Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: RDLMkRwy98QXvN98FU6fA32rgRgVjSLrY8yHoWKmqiA=
Subject key identifier: 58:A9:A1:EB:BC:17:F4:D4:88:1D:43:BA:C6:62:74:2F:4C:34:76:49
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 0199FCFD2A081BE84A3FE7B3FE4396A45484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 04BF
Signing time: Sun 19 Oct 2025 15:01:13 +0000
Manifest this update: Sun 19 Oct 2025 15:01:13 +0000
Manifest next update: Mon 20 Oct 2025 15:01:13 +0000
Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: azfJVRHSLlzpLNUTuZsodyAroz/hPEU4R+whYVfNeec=)
2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2a:08:1b:e8:4a:3f:e7:b3:fe:43:96:a4:54:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Oct 19 15:01:13 2025 GMT
Not After : Oct 20 15:01:13 2025 GMT
Subject: CN=58a9a1ebbc17f4d4881d43bac662742f4c347649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:a4:05:77:64:90:6e:2b:d2:dd:95:9e:b3:
b0:52:5c:54:1b:1a:4c:7b:7b:7f:f9:8e:79:89:e7:
ad:77:87:cc:cf:96:a9:d2:23:d4:19:96:17:35:e0:
5a:cb:c9:49:e2:5e:46:39:7a:fd:62:7d:4f:a7:b2:
0b:8b:4a:a4:3d:bd:16:f7:3b:6b:24:a6:2b:d8:e6:
23:a8:0d:ef:9f:3e:df:a3:09:c3:e5:84:c5:08:5c:
aa:8d:d3:a4:34:98:30:0d:27:80:1c:eb:67:5b:0f:
4b:b7:ae:2b:49:90:18:6c:57:81:c9:80:bf:ac:5e:
28:08:b0:e1:d5:35:5f:d6:af:62:94:b1:84:40:2d:
ed:6a:bd:8e:17:fa:9c:aa:3f:5b:1e:cd:cb:e8:d8:
64:c3:94:2e:9c:14:54:68:f5:b0:e7:3b:ec:3c:88:
11:fc:ee:d8:96:59:88:f6:29:99:42:be:2e:63:39:
33:31:b6:9f:28:6b:74:e6:57:b3:f3:3f:10:3f:73:
da:28:e5:27:f1:91:a2:83:91:17:ed:20:c7:3b:79:
a2:2a:b8:4d:a2:6a:bd:df:52:29:43:0f:1e:d5:01:
09:12:89:59:62:77:0c:a0:8d:61:5b:5c:97:99:a4:
d2:a4:a8:86:1e:4e:f3:85:7c:5a:f4:99:5b:46:05:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:A1:EB:BC:17:F4:D4:88:1D:43:BA:C6:62:74:2F:4C:34:76:49
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bf:40:31:c1:64:da:c5:17:b7:bf:46:72:91:3e:e8:44:8a:
4f:2d:77:be:40:3f:99:51:c2:bc:99:42:de:35:33:78:a1:91:
b2:bc:e7:79:39:68:43:25:76:91:e7:cd:67:e1:cd:ef:cc:cc:
5e:a2:35:6d:cf:8f:8a:c0:c4:26:e3:4a:5b:74:a6:40:6d:4f:
d7:bb:39:dc:ed:1a:7b:a9:d8:50:5b:03:0f:f7:a6:02:61:88:
99:77:23:24:c3:a8:47:0a:73:2a:47:2a:86:b7:76:ac:47:b1:
f5:e6:59:94:f8:00:8b:ad:f9:a4:19:57:bd:4c:d4:4a:3e:e6:
35:2c:30:98:c2:c0:31:f3:e0:37:fa:63:74:52:b0:8a:dc:4f:
a6:22:4f:98:b4:31:44:ce:12:45:c2:ff:2f:36:00:f6:ca:f4:
7d:f0:92:e1:3c:2b:31:00:cb:d0:c1:8e:0e:94:02:2a:20:76:
68:8f:6a:08:90:c2:39:12:6b:09:54:50:f6:83:1e:73:a1:d9:
dc:64:42:f7:7d:34:da:ed:3e:4b:8d:8b:88:be:ea:03:22:d4:
4e:71:91:2a:d5:ce:fc:b4:09:5b:e1:10:da:63:c8:7f:1e:16:
26:fa:b7:cc:a0:3b:a2:46:2a:7d:38:e7:db:ee:1e:8e:52:e9:
57:58:2f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:13 2025 by rpki-client