Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: q303S1+zbLsTr9yDCXiOgVoDv1/ZYz/p4Xc+ru9KkvU=
Subject key identifier: DC:44:59:9E:2E:FD:C8:94:3C:95:C6:CA:ED:AD:51:69:B3:26:4A:7B
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 0199FBEBD0A13965FEF693D37B31CBF7CE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 119E
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa (hash: AodjA/u0IZIHWzW0wUzupROWai2JCPHe4BHHea78Ms0=)
2: IVs_hi0L8DU-XvjpZ3j52FBoeuA.roa (hash: gjbii66qiZGzea5anGixtq9DuuHhboIpMcO6QPFsj6s=)
3: VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa (hash: g8P7wwNKLRxTvKsPwE4zpfRuDPifBy4qLKB2zlBcTlw=)
4: h5Sxz-4g29FV3kYMoX_wX3iFTqQ.roa (hash: MiZeUc7o+bnHAdooPcAB7y8KMpj0xgLMlX8Uuhc2f7E=)
5: m5QjthCyb83zFe-XzGZ1VPtryIE.roa (hash: idq0+QCfBZJuG2uqoWlXprOQsupzpFPhxR03Ji+VJ/A=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: oYkZSbsh+PfR0U9Q4fr/c3NQOZbCMPJKtCTOkRiTjGM=)
7: rwgU2mlTS06e7YPqA2lYPO26aP0.roa (hash: w9oJA8hR7uQfiHK53Tj7B18Tkd/AVTn4HnDtFZKJyRA=)
8: zduwkC5PQDOGNkAdIMyn-hz63Ys.roa (hash: dngQzoKRwxwQY6jw/yt5nYtfsqDVjR83fQraMN2FWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d0:a1:39:65:fe:f6:93:d3:7b:31:cb:f7:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=dc44599e2efdc8943c95c6caedad5169b3264a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:5f:01:f1:a3:c9:06:5c:34:11:48:7e:01:
5e:57:63:d0:c6:99:80:b4:62:dd:3a:15:59:cd:9e:
85:b3:52:cd:6c:ec:fd:f9:f0:22:d4:30:fc:9f:61:
f9:ae:74:a6:29:87:af:70:c6:a8:0f:44:be:06:af:
d4:62:0c:ef:ac:be:12:b2:ca:23:fe:40:b0:f1:c9:
48:5c:1d:b2:04:29:a9:c0:be:6a:16:f8:9b:ec:0c:
25:4c:e0:bd:90:a1:09:a3:4c:c3:ec:51:99:84:c1:
bb:aa:7f:b2:91:76:17:12:d1:98:ce:a7:89:a2:0e:
b3:c9:a9:92:e9:03:c1:5d:21:e3:65:46:fe:d8:f2:
12:2c:aa:81:14:e1:c4:a4:ed:32:37:49:74:ae:4f:
f6:48:ac:a6:85:e9:ee:d9:aa:9a:a1:06:4c:98:45:
24:2e:22:dc:12:a9:5f:d4:12:73:d1:15:0b:4b:5d:
b3:4d:d5:81:4d:72:fb:f1:4e:62:f1:b9:e6:c6:ea:
69:a6:6e:1d:83:0f:e6:74:dd:b2:22:33:15:0a:32:
c4:0a:3b:8f:21:56:81:79:f7:d8:8c:1e:d7:1d:9c:
73:5e:8f:55:51:37:f5:23:42:21:ec:f6:0f:8f:09:
81:69:3f:b8:d5:5e:6b:4b:3e:63:7d:a7:93:6e:4e:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:44:59:9E:2E:FD:C8:94:3C:95:C6:CA:ED:AD:51:69:B3:26:4A:7B
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4a:bf:15:f8:c5:30:c0:64:e7:cb:2f:b2:af:b9:b0:2b:3a:
74:b9:ff:cd:66:9c:56:3f:dd:6b:5a:8b:3a:70:3b:1d:db:13:
74:56:4d:4a:60:34:ed:da:3a:3e:b3:13:7a:a2:61:9c:78:70:
77:78:1f:f9:9c:6b:1f:8e:02:49:96:94:60:ac:70:30:7f:bd:
fe:f5:8f:23:b7:cd:ad:82:e7:cd:c6:16:d1:91:d6:0f:cb:25:
2a:3e:01:c0:40:a5:ae:08:5b:16:16:2b:8b:42:57:b8:02:23:
fe:12:f5:f6:5e:a6:44:6a:9f:5c:29:4e:65:db:ec:12:34:f5:
ba:4d:ea:85:a3:91:9a:97:36:b3:12:84:bb:2e:e1:a9:00:6b:
0e:18:c7:53:3c:ef:4d:a0:f1:5e:5a:0c:7a:32:cc:8b:9b:52:
b4:18:27:ad:af:0d:0a:46:7f:d6:5d:67:0e:24:3a:36:08:af:
8b:33:d6:0b:ad:6b:68:6d:d5:3e:99:54:97:11:aa:49:27:d6:
de:e1:6a:d8:c0:fd:95:35:6c:1f:3b:c6:af:18:11:a6:73:9a:
31:76:4d:77:92:1a:22:28:34:1f:f3:9f:a4:90:43:30:8d:21:
0a:2a:5f:7b:85:81:bc:5f:08:56:8e:44:e9:de:7c:f3:ae:40:
3f:a8:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:33 2025 by rpki-client