Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
File: Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft (raw, json)
Hash identifier: rPjB8bSEVp7wM1/oNZT8EwCNqqcI7ZQzu+iAwFyMTfM=
Subject key identifier: D5:46:72:AE:7C:01:12:82:C6:30:5D:B1:C0:11:6B:40:62:B5:CB:61
Authority key identifier: 3E:7B:F5:B1:9A:00:4C:1C:17:FF:5C:E7:DC:C0:CF:C8:07:87:D0:B9
Certificate issuer: /CN=3e7bf5b19a004c1c17ff5ce7dcc0cfc80787d0b9
Certificate serial: 019A7225938E801456B2B2042AECCC57C24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
Manifest number: 81
Signing time: Tue 11 Nov 2025 09:00:56 +0000
Manifest this update: Tue 11 Nov 2025 09:00:56 +0000
Manifest next update: Wed 12 Nov 2025 09:00:56 +0000
Files and hashes: 1: Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl (hash: OEASwTyC7YbtXt8b1wrm/AbZMaz6HGJo5cE/O6pHtpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:93:8e:80:14:56:b2:b2:04:2a:ec:cc:57:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7bf5b19a004c1c17ff5ce7dcc0cfc80787d0b9
Validity
Not Before: Nov 11 09:00:56 2025 GMT
Not After : Nov 12 09:00:56 2025 GMT
Subject: CN=d54672ae7c011282c6305db1c0116b4062b5cb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:28:90:0e:0e:0a:e2:07:aa:30:f7:de:e0:
bb:ad:24:1a:eb:0c:7a:d6:57:81:ae:2e:49:52:bb:
b7:7a:1c:c1:6b:67:ee:ae:a2:e0:f4:c6:fa:71:01:
58:e5:01:c7:e9:c5:a0:84:12:aa:0c:33:94:66:57:
38:8f:55:3c:d6:f6:ab:ee:61:78:10:90:3a:3b:94:
6e:1f:a9:d1:20:80:de:d8:b1:de:40:88:a5:db:7a:
30:fa:23:e8:71:61:92:82:c5:d5:8d:6a:68:ef:7c:
4c:89:ca:35:fa:db:8b:22:04:e1:b9:1a:34:28:26:
33:d9:0d:d8:83:40:3c:b3:e3:3f:95:2a:5b:9b:37:
dc:6d:1e:7a:88:84:df:f3:10:65:62:cb:15:02:f8:
2e:d1:b7:86:f7:ec:61:7c:7a:7d:33:da:aa:26:19:
af:13:d5:0f:d9:0e:67:b2:03:50:e8:0b:a2:e6:90:
fc:2e:f7:57:a6:01:05:af:65:43:f1:f2:14:a6:a7:
7d:46:d2:79:4f:17:37:e2:d5:17:7e:67:82:ca:87:
75:10:0c:d6:75:ca:3b:79:99:df:ee:fa:1c:f1:3b:
fb:7b:dd:bb:ea:d7:5b:02:cf:e1:0b:53:f2:e6:7d:
fe:3f:93:46:cf:e6:ae:ec:09:2f:22:f2:bb:cf:23:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:46:72:AE:7C:01:12:82:C6:30:5D:B1:C0:11:6B:40:62:B5:CB:61
X509v3 Authority Key Identifier:
keyid:3E:7B:F5:B1:9A:00:4C:1C:17:FF:5C:E7:DC:C0:CF:C8:07:87:D0:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fa:4d:2d:77:a6:f4:42:dc:ed:b6:2a:78:ee:c3:a0:bd:2e:
56:1e:24:65:2d:ed:c2:49:02:d1:3d:64:38:a9:1a:51:6b:e4:
43:54:57:1c:50:73:0f:65:b5:f5:14:0a:81:e8:eb:c7:1f:58:
9f:b6:4f:18:dd:23:77:40:ac:92:d2:e2:54:11:6f:e4:d7:dd:
d8:96:11:f2:3e:bb:62:31:51:65:37:87:30:ec:97:f1:d9:ff:
86:a8:ba:b1:fb:04:92:d4:dc:cf:14:ed:e7:a5:9e:64:e4:54:
cc:25:1c:f4:20:29:37:ca:ff:b8:19:2f:14:f0:49:f2:62:34:
57:64:79:a6:6c:36:ec:2f:b9:de:ff:6c:66:ac:95:0d:a7:82:
d1:85:48:b4:b1:34:5b:d6:c1:04:6b:d3:09:80:ca:d8:17:42:
80:00:4f:83:44:70:f9:b7:8f:f7:e2:04:59:b0:12:fa:4a:f3:
49:b3:a9:44:1f:5a:d6:61:a2:e2:08:c2:7a:ed:de:b5:5c:8e:
e5:4d:a8:45:4f:da:f1:37:c6:58:02:76:8e:16:31:77:39:13:
06:1b:76:3d:51:29:56:aa:40:79:06:61:e4:bc:e3:f2:73:4f:
7d:7c:19:0a:11:d3:e0:dd:dc:3e:11:b8:ff:3b:55:81:6d:67:
e6:d9:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:09 2025 by rpki-client