Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier: Y+SE7tWnCZCzfwWfkk9ui/nSF9o6U4A2C0PaOQb8g00=
Subject key identifier: ED:D7:A2:56:34:D9:27:FE:4E:BF:35:93:99:EC:DF:BA:63:7F:9B:E0
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 019A7293ED669C61592D55A8C34CFFB7041F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number: 0101
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: iuxpfW70AWAcrRnO19+GTQAEdnN31KQVuqUzANMJAd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ed:66:9c:61:59:2d:55:a8:c3:4c:ff:b7:04:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=edd7a25634d927fe4ebf359399ecdfba637f9be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:60:ab:29:16:9b:85:41:50:3a:92:f2:41:
85:db:af:c1:d7:31:11:88:b5:fb:e8:21:3d:e3:0d:
2c:b9:2f:29:ae:6d:5b:af:90:10:59:22:dd:fc:f3:
49:f0:d5:62:4f:32:d1:b4:8b:ba:24:87:79:d3:9c:
08:7e:ab:74:e7:a7:71:89:08:be:fd:eb:52:bb:c8:
bf:bc:d4:6d:cd:1a:9c:31:02:cf:9e:85:3e:1f:d4:
29:a2:6c:30:98:c4:5d:6c:1a:de:b9:ce:b7:02:05:
6c:a6:8d:8e:4a:76:de:ff:e2:29:84:a1:bc:02:a7:
b2:57:38:7d:2d:aa:39:b9:db:f0:1d:a4:44:79:16:
a2:16:b9:03:af:91:ec:5a:70:03:56:51:5a:57:ad:
ce:3b:5f:3b:63:cd:df:ac:7d:fb:e2:88:d1:6f:6c:
69:dc:5d:29:d0:bd:a0:16:d1:a1:18:18:ea:2a:d0:
70:ed:8f:db:92:55:e9:37:55:7a:ea:cb:c3:de:ab:
2d:21:1e:e5:28:fb:35:d3:48:a6:ab:86:ed:f5:80:
c2:bc:55:6d:01:b2:d3:30:37:46:46:78:ff:c4:6a:
18:bc:9a:17:ae:d6:90:5b:c7:9b:34:0c:70:f0:84:
ae:ee:55:67:39:23:a1:4e:73:43:ea:0f:bc:b1:77:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:A2:56:34:D9:27:FE:4E:BF:35:93:99:EC:DF:BA:63:7F:9B:E0
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:07:84:89:08:86:c7:83:e4:a7:c9:19:09:8d:38:4d:1c:a5:
8e:cf:ed:c8:36:1a:22:ff:f7:d6:c8:37:d7:3e:46:34:75:e2:
84:1d:20:e0:1a:be:cb:e0:ee:6b:53:15:a6:d1:17:02:ea:68:
8a:09:88:57:66:e0:79:a3:10:b4:5f:bf:0e:29:72:18:ee:c4:
6c:e8:66:51:60:1d:b8:d2:88:b4:92:3e:60:71:49:c0:55:af:
1a:a0:b6:6b:83:30:dc:8e:1f:a4:2d:25:49:f3:e3:8d:10:d5:
9e:23:56:1a:ac:8b:cd:84:61:a1:e2:36:87:5a:6d:fc:11:8a:
cc:e8:85:93:a9:f4:38:a8:dd:58:a5:69:b1:bd:59:80:30:25:
31:a9:e2:79:cc:8c:1b:5e:88:db:10:71:64:79:49:3f:90:cc:
c3:16:c6:f5:36:8b:5e:0f:5c:10:5f:bf:d3:32:37:ef:e9:64:
19:49:f3:8b:74:2a:c0:cc:22:f8:b5:8e:52:de:69:2a:d1:4b:
49:ef:ff:74:b0:b9:33:c3:f0:3d:5b:53:cd:69:64:c7:8a:30:
a6:e4:31:5f:8c:3e:13:6e:08:91:d3:6a:ce:25:1f:0c:52:44:
fe:91:33:2f:0a:0e:f6:a6:d3:99:9b:f1:3d:63:b8:73:83:bc:
b9:71:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:36 2025 by rpki-client