Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: Wg0Mix4oJ+fTcjHobe5QjYjxW+Qz5AKM7VopnW1qxWc=
Subject key identifier: 16:16:43:C0:AC:DF:9A:F4:12:88:9A:9B:BA:B4:57:CA:33:9D:26:35
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 0199FC58C755091B32B63E793F4F85139AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 0898
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: BJQKiA6wj4n/RDQYy6DTuWUCacALAMAPKCGp4Er1pQI=)
2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c7:55:09:1b:32:b6:3e:79:3f:4f:85:13:9a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=161643c0acdf9af412889a9bbab457ca339d2635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:90:9e:78:3c:3a:22:df:b1:06:7a:d1:70:
fb:4b:48:2a:d7:6b:d3:d4:a9:94:32:36:60:86:57:
cf:73:ca:d2:bb:89:54:ca:47:83:40:fe:ea:8d:3f:
2c:6d:f6:5f:56:c4:95:3e:08:ba:8e:e9:be:81:ea:
b1:74:c8:e7:d7:d5:a4:b6:5f:d8:63:3d:3c:4a:f4:
83:da:3f:82:22:49:0d:f7:3f:09:40:e2:86:04:78:
bd:46:ad:09:38:96:e3:51:44:42:10:d7:3e:99:ba:
50:4c:db:01:14:ad:86:fb:3b:4f:34:9f:cb:3e:0f:
e5:ff:e0:8a:b0:87:e2:c1:2f:54:8f:06:6c:50:c4:
62:27:05:04:3e:79:42:ec:2b:2f:d0:5b:50:d7:5d:
b9:a7:6b:ab:e3:84:0e:73:66:14:cb:ce:d1:d3:c3:
ea:83:67:6d:06:44:91:f1:e0:07:95:d2:99:5d:c4:
7a:96:f0:03:fd:2a:53:18:d1:ae:fc:1f:39:84:9c:
73:2e:61:17:4c:33:01:2f:36:65:31:50:e8:ae:df:
58:25:48:b0:7a:da:a1:a1:03:6d:af:2e:d1:31:f3:
e8:42:dd:87:3d:09:f9:5c:c3:34:e5:1a:0f:5f:b0:
dd:c9:4a:10:d5:62:3f:cf:6b:a9:39:c5:8e:17:a7:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:43:C0:AC:DF:9A:F4:12:88:9A:9B:BA:B4:57:CA:33:9D:26:35
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:af:ee:2b:83:0c:74:63:a8:63:7c:9b:81:7e:99:35:fa:e4:
27:da:d0:55:6a:4b:3b:f9:a7:57:b4:bf:f2:18:be:4f:45:a4:
14:ab:9a:f0:63:d7:38:c9:d6:d3:63:4f:63:44:01:30:81:51:
7b:07:3c:48:6a:74:01:b4:90:2d:b2:4c:5d:0a:e2:99:ff:92:
cb:32:ad:b1:c7:15:a1:3f:1c:f3:d5:46:a1:7b:85:5c:75:a7:
63:e4:bf:89:77:96:d0:0c:e8:d7:a0:53:9b:14:a8:0e:41:6a:
54:a5:75:c7:87:bb:93:9f:5f:2d:33:c0:1c:c3:05:d0:30:19:
0d:db:18:0c:f0:0e:50:a6:64:e2:d0:cb:2c:d5:67:88:17:2a:
e7:77:e3:b4:54:c8:f0:9c:22:ea:ed:3d:db:36:02:c3:f0:b9:
91:9f:29:46:30:9c:6e:03:b8:4c:84:2b:b1:92:99:b2:6c:95:
69:76:92:fa:8c:49:17:88:d0:b3:82:81:a8:68:2e:69:71:1f:
a9:f4:3f:f6:28:3c:b5:e6:ae:d3:25:e8:c6:d6:b4:c7:92:23:
67:d2:9f:47:f6:59:2d:ef:73:08:4a:67:55:9e:8a:00:00:fe:
33:e1:cc:d2:48:c7:c5:6c:2b:fc:a9:e9:97:57:d5:d9:26:25:
cc:93:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:39 2025 by rpki-client