Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier: yawtffCUpZcM8f4l1sN0s6O55FYe15tXL5zbOZO/uRw=
Subject key identifier: E9:D6:BD:FB:13:1D:3D:CF:B3:DA:73:A2:AA:EF:08:7D:A1:EB:7B:DB
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial: 019A7293655D3811BCE5D8266FE3DA71358D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: q0pJtveZGMnVtUg4b9aVYMKHvuLM6zMZOxNKexzxWms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:65:5d:38:11:bc:e5:d8:26:6f:e3:da:71:35:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=e9d6bdfb131d3dcfb3da73a2aaef087da1eb7bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:3b:08:6d:dc:b8:91:eb:f3:e2:45:5b:46:
42:26:d8:d1:72:73:1c:d3:f7:a4:97:88:0b:c5:ea:
48:40:49:57:a8:77:e4:f2:00:d9:78:d8:ff:6f:b2:
b8:80:60:0b:78:70:52:ea:0d:73:90:c8:7a:bb:d6:
fa:e7:a0:5e:29:a0:4e:b5:ab:6b:89:6e:a6:02:41:
53:ef:c8:9e:8f:04:8a:36:20:88:05:8c:9b:b6:61:
c6:c8:db:5f:b4:b4:49:e8:17:5e:de:99:2f:c7:88:
c2:78:11:95:e8:93:51:11:2c:cc:3a:bd:d1:20:cc:
3e:ee:31:76:71:4f:fe:40:57:de:68:8c:3e:86:c1:
1d:b3:19:6d:8a:1e:94:77:63:f0:a0:30:6b:a5:e3:
88:22:bb:9e:dd:f1:81:62:ca:f2:7c:3b:ca:bd:e1:
96:9c:9b:56:5b:12:83:a1:8c:88:5d:6e:06:85:ce:
d4:6c:5e:04:35:98:f2:53:5e:ab:d0:49:e7:13:d2:
61:fd:b4:1e:4b:6f:e1:17:46:b1:0f:11:c6:cb:ad:
19:ca:a8:dd:b8:35:31:30:5b:82:ed:2d:af:bb:da:
db:eb:70:e2:0e:bb:fa:1c:cb:51:b7:3d:77:45:4c:
89:af:1d:37:f9:0e:4d:d7:59:c9:bc:55:78:51:ef:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D6:BD:FB:13:1D:3D:CF:B3:DA:73:A2:AA:EF:08:7D:A1:EB:7B:DB
X509v3 Authority Key Identifier:
keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3c:cd:b9:35:1b:4d:9c:51:65:af:18:bc:df:c6:ab:b8:a0:
93:c9:d7:84:32:96:77:88:7d:71:9b:b2:ed:c2:d5:6c:58:fe:
a6:e6:fd:13:f5:b8:c0:53:ca:57:9f:d9:0a:8e:4a:7b:32:07:
b9:a9:a5:90:e6:a1:31:00:4c:b9:7b:54:57:f6:1d:6e:0e:5d:
4a:75:a5:dc:b7:2b:59:6d:cf:12:35:19:21:20:1e:ca:4a:07:
3b:0f:81:5c:0e:42:09:ef:8c:dd:f4:9b:56:a3:1b:db:93:a8:
19:c4:c5:98:4b:ba:b1:b0:c5:4e:d4:b5:cb:79:7d:1e:14:90:
ad:3e:fd:f4:ee:ac:23:7b:c2:74:4e:18:27:71:0d:36:42:55:
31:af:a0:47:10:a7:f3:9a:3f:eb:d4:98:69:fa:e3:d8:f5:d7:
c5:9e:8a:2a:60:ee:be:e9:b5:ca:71:f5:1a:2a:fa:72:d3:d7:
3b:87:b1:94:ea:bb:32:28:25:7c:e7:34:f2:6e:9e:50:88:ba:
a7:1f:86:61:16:80:dd:44:d6:3b:7e:1a:24:38:bc:f5:44:d4:
5c:14:fe:1c:25:2d:12:4f:d3:66:15:3c:e4:ab:64:20:27:cb:
e9:d0:bc:7f:1e:11:39:c3:00:85:f3:46:c6:72:66:14:3f:dc:
0d:7c:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:12 2025 by rpki-client