Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json)
Hash identifier: 2rDGHlXKZMiHt7Ft9SkIabTRpwpih8+4GYfiYvXLFs8=
Subject key identifier: BD:0A:A8:48:40:64:63:25:BF:9A:44:3F:74:A2:8C:89:3D:FE:A1:01
Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Certificate serial: 019A7149DB26A4565DE3812CB3B92543E360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
Manifest number: 08B1
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: w5C/2OHHJn4DyqtfhAkpNQQLXQW3vXRTTqJNi1sJ1eE=)
2: nV3wzH_1I5VE4qLJ5nCrt9MPHjQ.roa (hash: db3hfBEW1jL4gbyVu0D2s50T0rgPqR4B0mvJEYFg7lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:db:26:a4:56:5d:e3:81:2c:b3:b9:25:43:e3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=bd0aa84840646325bf9a443f74a28c893dfea101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:b7:1f:36:14:f5:15:ef:af:a5:0c:88:2e:
88:e9:a2:7a:e5:24:8e:66:c7:8b:dd:7e:2d:9f:58:
5b:6f:6a:6d:54:39:0b:b3:46:6b:13:09:71:0a:7d:
37:8b:87:88:88:75:4c:7a:07:c9:fe:8f:cf:fb:86:
b9:27:33:a5:69:c2:7f:49:26:6d:a5:d5:b7:73:47:
bf:c6:a9:ca:72:92:52:20:18:2f:ab:b2:bc:6f:90:
5a:86:8a:62:e7:d7:c9:ea:45:fc:75:4f:90:0c:20:
2e:0f:6d:9e:c3:4d:94:5e:b1:4f:05:85:61:f6:d3:
b7:93:41:24:ea:6e:ab:e2:ef:92:79:fe:3f:ad:08:
f0:5d:b4:a5:80:46:e8:eb:bd:13:09:7e:1a:14:7d:
f7:b6:7f:cd:63:79:b3:b2:c3:75:c8:48:9b:b8:ae:
9c:50:9a:8e:bd:d5:98:1c:5c:99:94:78:3a:d0:4b:
12:c2:00:bc:2f:98:e5:98:82:4d:d5:e7:cd:0d:37:
90:c6:7d:6d:7f:c4:49:3f:ad:a7:36:e9:b0:03:c1:
bc:8c:fe:95:a0:53:79:28:47:b6:2e:d4:54:92:54:
6a:ff:ec:a6:cc:bd:29:a9:fe:a4:f2:df:07:e1:f6:
e1:4d:64:47:ec:ab:74:a3:9a:71:98:2d:fa:02:64:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:A8:48:40:64:63:25:BF:9A:44:3F:74:A2:8C:89:3D:FE:A1:01
X509v3 Authority Key Identifier:
keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9c:9a:62:aa:1f:53:8a:23:69:cb:8a:ef:67:31:e6:93:be:
97:cb:69:18:f2:ce:cc:ea:b7:58:d6:64:4a:17:15:32:36:9d:
99:a9:94:82:09:40:76:78:c4:9c:c0:cb:99:f0:39:fd:c2:5f:
d8:7d:85:b7:a1:d7:a1:d7:fc:2f:6b:62:65:0c:78:5f:f2:26:
d4:72:f0:b3:c5:f2:c0:31:e4:ed:0e:12:5c:09:6a:bb:e6:bd:
af:a8:6b:04:d5:5d:1c:98:c6:8f:94:86:1d:be:6e:d6:d2:62:
2c:49:ee:dc:c8:19:8a:55:f9:4c:c9:f1:88:6b:91:da:81:93:
a8:0c:c9:43:c0:7f:a3:f9:8e:7c:f6:2d:98:05:bf:a3:76:4e:
95:0e:f7:a9:13:e0:e0:3a:db:91:6f:47:e4:34:3b:49:15:3c:
37:73:4e:60:dd:c0:11:68:32:30:cd:04:71:c2:ee:fa:4f:10:
e6:d0:71:dd:0f:a8:02:77:78:48:88:e0:fc:5c:d0:9d:34:0f:
01:ce:06:fa:5e:49:2f:d1:46:87:51:7f:c7:98:f1:63:5a:1b:
43:d1:1f:11:7d:dc:9a:3b:44:21:28:0f:2a:1e:0a:9c:1d:32:
31:bd:4a:56:cd:7d:7d:89:15:fd:dc:51:e3:46:ef:8b:14:76:
02:79:69:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:58 2025 by rpki-client