Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
File: pcJJ62-mtduvarnes6d3juDrNIc.mft (raw, json)
Hash identifier: V4VEDsTkMCy5lJ2PEq3QsTd7mQP/rC07t68dWED/Cag=
Subject key identifier: 7D:89:4C:A1:23:4E:31:AA:30:D6:0F:4F:1A:69:C5:D1:89:17:B1:7B
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Certificate issuer: /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial: 0199FDD97C92DF4FE40AC975EAE63BBD464F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
Manifest number: 067A
Signing time: Sun 19 Oct 2025 19:01:52 +0000
Manifest this update: Sun 19 Oct 2025 19:01:52 +0000
Manifest next update: Mon 20 Oct 2025 19:01:52 +0000
Files and hashes: 1: iI8Orlzgb6VVuw4zGceAk4Y_gdo.roa (hash: xavQWQ+h3Wh68WfrJKGu7Ge405dFSg9FX+cO3lDgnEY=)
2: pcJJ62-mtduvarnes6d3juDrNIc.crl (hash: CIFMFn1/PJAFQR0rJ4QneXfHbl5jPUVn6FPIlVefnVM=)
3: u9Sx8vquonuxfGSR4H7LLp3rbKI.roa (hash: 2NhtYGZCkznHHTIw/AAV97Orzomj5GZcOrYU4RhtX1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:7c:92:df:4f:e4:0a:c9:75:ea:e6:3b:bd:46:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Validity
Not Before: Oct 19 19:01:52 2025 GMT
Not After : Oct 20 19:01:52 2025 GMT
Subject: CN=7d894ca1234e31aa30d60f4f1a69c5d18917b17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:68:59:b6:83:07:af:a2:29:01:0e:55:50:
40:f8:b9:6d:5f:73:b3:17:f9:7b:0b:37:4f:47:72:
dc:99:6e:d3:d8:65:c2:8a:35:93:09:f1:a6:35:43:
f7:84:c1:05:06:75:c4:e6:fa:ca:ce:1e:38:f8:f3:
28:c5:83:3d:0b:0b:ef:00:6b:a1:52:ab:30:bb:eb:
55:c4:83:9a:80:8c:41:28:ca:3e:e3:17:8d:46:ca:
e7:26:7b:41:14:e4:43:c1:91:5a:c8:d2:31:97:76:
a9:a2:a0:04:68:32:e2:e3:8d:23:6d:c9:fc:5f:d9:
cb:1f:22:ae:44:fb:ae:96:a7:e9:1b:c8:e2:64:bf:
dd:b6:75:e1:84:a8:7a:84:83:05:cc:7d:00:2e:31:
4b:ee:e2:fa:bf:0a:4c:f6:9e:c0:86:67:91:77:b1:
ed:f3:27:31:fb:06:96:dd:e4:b7:3f:a3:67:0b:c1:
1d:a9:a3:8c:0d:69:ca:e1:bf:2f:1a:d2:6d:23:d1:
ba:fa:e7:5c:39:c2:94:e7:a8:24:c9:12:12:7d:de:
a4:32:a3:91:09:af:d7:9a:5c:31:89:05:ab:73:28:
e4:bb:8f:a2:cc:e3:68:26:8d:3f:36:cb:fb:3b:d1:
bd:9e:07:55:ab:c8:f8:21:15:c1:9d:97:12:11:00:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:89:4C:A1:23:4E:31:AA:30:D6:0F:4F:1A:69:C5:D1:89:17:B1:7B
X509v3 Authority Key Identifier:
keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:99:49:d6:88:b6:40:d9:94:fb:90:43:bf:30:20:ec:87:80:
0b:99:81:1f:3f:d3:cd:85:f1:1b:43:25:d8:9c:85:52:c0:0c:
fe:5e:d1:4b:ae:6d:7f:99:62:86:a9:c2:17:0e:a1:7a:98:06:
a0:98:b7:f2:91:2a:08:fd:f3:16:71:bf:3b:84:77:eb:dc:78:
20:00:58:83:fa:59:1d:59:ad:46:de:c5:aa:10:37:7e:e6:f6:
96:7e:b9:88:b8:f8:ab:3f:58:31:3d:2d:9a:26:33:52:44:72:
ec:6f:b4:20:79:37:4e:2c:24:c8:9f:af:97:98:d6:49:13:ce:
90:a0:9c:6a:8d:c6:4e:01:15:94:0b:1b:4c:58:f3:da:35:ec:
7d:2b:a4:11:a4:0f:27:b0:42:6c:1c:98:63:74:5a:cb:7a:7a:
59:2e:e8:e6:d4:1b:c4:42:4c:01:21:d2:f5:a7:a8:02:9b:f9:
76:6e:1a:33:e7:ec:40:53:56:94:e2:83:df:e3:d5:82:8e:ac:
e7:46:94:b3:6d:40:61:ed:2a:f0:48:5f:58:d4:74:11:a6:38:
c6:2a:99:31:a1:43:b6:65:5f:68:95:e4:fe:06:df:59:6a:04:
79:07:0b:80:c4:a0:e2:7c:a2:92:bc:58:14:6d:e6:e7:57:bf:
bb:6d:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:09 2025 by rpki-client