Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: 9bNUeYuIAXM0stQwozjnFlfpKDy+w104SP7a+b3M0NI=
Subject key identifier: 68:8B:01:49:12:17:DF:A1:3A:67:43:F4:77:D1:93:38:CE:2F:30:3F
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 01991808B6D8A5106B156E14CC027DF3A0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 1667
Signing time: Fri 05 Sep 2025 04:00:48 +0000
Manifest this update: Fri 05 Sep 2025 04:00:48 +0000
Manifest next update: Sat 06 Sep 2025 04:00:48 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: VOnL7eYSO3UAy3paj2RNPEUj1q6rCEbiMBvT06rI0qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:b6:d8:a5:10:6b:15:6e:14:cc:02:7d:f3:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Sep 5 04:00:48 2025 GMT
Not After : Sep 6 04:00:48 2025 GMT
Subject: CN=688b01491217dfa13a6743f477d19338ce2f303f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:44:31:91:37:f2:0d:e9:e0:9d:81:b8:1d:
8a:ea:10:d4:10:a9:ed:f5:9d:e3:5e:5d:db:e0:b5:
40:c1:5b:e4:1a:33:76:51:35:e2:e0:db:7a:af:7a:
83:0c:de:db:18:04:1e:40:16:01:ff:93:db:3d:ed:
76:07:b2:40:07:01:ff:3b:92:bc:d4:cd:d8:e0:bd:
48:41:c2:a3:3f:f4:3f:d8:25:59:b1:cc:40:49:43:
24:c3:8e:07:5a:56:13:1c:0b:8f:ea:96:c4:bc:89:
74:40:71:97:4a:a9:0b:81:77:7b:cd:6b:62:c7:16:
42:49:36:ae:3b:8d:eb:7f:fe:5d:b1:25:45:81:3c:
96:88:4e:e2:13:c9:4d:98:d8:07:8e:5f:56:8a:00:
fc:73:d6:c8:52:94:06:d4:fd:3d:53:4f:11:22:c2:
a7:0d:59:40:de:92:83:1d:f2:c6:46:d7:d1:07:6b:
8d:50:50:b7:d0:8d:96:86:ed:96:03:42:34:37:2b:
60:83:f5:c9:9a:33:3f:33:98:c1:dd:f7:b5:07:ca:
9a:d0:8c:62:f9:95:81:ae:07:c2:59:03:d9:07:08:
64:fb:0f:6b:bf:6c:9a:95:dc:7f:4b:fb:6a:ee:38:
d6:1b:ee:c2:24:89:fe:ae:15:b4:c4:23:63:e3:ff:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:01:49:12:17:DF:A1:3A:67:43:F4:77:D1:93:38:CE:2F:30:3F
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cb:e4:20:2e:f4:78:bc:95:32:e5:33:7a:9e:d8:4c:b0:1c:
ab:67:ab:02:42:46:66:64:20:fb:1a:e7:d1:f4:35:e7:dc:d2:
3d:b5:6d:da:06:d2:df:4b:d6:6f:92:fe:10:98:6e:12:ff:61:
db:bd:50:f8:f3:94:a6:a9:f4:2c:35:bb:39:cf:12:74:93:d8:
0d:ed:14:1f:ec:b0:89:f2:d4:d6:1a:74:d6:bc:25:24:66:43:
3e:70:e5:af:e6:bd:08:c4:4e:a0:60:01:1e:44:8c:e1:ea:51:
aa:cb:9b:fc:e0:e6:86:bc:86:1c:2f:47:db:4f:58:9f:03:76:
61:56:42:94:a0:35:57:b6:b6:1f:11:96:72:0a:2c:62:14:12:
ca:5d:3f:23:7c:c0:f7:48:88:d8:59:20:5c:6d:62:dd:57:06:
6c:5d:a6:f6:c1:1f:f3:9b:77:cb:cf:b9:33:88:db:d5:14:d3:
22:c5:93:8d:65:e4:a0:f5:e6:fb:0d:6d:c2:bf:91:55:c0:98:
87:86:90:7a:8e:3b:dc:59:88:c0:4e:b8:55:6e:c1:fc:5f:f2:
37:09:c5:a6:a6:8a:a7:50:d2:cb:43:57:f8:14:d0:03:1a:e9:
bf:32:8e:a6:b3:7d:9d:d1:ba:8e:33:d8:5a:d4:2f:4a:d7:83:
fe:c1:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:52:49 2025 by rpki-client