Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: esiZ6D9AhKNOizO4DneL1PhRdJI1yFYkYvoulnNtBio=
Subject key identifier: 49:0A:F8:FC:84:76:4F:0E:F2:08:C1:03:D8:7C:CE:D0:E0:67:15:EF
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 0199FC583CBF1AB2CD9C6E1B1F90F84718F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: 32YhLR1C4rBevwlmrh+6G6L2p3+hAILdEnji2ky1y9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3c:bf:1a:b2:cd:9c:6e:1b:1f:90:f8:47:18:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=490af8fc84764f0ef208c103d87cced0e06715ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:a3:56:9a:09:04:47:de:35:2c:f9:52:64:
99:18:f2:c2:98:2c:24:06:29:4a:6a:5f:dc:22:df:
1a:d3:5c:64:18:e6:cd:e3:bb:93:45:55:f1:91:12:
1b:fa:d4:b0:50:60:86:4b:d8:5a:f7:83:c5:b9:a2:
4e:c8:48:fa:33:c0:84:4c:d7:c1:d9:87:7d:20:24:
dd:73:ce:97:d4:db:cd:91:e6:58:eb:05:a4:41:9c:
ef:19:ef:07:74:5b:bc:ff:5e:92:30:81:2a:c1:de:
0e:89:8f:cb:b2:7a:fb:8e:a6:53:d4:39:a3:ea:35:
81:98:ad:c9:29:59:51:e8:52:6c:42:99:96:0e:34:
d7:00:c2:26:d1:e0:b3:94:58:20:81:1d:9b:27:da:
37:7b:ce:25:22:51:29:f0:ab:6b:86:80:a4:df:53:
bd:30:81:28:d9:6c:4b:54:b3:82:e6:eb:75:59:1a:
00:0a:83:b4:bb:b7:d5:2c:59:97:76:26:25:d8:52:
4b:a5:fc:94:3b:9a:40:d9:31:b9:1f:53:ff:2e:53:
3e:a8:5f:54:25:14:ec:30:3c:ed:7d:aa:8a:2b:f5:
40:f2:83:3b:a5:37:36:df:8a:81:98:c3:f3:ff:b2:
47:9a:ef:b0:18:b4:c1:36:e2:cc:3c:ed:27:40:e2:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0A:F8:FC:84:76:4F:0E:F2:08:C1:03:D8:7C:CE:D0:E0:67:15:EF
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:dc:20:03:72:b1:f7:24:29:b2:05:54:f0:dc:5a:ec:c6:5c:
dc:32:7e:ea:80:30:fc:d8:3d:20:36:e2:63:d2:62:e7:b5:03:
2b:09:26:07:ad:76:38:51:62:ad:de:5f:ba:e4:cd:6b:6c:23:
a7:09:d9:8c:6a:ea:87:f1:96:92:d9:19:60:de:41:11:c1:8d:
9d:72:c1:36:af:67:a4:1e:55:6c:58:39:a5:76:45:06:d5:c2:
ab:3b:ad:5a:6f:ab:78:ce:4d:2a:0d:62:9d:df:40:1f:02:2b:
d3:af:c9:52:de:33:9e:30:67:e6:d1:a5:7d:51:2a:44:f8:8b:
5a:29:19:ea:59:79:96:70:f6:d7:3e:f6:0e:42:ee:78:48:56:
40:23:8c:1e:4e:6a:7f:19:34:34:c0:bc:48:20:69:c4:d2:9f:
97:33:28:6c:11:c6:19:a0:4f:67:28:9f:9d:b7:a5:a7:81:87:
49:85:5b:62:62:06:1b:45:66:c8:19:7e:43:e6:91:66:1a:29:
c4:4e:d7:ce:1f:dc:2f:0f:d4:48:77:1a:4b:1c:e0:a5:7c:4b:
27:9f:42:71:fa:36:2e:1b:7d:a0:28:7c:9f:d5:89:61:4a:af:
cb:33:df:6c:0c:83:eb:7f:ca:a9:ef:29:12:77:28:b6:94:be:
1a:c1:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:01 2025 by rpki-client