Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json)
Hash identifier: AeDAUKrTLMbwGXzfcO3yMJ67mE2g54CyLH0TYG85b7Q=
Subject key identifier: BA:51:D7:59:29:D2:D1:52:3B:3E:CC:1A:33:7D:26:10:DD:D5:D6:B5
Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Certificate serial: 0199FC21C55789CD3BBE021FF13C10C05A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
Manifest number: 6D
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: EE9b_IGVAxMVGIMQVaokUb3eWtk.roa (hash: v5264EvTSTGFV4n/KSp3fqpJgAmsmpyri2CC0Ruz9ng=)
2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: o84VtwrCkRXZ+7PujrfHc6PWy/5PNuZcZ798yaseVB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c5:57:89:cd:3b:be:02:1f:f1:3c:10:c0:5a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=ba51d75929d2d1523b3ecc1a337d2610ddd5d6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:01:3e:68:fc:c3:6d:43:f3:cd:24:d5:f0:
6e:e0:0d:00:35:06:2b:cc:1f:01:0d:16:03:0c:d1:
fa:c2:3e:f9:4d:95:63:43:e3:ca:be:7f:af:09:c3:
e5:eb:e2:b5:3b:c1:3a:28:33:f9:1e:03:41:51:6e:
db:50:88:53:07:eb:fa:10:15:c0:99:07:52:b3:43:
39:bf:f0:58:1d:51:1a:3c:9b:a3:e1:72:3b:d5:80:
c4:a8:49:20:5d:22:62:f3:db:cf:f7:95:f3:b7:59:
b5:d2:d3:41:49:76:c3:2e:41:7f:a5:5b:84:b3:e3:
06:c2:89:c8:af:5b:57:c5:02:52:96:95:d2:34:42:
f3:1f:b2:3e:ba:cf:d5:6b:4b:ae:b5:70:cd:7e:73:
6f:93:e7:3b:79:61:b2:30:15:12:ef:94:1a:f1:d3:
ab:fb:31:60:bb:52:bf:b4:4f:69:0b:90:41:96:d3:
29:29:0e:d3:d5:d1:bf:aa:de:5d:59:b0:bb:9e:2f:
19:9a:2b:0f:52:f5:26:d1:df:63:f3:b4:7f:c1:1b:
a0:79:b8:e2:97:d4:e2:42:18:e7:e7:1e:91:78:89:
c2:ff:4b:47:4b:ed:3d:ef:8f:2b:e7:27:d5:8b:2f:
70:d3:a3:fe:03:17:b9:b4:f1:c2:35:bf:e1:c6:98:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:51:D7:59:29:D2:D1:52:3B:3E:CC:1A:33:7D:26:10:DD:D5:D6:B5
X509v3 Authority Key Identifier:
keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:02:b0:63:fa:d7:0a:2c:f6:64:1d:e7:49:b4:f8:7e:6b:75:
b9:c1:19:22:3e:13:f3:20:9e:31:84:35:8f:76:86:92:4a:f2:
08:b1:c5:4f:36:c9:88:42:7e:36:55:59:b4:d4:63:be:f8:5e:
29:85:4d:40:d2:db:4e:67:a7:f7:1e:07:91:30:9a:06:7c:d2:
13:92:e2:a7:08:2d:89:96:4e:58:5b:6d:5b:1c:93:b4:9f:1e:
06:35:ba:20:32:f9:13:22:3a:31:d9:8a:2c:52:eb:52:3f:c7:
81:2c:95:1d:c0:f0:3e:c3:3b:cc:4e:68:a5:37:dc:23:c2:c1:
5e:87:c4:f1:71:72:99:bc:88:c8:b9:4d:ef:a7:82:27:fc:84:
b2:a1:b6:64:6d:55:15:38:94:fb:91:fe:ed:46:be:dc:89:3b:
c9:43:67:94:c3:24:89:e2:06:bb:63:59:0a:14:76:05:43:dc:
5d:96:b5:81:9f:b6:b3:71:2a:a6:fe:3b:ef:92:eb:47:35:e8:
1c:2a:92:4f:47:15:82:51:5e:26:69:a9:66:e0:01:55:39:91:
c2:c8:e5:5f:12:59:9e:69:6f:88:af:21:46:63:ea:00:54:20:
00:fd:69:26:ba:7e:ef:7e:2e:1d:51:9c:53:0f:50:c7:19:e8:
2a:46:7e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:00 2025 by rpki-client