Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: g1t7/zo7y76FPO4isS59zP0/K5/MB48aiyTR2jThsv4=
Subject key identifier: A0:24:83:B9:8E:36:84:2E:F4:F1:79:47:57:FE:70:5E:43:14:03:77
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 019A006BE7CD7EA52C9E58616A3D213E8D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 141C
Signing time: Mon 20 Oct 2025 07:01:02 +0000
Manifest this update: Mon 20 Oct 2025 07:01:02 +0000
Manifest next update: Tue 21 Oct 2025 07:01:02 +0000
Files and hashes: 1: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (hash: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=)
2: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: 2Lygok+ef/QbdkkI48YtdZBw6bu1LNLR/8avVtgXMa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:e7:cd:7e:a5:2c:9e:58:61:6a:3d:21:3e:8d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Oct 20 07:01:02 2025 GMT
Not After : Oct 21 07:01:02 2025 GMT
Subject: CN=a02483b98e36842ef4f1794757fe705e43140377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:29:bd:33:88:42:35:2e:d7:8c:18:47:ff:
94:71:a4:d4:ab:4d:50:7e:45:65:d9:11:12:e4:8e:
3d:b1:bf:08:d3:eb:be:a9:d8:32:de:e5:e8:4f:06:
f0:44:0b:b4:03:9a:a0:08:d4:0b:73:69:ea:f9:81:
8a:b4:13:97:58:45:e2:47:4b:12:4d:f4:90:a8:ba:
0b:46:3c:03:2a:1e:82:01:71:68:ca:ce:be:91:79:
40:f1:bb:5d:78:ab:ee:6c:c4:7e:01:27:80:40:69:
ca:52:39:fe:43:20:2d:be:b4:95:1e:6b:31:0d:69:
71:d0:7c:14:e8:22:81:27:44:5f:88:af:1a:2b:6a:
20:cb:d4:11:93:52:ac:17:a6:ef:20:4b:11:0c:0d:
05:88:a4:c2:61:b6:f5:a7:28:6a:20:4f:22:96:49:
1a:11:9a:66:c2:c2:9b:24:1c:d0:be:77:45:d2:5c:
5b:65:3c:7d:ad:73:29:b4:ef:ec:cf:42:27:a2:21:
d4:b4:d4:b6:37:17:b6:64:87:e6:ce:95:e2:dc:6b:
7c:4a:5a:31:ed:fa:c8:28:08:f2:63:4d:78:55:f9:
94:1e:ae:b3:09:e7:69:36:23:87:a0:9e:f0:7e:b7:
c4:ea:94:33:c2:bb:fc:3a:e5:53:c5:be:f8:9a:b5:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:24:83:B9:8E:36:84:2E:F4:F1:79:47:57:FE:70:5E:43:14:03:77
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:96:bb:96:93:96:4e:b8:c7:5a:74:7b:1c:17:a7:fa:46:4f:
ee:ad:c8:9d:10:73:66:a9:13:14:98:00:90:03:65:2f:3f:36:
e9:6c:c4:83:95:29:54:ae:c1:76:03:d9:db:4d:2e:9d:68:e0:
11:8d:90:75:3a:fb:08:24:88:1c:d2:67:c6:13:40:59:d8:eb:
4f:98:c3:8f:65:93:99:63:93:59:58:42:bd:63:57:bf:a9:bd:
d9:fd:2e:c6:4f:fa:ef:bd:c1:71:c5:65:2c:0c:b9:49:a2:c2:
81:06:f5:a8:60:e8:33:3f:b9:04:42:76:2d:97:91:fa:6f:11:
f3:84:a8:f9:73:0e:82:1e:61:85:03:75:1c:f7:99:5a:3a:a2:
2d:89:83:e5:55:de:9f:ee:df:60:be:ef:b9:4b:47:5c:5e:26:
d5:06:25:7e:7e:37:02:0d:ab:d3:00:37:13:fe:e5:34:15:ca:
4a:d9:3a:8e:3b:2d:15:09:fc:84:fc:80:f2:8f:51:dd:6f:ed:
af:61:8d:e1:da:22:39:53:b5:18:d6:09:ef:b6:f1:d4:41:87:
6c:a6:cf:0a:c3:81:46:93:2b:94:4e:a8:55:73:6c:ba:0a:f8:
4a:64:78:35:c2:c5:2e:39:fe:25:94:ef:a7:32:7f:76:00:7c:
c3:05:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:12 2025 by rpki-client