Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: ahqi3Dk1XfQIHkrMleGp4vc0Dko9WBmMdfJ/u++qJRI=
Subject key identifier: A0:0D:14:EE:2A:35:FB:CC:30:60:4B:88:23:B1:1A:0D:23:A9:25:95
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019A258AA1E1412C72ABB4A9969CA27FAE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0E3D
Signing time: Mon 27 Oct 2025 12:00:33 +0000
Manifest this update: Mon 27 Oct 2025 12:00:33 +0000
Manifest next update: Tue 28 Oct 2025 12:00:33 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: fSu8R2rT/dUb4eFB4W6HJmXm3L8kt53D5RxEWtEueiQ=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:a1:e1:41:2c:72:ab:b4:a9:96:9c:a2:7f:ae:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Oct 27 12:00:33 2025 GMT
Not After : Oct 28 12:00:33 2025 GMT
Subject: CN=a00d14ee2a35fbcc30604b8823b11a0d23a92595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:e8:81:0e:31:0b:f6:d2:57:28:20:ad:93:
2b:d6:29:08:70:ed:48:ee:50:b5:a1:61:7c:a0:89:
6b:3f:7a:89:a8:11:82:3b:83:0f:29:f9:9c:26:d0:
35:b9:1f:bb:ed:a4:e0:e3:43:0a:27:e5:0b:25:d7:
fa:99:83:0e:56:5f:00:5f:8c:bd:e7:52:80:1a:17:
08:6a:67:63:27:ab:e7:b9:31:45:93:f9:cb:67:f3:
ff:61:d4:4c:05:af:41:81:51:fa:a7:08:20:f9:32:
87:52:ef:bd:74:5c:fc:c5:83:01:df:7b:33:b1:39:
fd:ed:de:b4:22:aa:76:e4:2e:ce:37:30:d5:dd:4c:
73:3d:88:de:58:fe:6c:71:bb:03:73:52:48:f1:39:
6d:ac:e5:a1:fb:c4:f8:3b:9a:1d:de:c3:03:47:14:
48:f3:60:dc:2f:92:00:88:cf:d3:59:07:9c:3f:5c:
79:9b:ac:37:84:d5:0f:f7:dd:a4:9e:34:b5:87:c3:
9e:79:be:7f:0a:5f:ce:03:36:10:0c:97:94:d0:71:
bb:6c:52:44:93:bf:0e:f3:b9:07:f6:b4:f1:f7:b4:
09:8e:08:e2:4d:b5:fc:29:70:a1:1e:a5:1f:c9:ce:
6a:0e:20:7c:db:c3:2e:e5:2b:c5:b0:07:0c:58:e4:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:14:EE:2A:35:FB:CC:30:60:4B:88:23:B1:1A:0D:23:A9:25:95
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:aa:23:ee:83:29:b2:bd:87:b7:54:47:46:d1:20:00:b0:2a:
f5:1c:61:10:b7:08:8f:a5:5f:00:2b:46:31:ed:d8:74:9d:9f:
49:41:f0:7c:45:61:dc:d0:7d:18:20:cd:43:b3:df:6c:1c:5d:
92:67:23:e0:84:95:2f:95:9d:32:33:0f:fb:0c:a4:07:8f:eb:
da:70:84:6c:33:6d:b6:1d:88:de:1e:88:47:5d:55:c8:72:44:
5b:24:6b:8e:77:0d:95:44:d6:90:8a:72:d8:65:2e:60:31:60:
b2:ab:0d:a5:c5:ff:a6:02:e8:49:12:d6:5f:90:ee:f6:f1:40:
93:13:cc:ab:61:cf:a9:d8:3d:a4:36:7a:0f:74:ab:ae:48:82:
78:85:f1:ff:dc:09:b7:1d:fe:06:4b:2b:61:76:af:c8:cc:4f:
74:43:68:dc:7f:10:5e:a0:7a:74:f0:27:eb:a9:f2:0a:94:71:
0b:da:13:81:81:f2:63:78:a1:77:02:a9:1f:55:f3:c7:d0:7f:
38:68:de:52:2f:f3:3b:0f:b8:d0:af:33:30:14:99:af:94:f6:
81:73:7e:f1:e9:70:bd:b5:8f:e4:fb:27:9f:0d:4b:95:20:68:
87:f0:46:5b:81:e0:92:18:0e:58:7a:2a:f0:2b:40:a6:20:2b:
15:68:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:44:01 2025 by rpki-client