Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: Fu5A/sx5HbS6t1LT/lQ88o8Ifm7S8lkln1GDbEkVSbo=
Subject key identifier: 9F:10:11:A1:FE:C6:14:4C:F1:B5:D8:89:79:5F:58:C9:18:C0:22:C8
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 0199FC8F6072D5EADC15C276266C62AE1D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 0203
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: AYSLpwufRV-W_9lRsqnuQFR2IOQ.roa (hash: Q3fm8OZk/vOZ06gyMzMxpxsqxYSULclXWKZVcRfqEg0=)
2: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: robNevFBUY/7qUchQmLpM5uY3qX8xDuA1RH1V5MyOJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:60:72:d5:ea:dc:15:c2:76:26:6c:62:ae:1d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=9f1011a1fec6144cf1b5d889795f58c918c022c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:54:1c:65:4f:d1:c3:1d:8b:c9:62:1a:08:
61:f9:6e:f4:53:ff:df:44:d9:b8:6c:7e:ee:5f:32:
21:a7:c1:18:6a:46:a2:8a:93:13:5f:af:01:58:15:
46:c6:57:d1:2e:f6:29:24:34:fc:d5:8b:be:1a:94:
77:c1:fc:da:ce:4c:37:12:cb:58:be:a6:7a:0e:b1:
72:85:f7:64:b2:09:dd:a3:e1:98:4b:12:f4:0b:83:
4f:b5:d2:08:3c:7e:1f:6b:12:39:c3:0f:c9:15:55:
9e:b3:ad:e5:02:c4:09:e3:36:09:22:f6:7d:4e:48:
1f:d0:1f:df:5e:e3:d7:c7:1d:6c:4f:9d:2e:3a:34:
de:09:2b:b0:f5:27:6c:05:dd:e7:2d:c5:a2:da:db:
8f:ac:bc:b0:42:a5:21:40:cb:8d:48:a4:2c:70:71:
8d:b0:38:36:bd:6d:7f:bc:e1:50:25:2a:64:56:b7:
1a:cf:84:e5:1b:f1:ca:6d:60:f3:d3:ea:f0:d6:90:
47:92:cf:50:ac:10:d9:fa:47:20:5b:d5:50:b3:83:
a6:72:4c:d5:74:e6:ff:6e:16:1d:f9:eb:e2:0e:34:
84:bb:a5:7d:0d:4a:9c:83:0e:5b:3f:35:9d:e7:06:
41:a2:0a:65:ce:f9:0a:7b:d0:4d:f8:a2:0f:25:bb:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:10:11:A1:FE:C6:14:4C:F1:B5:D8:89:79:5F:58:C9:18:C0:22:C8
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:06:8d:b8:35:bb:21:63:b2:dd:2d:84:f8:8b:8b:d2:de:3a:
66:d6:2b:55:f0:7e:da:83:ec:a3:31:f0:a8:7a:a8:23:21:c8:
56:d9:8b:d4:2d:e2:ce:2a:38:7c:90:98:71:65:a1:25:17:16:
cd:74:28:77:d8:e5:8a:b6:b1:34:91:f9:39:72:71:89:37:89:
6e:16:1b:6f:e5:b7:b6:94:3d:ca:92:0a:5e:ac:ce:b4:8a:9d:
bd:0f:a5:3a:94:79:06:2d:c5:d7:69:64:a5:82:43:bd:95:0f:
25:06:3a:50:ff:91:b8:62:77:c4:6d:58:04:cc:a5:bc:44:80:
d9:62:d8:00:b9:43:1e:cb:3b:f3:3e:04:53:d4:60:e9:23:55:
7b:c8:7d:e2:c0:e4:c5:d1:70:f9:29:a4:86:53:ac:c9:fd:74:
ac:42:da:e3:b0:71:18:47:87:10:70:e7:44:83:18:d1:96:80:
0a:74:fd:e3:5a:07:0d:54:a9:ab:df:b9:a2:0e:bd:8d:c9:e2:
50:ab:12:9d:12:95:a0:2e:0c:68:5c:dc:dd:3b:fe:11:96:a3:
e7:9b:4f:bd:bb:ad:1a:74:c3:73:95:47:be:a3:54:40:55:0d:
17:5d:ba:ae:04:54:d4:5e:18:b6:91:56:ff:e0:c2:d7:47:6a:
50:6a:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:10 2025 by rpki-client