Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json)
Hash identifier: Xx+KbqxbSCFlUBrApggMtDI6Zkek27C7Oj8J0Hbt8Uc=
Subject key identifier: EB:44:34:01:59:A7:CF:97:6F:D3:D7:FC:60:30:78:BF:4A:DB:79:76
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial: 019A7225D00547A13EDDF01C90CC375DCBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: dCjkEnxBMRZUy3DT1NneoqScV6MK/2J3veUruEDM7lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d0:05:47:a1:3e:dd:f0:1c:90:cc:37:5d:cb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=eb44340159a7cf976fd3d7fc603078bf4adb7976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:0e:a3:94:4b:20:b8:f2:d1:4f:a1:1f:68:
26:42:43:35:5b:79:dd:55:cb:7b:ff:58:6a:45:ac:
c7:93:9b:a6:37:cc:06:98:19:9d:16:84:a8:e7:2f:
66:ff:37:4d:59:d2:86:dc:c5:a3:4c:82:f1:2e:28:
2a:f3:de:ff:cb:3c:7e:ef:e0:9d:61:94:8b:d6:fa:
05:1f:ff:e9:d8:ca:c9:3e:77:20:31:6f:11:85:e3:
95:bd:3e:8b:4a:23:bb:b9:e1:91:9e:48:e3:b3:ad:
93:8b:a8:52:95:e6:00:3e:c8:83:1d:46:4f:6c:8b:
c7:39:2a:b8:4f:1b:14:af:90:a8:74:3f:de:54:cc:
4e:3e:4e:68:c6:8f:b7:64:51:16:40:21:77:b2:73:
a4:b7:95:43:4e:52:ba:11:0f:19:80:0e:ed:e6:84:
bf:a9:7e:ac:80:5e:f0:d5:88:b0:3b:96:9a:25:6a:
c5:7a:a2:21:92:1c:42:41:67:f8:99:a6:d5:32:80:
7d:f1:83:a5:53:c6:a5:ac:16:16:11:33:17:f4:0a:
d1:fe:56:ee:b3:87:b2:52:15:11:5e:56:b3:e2:73:
34:e9:1c:2e:e4:5d:c0:eb:ff:1e:6f:d1:0b:2c:f0:
39:cb:9f:59:b3:3f:95:fb:40:1a:c4:0a:9a:ac:44:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:34:01:59:A7:CF:97:6F:D3:D7:FC:60:30:78:BF:4A:DB:79:76
X509v3 Authority Key Identifier:
keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:27:29:94:59:23:0d:5d:6f:4a:96:fc:bb:03:66:e5:04:9b:
ac:2f:56:e7:6a:41:45:ee:b0:d8:fd:a8:18:a3:99:3a:14:82:
38:e6:81:93:e8:63:7a:ce:40:94:41:3e:27:06:ab:d9:76:1d:
91:e1:2f:1c:6f:fc:03:91:74:b4:5b:9f:cc:d7:fc:e4:cc:04:
84:4d:65:00:c7:9c:54:8e:45:32:ba:5c:a4:99:2b:fc:61:e9:
a1:3b:98:70:49:59:b3:ca:21:ed:14:18:c5:4d:ac:65:29:70:
e4:5c:6b:7a:17:37:68:7f:01:b5:49:9e:03:e3:de:a1:4a:4c:
5b:93:e7:8d:89:db:e8:01:2c:4d:be:00:77:8e:19:cf:c6:7d:
c1:9a:e2:07:ea:01:f7:a3:92:3f:d0:b4:1f:ed:2d:53:ae:c6:
04:fc:07:08:bc:a4:e9:6a:f0:02:2b:ee:76:92:96:7c:4c:22:
c3:1e:ed:fd:4a:ee:9e:07:0e:e6:9a:78:0d:91:5f:79:3c:e0:
22:97:b6:8e:60:27:af:12:65:f2:b0:56:a8:47:5e:0b:02:b2:
0b:b2:79:55:77:0b:f7:36:3a:eb:30:1c:29:aa:67:f8:c6:6a:
28:cc:38:bf:d5:a0:de:43:45:b0:cd:7f:e5:24:f5:67:d1:0e:
30:6c:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:11 2025 by rpki-client