
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier: D11vNaIwv4U2PAMZo7GEGJuRFJfXEjrGKdlRxp1ycWE=
Subject key identifier: EC:8D:E9:27:75:15:66:94:A2:40:02:B9:60:72:24:90:5D:B7:31:51
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 0199FAD7F17E4A5321920B90FEE23872C8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number: 0D97
Signing time: Sun 19 Oct 2025 05:01:20 +0000
Manifest this update: Sun 19 Oct 2025 05:01:20 +0000
Manifest next update: Mon 20 Oct 2025 05:01:20 +0000
Files and hashes: 1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=)
2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: CupQPn55Ll5x3067kTxc5I+Tfz/+tfIETI6m2fInLpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f1:7e:4a:53:21:92:0b:90:fe:e2:38:72:c8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Oct 19 05:01:20 2025 GMT
Not After : Oct 20 05:01:20 2025 GMT
Subject: CN=ec8de92775156694a24002b9607224905db73151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:ee:6f:20:d8:1b:eb:4d:b6:55:9c:b6:80:
4b:95:9c:7f:68:49:a4:f6:4a:61:60:47:2c:f7:68:
96:7f:9d:44:b5:82:56:d9:34:dc:1b:47:c8:8d:1b:
aa:70:86:75:c5:c2:c6:57:f0:3c:8d:a8:83:0c:5d:
aa:3e:33:07:87:e0:0d:17:77:87:d6:8c:4f:a6:38:
a9:7c:58:2c:9d:5e:a3:ff:03:46:7a:28:25:24:4c:
31:07:42:00:70:8f:27:68:84:8f:a5:81:e3:b7:ee:
cc:83:9a:b4:2f:4f:1f:fa:c6:f3:70:ee:a4:c8:5c:
c3:6a:5e:99:1b:18:2f:e3:96:5b:a8:f5:d7:84:1d:
9c:cd:a8:80:1f:59:ef:f1:0d:9f:cc:a7:45:e1:c3:
bd:a8:7d:4e:4b:4d:28:ae:aa:77:0c:9d:e0:ed:f5:
6a:6a:a5:df:8b:52:6c:a7:86:e2:7d:96:98:18:b2:
22:5d:a1:f7:91:38:9f:8f:b2:66:31:22:cd:37:93:
5f:18:86:72:43:c0:ea:fa:12:ab:66:cf:42:8b:8a:
09:37:4d:f9:c5:36:8d:c9:0d:50:ce:56:d8:f9:6c:
d5:a5:2b:ca:b8:65:0d:8e:be:4e:47:c2:c6:3f:69:
d5:e6:f1:19:de:2a:86:ec:3b:fe:51:d3:92:de:7d:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8D:E9:27:75:15:66:94:A2:40:02:B9:60:72:24:90:5D:B7:31:51
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:98:46:ac:c5:79:c5:3f:15:68:9e:db:3a:b7:3e:bd:96:8a:
4d:fa:71:9a:f4:da:ad:90:79:dc:e5:74:74:a7:e8:92:b1:91:
14:85:f8:79:f6:32:09:68:9b:98:aa:36:27:75:a4:fe:fe:af:
8d:ee:b0:47:7d:e4:cf:5e:ac:f1:f1:d8:fb:c3:c2:ea:6b:b4:
64:e9:79:0b:74:80:81:6d:85:1f:3c:d5:c6:6b:73:a6:03:1b:
f8:40:a9:88:40:04:ff:19:9d:00:7c:2d:8b:0f:73:c9:3e:af:
13:79:e7:dc:dc:52:34:37:be:f6:bb:07:1e:59:a7:22:28:d4:
a5:d3:88:e5:1a:6a:27:63:85:74:59:61:06:43:5e:e1:25:ab:
71:21:c5:09:b8:ed:5b:b6:31:c7:70:8b:1e:f4:cf:6f:ee:c9:
2f:a1:13:a8:e7:f9:52:50:cd:5d:7c:6f:0b:c9:ec:c7:ef:d7:
8c:a9:3a:41:e3:73:ea:e8:fc:5f:0a:f4:16:4a:f1:6b:2c:ad:
17:97:bd:e9:04:c1:1f:e4:bd:00:e3:98:90:cc:d6:6f:a3:3f:
51:fb:94:ea:46:cd:9c:99:e4:fb:f6:69:60:1a:25:29:89:aa:
ed:63:70:20:52:c1:33:5d:4d:ba:14:76:01:8e:a5:24:3b:3b:
e8:58:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:07 2025 by rpki-client