Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
File: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft (raw, json)
Hash identifier: Zqk731KMtQ9fVOsaHcjqz7txkiVo4DizpOWX+bygenc=
Subject key identifier: 94:03:47:F4:0D:3C:E7:3F:5A:F0:D7:55:2C:0A:D5:66:4E:F1:87:15
Authority key identifier: 3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
Certificate issuer: /CN=3edd1cf4370085b6d25714091436f6686028d558
Certificate serial: 019921B26B496BF3341416333D77548BF95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
Manifest number: 0125
Signing time: Sun 07 Sep 2025 01:02:44 +0000
Manifest this update: Sun 07 Sep 2025 01:02:44 +0000
Manifest next update: Mon 08 Sep 2025 01:02:44 +0000
Files and hashes: 1: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl (hash: vbgkpXQ3+sZY12KLMlOMf7sSnUq3BNVug42eW03n7GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:6b:49:6b:f3:34:14:16:33:3d:77:54:8b:f9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd1cf4370085b6d25714091436f6686028d558
Validity
Not Before: Sep 7 01:02:44 2025 GMT
Not After : Sep 8 01:02:44 2025 GMT
Subject: CN=940347f40d3ce73f5af0d7552c0ad5664ef18715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:84:b9:82:44:7b:e3:67:8f:54:a3:e5:27:
ee:db:2b:89:9e:e0:f4:8d:fa:f3:b2:78:2d:e1:cd:
2c:73:87:7c:41:db:92:e1:c9:86:24:6b:71:c7:cd:
70:74:3f:bb:23:4f:a1:55:3b:ce:64:1f:66:c4:2e:
f2:4f:17:27:6a:e9:d3:98:2b:23:1a:8e:cd:d0:7e:
35:59:f2:6c:0c:06:13:6d:e7:27:ae:b0:2c:94:d3:
cd:e2:8f:48:a0:b4:dd:00:8c:8a:b1:66:53:4e:f7:
c0:be:5d:9e:86:2a:da:07:c0:07:ee:d3:dc:5e:a2:
1a:eb:8d:40:a2:77:19:62:13:6e:b0:ef:b0:4f:72:
ee:28:dd:c9:f9:f7:73:af:fb:fc:3c:0b:a6:b7:d3:
7b:0a:fd:90:84:c4:65:7f:03:a8:2f:b6:78:1b:ea:
8e:dc:95:51:47:32:12:c7:4e:e2:c1:30:a3:a4:46:
4d:95:01:ff:2d:1c:37:90:0b:c9:f3:0d:c3:7d:91:
cd:9c:e8:03:fa:f3:13:8d:b1:a2:25:d2:f2:49:1d:
4c:47:17:41:74:90:96:34:7f:85:fc:d0:d2:e3:93:
bc:a1:f8:0b:9a:34:99:3f:cd:50:50:63:a3:43:8b:
d8:a1:e6:d4:bb:6a:df:cb:bb:9b:d2:a8:f7:40:cc:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:03:47:F4:0D:3C:E7:3F:5A:F0:D7:55:2C:0A:D5:66:4E:F1:87:15
X509v3 Authority Key Identifier:
keyid:3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f5:0f:09:14:42:e3:15:45:da:20:cb:9e:51:5a:a2:75:7c:
d0:14:e8:6c:1b:fd:aa:a5:ca:62:b2:53:6c:1d:2a:7e:b3:f9:
c4:ea:29:cd:c2:c3:15:84:ce:88:86:91:64:85:ff:4a:98:b9:
11:0e:b9:67:1a:44:7d:96:fa:5f:19:98:53:53:6c:fd:5b:6a:
c8:ff:be:67:05:f3:f5:b8:32:ea:95:96:35:3d:1c:cf:37:26:
18:14:57:19:e8:3e:09:42:c7:9c:72:fe:94:61:77:b8:34:a4:
bd:05:36:4a:7e:55:79:70:35:5a:81:34:43:ad:62:3d:0c:b2:
99:59:f3:cc:52:2b:3a:5f:5c:85:1b:c7:af:3e:c4:1b:9c:d9:
b4:65:de:88:e6:f5:c3:8a:3a:31:be:a0:e0:68:59:c6:60:d4:
14:12:4e:d3:43:d1:51:9f:f2:3b:1a:0b:69:86:bc:3c:fb:d5:
cb:f0:a5:ba:f9:41:66:af:49:a9:90:05:35:e9:10:ef:c5:6d:
95:d4:35:d9:27:aa:83:33:fa:95:d8:83:72:42:a1:39:8c:3d:
f7:f8:65:b5:49:06:2c:ac:30:42:96:bf:d7:87:2c:c7:b1:a7:
56:50:85:cd:eb:f8:5f:f2:73:0d:2f:33:c3:0f:e2:2d:c8:51:
68:d4:28:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:07 2025 by rpki-client