c:cc:48:ae:dd:b6:9b:
28:81:be:32:a4:58:d4:78:a6:6a:9e:4f:97:71:b2:ef:7f:c8:
d4:06:8e:c0:8e:62:dd:53:d6:69:5e:c0:2e:9a:3c:51:b9:79:
1a:08:d3:4f:22:f4:46:17:b5:d7:9d:cc:c9:a8:8b:55:c3:7f:
31:db:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:49 2025 by rpki-client