Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
File: pnYhghhEiOf3hxIqcYCZfOjpDUw.mft (raw, json)
Hash identifier: axweDW4vZge068VvL9/mP3QZaPqtBPp5X5Ldig5i/i0=
Subject key identifier: 69:49:75:3C:E2:8E:27:EE:F8:F1:64:0F:FE:34:8E:3A:4E:87:36:7D
Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
Certificate issuer: /CN=a6762182184488e7f787122a7180997ce8e90d4c
Certificate serial: 0199FB7C8E3A1DDE07FB0D7A8B752A73F9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
Manifest number: 03A7
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: pnYhghhEiOf3hxIqcYCZfOjpDUw.crl (hash: 4ScRIg6GZymrf1V+Uad9FAXpwyRnp0h91R/V8/ZdlZg=)
2: yNyV4cceOnlRqYhPeAllARW73Jw.roa (hash: 8x/01ij81KHBd33TvjxnJ5OVDsgBIBKqbtRkLV2shYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8e:3a:1d:de:07:fb:0d:7a:8b:75:2a:73:f9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=6949753ce28e27eef8f1640ffe348e3a4e87367d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:07:8c:2a:e2:f1:93:a9:7a:b5:c1:07:95:
a3:83:12:da:99:78:f7:ec:fc:9d:c3:ec:d8:b1:94:
da:95:ef:ad:0c:50:3a:57:38:a6:ff:e1:56:ce:3a:
e4:f4:0f:47:80:d5:7c:a2:7f:af:6c:78:34:7c:9d:
af:87:a6:72:e7:9b:79:ee:9d:29:97:6b:0b:d0:b0:
69:33:59:e4:73:89:af:c3:ee:c8:6c:17:5a:7d:46:
23:a4:af:3f:47:7f:9c:5f:40:10:85:a6:34:9b:ad:
ac:56:d4:91:fc:0f:08:11:9e:1e:89:d0:37:f8:3a:
33:7e:ac:79:04:74:08:dd:79:ee:0f:b1:73:14:4c:
da:39:8c:92:aa:bc:df:ec:8e:2b:19:b5:49:39:7b:
25:7c:54:0e:3c:1d:73:6c:34:9c:11:4f:61:51:e8:
5d:7c:e4:d9:03:9d:59:3c:2d:19:92:aa:b5:89:f5:
d7:69:df:db:a6:1b:e5:65:1e:ac:9b:99:66:ee:8a:
d0:7b:65:2b:9d:6d:6e:aa:35:7d:82:81:d8:ed:4d:
75:cf:72:44:73:4e:08:ef:42:22:20:ae:33:2e:d9:
18:35:36:d8:8b:93:a1:d4:a6:bb:ae:88:6a:71:f1:
7d:ce:f8:79:2e:21:9e:c3:7c:fb:94:19:be:c3:57:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:49:75:3C:E2:8E:27:EE:F8:F1:64:0F:FE:34:8E:3A:4E:87:36:7D
X509v3 Authority Key Identifier:
keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:40:42:38:27:de:9d:19:ab:57:2a:6d:1a:90:72:49:c2:62:
10:6d:3a:b3:f0:38:cb:c1:ec:9d:bf:dd:b9:7c:53:55:f5:46:
91:26:5f:7b:4c:9c:4e:69:c2:e3:e5:0a:4f:23:ac:c8:f3:7a:
54:ad:61:cd:df:9a:5d:44:7b:76:d6:63:73:72:92:a6:eb:bd:
e8:a0:11:0a:41:37:5e:52:7a:3f:ff:84:cb:0e:49:01:d4:42:
b3:87:e4:59:4c:ce:db:c8:fe:5b:0e:30:78:30:40:d9:91:bc:
9a:11:94:24:d6:c3:c9:15:ec:f7:25:b1:e0:42:17:77:91:15:
5b:40:f4:f6:29:10:42:e6:70:6e:36:60:b6:6a:29:17:04:ce:
d0:50:66:a0:e3:aa:b8:85:a4:50:c2:eb:88:ab:44:0b:1d:b4:
6b:65:f1:ba:14:9f:ef:a9:b5:f3:2a:16:69:6e:86:a8:d8:0c:
5b:50:a4:d5:a8:6b:d4:d5:44:cf:f3:6a:4b:18:f7:c9:09:11:
76:66:f6:ef:f5:8c:89:10:b1:92:59:37:f2:bb:a1:46:4d:d1:
b1:ef:b2:43:98:bc:c9:98:7f:67:20:25:4b:6e:a8:1c:28:2c:
07:7a:05:3c:14:ca:37:f5:5a:90:f8:54:75:ff:e7:bb:05:a3:
32:53:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:42 2025 by rpki-client