Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: jVKIpyD18gstT8wypyZcoTv65GcU4/0DDBgNa1Uvf5M=
Subject key identifier: 0A:34:58:12:4E:54:EA:AD:98:41:AE:58:29:09:29:93:4D:D8:09:AD
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 0199FB7CC54B1E9E2C46CB7B67798109AC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: 4n3nNWRkjLSmI9cQMFL161w7UbhpwtJ6nuzV8itsaFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c5:4b:1e:9e:2c:46:cb:7b:67:79:81:09:ac:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=0a3458124e54eaad9841ae58290929934dd809ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:fc:a1:7a:d7:85:41:44:05:3f:2c:af:75:
00:45:48:e4:25:bf:f9:b8:ec:a3:aa:6b:48:2e:b7:
f9:99:71:e3:36:38:df:3c:83:f6:6c:05:e2:cd:f0:
08:38:d7:e1:91:27:ec:4b:07:ff:1f:74:db:a7:24:
20:bf:cd:81:5c:1a:1d:a0:be:80:02:31:82:63:a4:
23:86:57:5c:f6:49:63:27:9f:53:2d:22:e5:31:cb:
3a:7a:8e:30:60:cd:ea:c4:51:de:f1:b5:98:4c:c9:
d9:83:7c:fa:08:4b:b7:a3:36:0c:8f:66:4c:a9:6a:
73:05:d2:cc:58:22:96:8d:41:01:22:fa:f1:7a:ec:
2b:c5:b0:b0:ab:2e:f2:91:16:41:41:73:6b:3b:15:
ca:0d:aa:e0:52:3c:29:c6:52:9b:82:99:5d:4b:5a:
97:96:df:3b:92:f1:46:9c:11:09:2a:ec:35:f9:64:
29:c3:a5:0c:1d:06:fc:83:8b:6c:04:b4:3f:7a:1c:
e9:27:f7:ba:8e:36:40:97:34:4a:d4:eb:5d:26:8d:
be:6e:a1:37:ff:29:fd:f0:4a:54:72:ed:88:77:03:
42:f7:a5:ff:a1:37:17:be:81:62:89:ec:b5:2a:67:
dd:cb:74:17:ca:00:f1:dc:0d:2d:cb:92:4f:95:7c:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:34:58:12:4E:54:EA:AD:98:41:AE:58:29:09:29:93:4D:D8:09:AD
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3f:5c:5e:68:45:ae:b7:b3:80:b6:86:54:70:75:25:44:04:
51:65:53:4f:bd:69:3a:fc:b9:f9:bc:04:c2:2b:b5:31:0a:fd:
a7:bb:2f:22:74:b7:98:4f:26:8a:64:32:fc:a8:76:ca:3d:d7:
28:67:a9:05:2a:b8:1b:4b:a1:82:fa:e1:3e:20:b6:d7:5c:e7:
2d:bc:c6:90:cf:59:5c:3d:28:c8:99:ea:d4:0d:c2:15:10:01:
57:65:02:fc:0d:9f:e4:2c:70:db:2f:6b:0d:a9:57:0f:94:88:
50:cc:5e:5a:8a:02:a7:39:82:4f:e0:b1:1d:86:23:5e:07:83:
6e:b2:18:af:3e:46:70:ec:74:88:f9:a6:c7:9c:ca:87:53:23:
f2:ea:c6:a8:52:9c:e0:fd:c8:45:c2:2a:33:b5:3b:c4:44:35:
e8:6a:8e:5a:33:c9:a4:ff:29:61:7c:64:45:a9:e1:05:ab:c8:
0e:6c:1f:1d:dd:9f:ea:2d:16:8f:9d:c1:e3:31:8a:b4:48:d7:
86:e8:6b:17:81:a1:20:51:b4:6b:5a:3e:06:0c:71:b3:bc:c2:
b8:ef:36:39:cf:b1:fb:9f:b1:00:10:2d:27:64:52:bd:70:39:
16:27:2a:9b:69:79:82:44:36:6d:1c:3b:28:92:92:7f:ac:7b:
ee:b1:b3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:26 2025 by rpki-client