Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: JLwYGs97pIgXf395nNfgmZmvZavQrzPkpJtHS3AhcBY=
Subject key identifier: BF:B7:BC:F7:F2:79:53:9E:81:24:13:53:78:A2:7F:2F:4D:7A:D3:8D
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 0199FCC6994759D25B6615E68E0AFAD82E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: Is-TnbCqT0sZMmHzE0DOERlyuyA.roa (hash: ZwxuieDg5KwfHUePylCdnkHIJ18zptrPuU4i92UJi24=)
2: Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (hash: T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: EtWD6/kUVhK+jhVAnQo+PGfK/NogNSIFXmc6tL+9Rgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:99:47:59:d2:5b:66:15:e6:8e:0a:fa:d8:2e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=bfb7bcf7f279539e8124135378a27f2f4d7ad38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:12:d7:6e:2f:54:2f:59:07:a0:8d:63:55:
16:11:2c:04:d1:d2:30:52:66:21:26:b6:8e:7d:90:
0c:13:33:75:11:c6:71:66:02:f6:a8:01:7f:c1:d4:
95:f9:ce:62:6f:b5:4f:01:8c:70:54:e4:38:98:31:
9b:4f:2d:4a:0b:b8:9f:58:e1:aa:23:0b:47:9c:0c:
2e:55:92:f1:43:53:81:4c:cf:38:cd:dc:3c:51:17:
a2:60:29:e0:d6:fd:0e:c3:3f:d8:fc:b1:97:60:c2:
6b:21:c9:42:38:bc:b5:58:78:98:06:2b:36:ac:e7:
44:b6:3e:97:9b:c4:70:a2:ad:2a:10:95:70:f2:b1:
83:43:9f:9b:d9:20:fb:ab:4b:d8:35:9d:5d:52:98:
59:5f:d8:43:36:a8:bc:b2:a4:90:a9:ac:2b:9f:8b:
53:5a:38:3b:1b:72:0a:42:fb:77:93:92:c3:cd:4c:
d6:b2:1e:8b:a8:a1:a1:99:e2:7f:a3:38:3a:0e:22:
cc:01:54:72:53:a7:92:c3:85:5d:af:7a:72:43:62:
27:a3:10:7c:61:35:49:66:1e:d8:72:d0:42:ae:90:
bc:ae:79:5a:33:e6:6b:86:1c:f5:ac:2c:3c:1b:58:
2e:8a:37:b3:db:35:60:1e:66:47:c8:44:dc:19:05:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:BC:F7:F2:79:53:9E:81:24:13:53:78:A2:7F:2F:4D:7A:D3:8D
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fd:e8:8f:be:d5:6d:37:52:10:cc:2e:b9:3f:6b:b8:64:8f:
be:9c:57:d6:39:7c:34:84:41:9b:14:98:0c:54:29:bc:dd:cc:
d2:55:50:30:97:87:16:90:ee:8a:d3:24:37:2b:97:07:18:6c:
a1:23:01:2e:cb:1f:5b:14:0e:3c:2a:43:a5:cd:5d:7d:4d:47:
aa:71:23:80:f0:37:c7:01:93:ff:59:a9:be:8a:ec:ee:45:43:
3a:aa:18:d6:27:48:ee:f2:b4:0a:07:ed:11:33:13:f5:76:a7:
f8:ff:5e:d8:5c:8d:47:6c:ea:db:9a:90:2d:75:bc:6f:ed:2c:
c7:3a:e5:8d:f5:0b:7b:4f:8e:82:09:83:ae:65:40:2c:92:2c:
fe:96:3f:d5:28:3e:ad:bc:c1:e9:46:4c:0b:1a:22:55:36:64:
e9:fc:ba:ef:02:ca:4d:2b:65:65:13:76:dd:4d:4a:92:c1:98:
e6:af:0c:b3:b4:66:ad:95:c1:1c:4d:cf:93:3f:de:69:ea:ac:
36:a7:4d:c5:8e:39:3f:9f:fe:7e:63:b5:e4:8d:5a:ea:61:49:
59:62:07:30:37:10:49:39:8c:50:24:63:fb:9a:6d:7b:1a:04:
f8:7f:95:47:f1:b9:7f:cf:ab:25:5d:a7:65:93:b6:0a:38:dd:
db:9e:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:55 2025 by rpki-client