Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
File: PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json)
Hash identifier: 4N+q3BukqjSmB1WOBfdTXMSIIU8KLx97+DJphaxkwhA=
Subject key identifier: 08:2C:9D:8A:C5:27:92:A1:B8:35:7E:0E:97:D8:DF:8F:93:8C:D8:AF
Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
Certificate issuer: /CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Certificate serial: 019A71B87FEB136C1DF6A1851098F62F38AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
Manifest number: 0B59
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: 2n/p6nGODDkXTmXFNFVGVTiXPgp/2PyurUedhEqKc0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7f:eb:13:6c:1d:f6:a1:85:10:98:f6:2f:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=082c9d8ac52792a1b8357e0e97d8df8f938cd8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:f4:d4:32:99:4b:6a:cd:8c:26:63:22:1a:
9b:a0:56:a7:c8:43:c6:47:ac:a2:b8:7c:ea:c6:e8:
19:0c:67:95:92:a5:0d:47:f0:52:44:04:aa:d9:a6:
54:e9:d9:af:0c:43:2b:fe:92:30:53:97:53:6f:7a:
9b:04:59:e2:f0:46:bc:1f:f2:df:77:86:60:e4:9e:
b2:17:8f:06:9b:4a:b9:82:9b:4c:22:0d:1e:02:e5:
02:d1:7a:da:d5:cb:b3:09:7c:96:39:53:4f:ca:14:
e4:6e:7b:49:91:38:78:a2:59:73:01:9d:51:b4:02:
3c:0a:e5:8c:e4:aa:82:86:42:94:77:2a:e1:7f:a9:
81:14:cb:14:aa:14:51:96:b3:f2:87:e7:1c:e2:02:
25:aa:29:aa:e5:46:97:be:98:67:10:b1:b5:c7:6b:
93:30:ee:3e:df:03:5d:89:a9:70:26:26:84:3a:e3:
ad:6e:c8:02:72:74:00:e8:f9:84:1d:09:e8:d5:20:
7e:f6:17:41:3a:55:35:8b:c6:47:d7:13:f9:eb:6c:
e8:f3:87:59:21:ef:e9:67:d4:1c:3b:20:a8:44:f2:
a9:93:b3:e5:fc:0f:89:8e:44:a9:d9:2e:0c:c4:15:
ad:02:8f:7a:cc:f4:d9:af:c6:b4:88:02:df:b8:a3:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2C:9D:8A:C5:27:92:A1:B8:35:7E:0E:97:D8:DF:8F:93:8C:D8:AF
X509v3 Authority Key Identifier:
keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:70:1e:95:5e:b1:12:5e:25:5c:ff:ac:54:64:63:02:e9:6a:
7f:45:fe:12:3a:0e:9e:bc:38:f2:e1:c8:ec:8b:57:f4:3c:51:
66:7a:60:61:8d:8d:5e:b6:94:0f:a3:a9:1d:e8:68:69:51:48:
0b:7a:b0:b8:b7:01:ed:f9:e9:0d:b5:8d:b8:69:f1:df:78:36:
ba:7a:f9:d6:73:f4:5a:d1:0a:69:1e:1d:a0:a0:52:e2:74:8c:
8b:13:bc:09:9a:1f:42:8a:f5:5d:53:ef:13:11:dd:c9:cc:2c:
60:a4:2b:a9:f5:bd:29:5a:f5:a5:2e:e5:04:69:24:b6:7c:ee:
db:67:21:de:02:19:58:f5:fd:29:39:fc:17:09:fe:9b:ff:23:
f0:1b:19:f3:e7:ca:14:8b:19:65:25:73:69:7b:c0:d7:e7:a9:
a0:41:94:0f:c0:da:6f:a5:41:88:3f:ff:e2:ed:c0:6c:ff:cd:
d2:b2:54:cd:4b:21:28:22:a9:ba:b0:99:f7:38:ce:37:a7:ab:
8e:ef:e3:8a:d5:84:7b:1c:f6:9d:df:21:4c:a0:b6:9b:07:c0:
ac:9d:7e:d2:74:64:d3:44:16:37:2a:e5:e1:d8:2f:d6:87:e0:
b5:b7:81:50:49:00:d1:39:fe:cc:98:b8:1a:2d:53:06:ea:e2:
c3:1e:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:21 2025 by rpki-client