Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: 9sUk/myJbgtjtTwm4VjKUrk3ZZ0fqJOo/cHoHfLKXbQ=
Subject key identifier: 32:BD:8E:A1:CD:99:D6:EB:63:D8:43:30:2C:A8:B8:69:91:39:D0:DC
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 019A70A59938A909E3FF6D1C4EAD0D4CB4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 05F2
Signing time: Tue 11 Nov 2025 02:01:32 +0000
Manifest this update: Tue 11 Nov 2025 02:01:32 +0000
Manifest next update: Wed 12 Nov 2025 02:01:32 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: qx8DSoSmygHN5RzH5DA8rpoyuKEpD7ybWkODqdTwYJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:99:38:a9:09:e3:ff:6d:1c:4e:ad:0d:4c:b4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Nov 11 02:01:32 2025 GMT
Not After : Nov 12 02:01:32 2025 GMT
Subject: CN=32bd8ea1cd99d6eb63d843302ca8b8699139d0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:54:33:04:41:1b:7b:2f:b3:f7:63:0f:4c:
fb:6f:67:9d:5d:87:40:a8:16:90:71:65:21:db:be:
6b:a4:09:8b:52:ee:8b:14:2d:fd:4f:ae:9e:d7:c0:
b8:47:3f:ee:cd:02:9c:67:9a:6d:70:16:d7:d9:af:
e3:a2:4c:46:38:25:74:2c:61:10:53:59:61:04:e7:
23:64:4d:ce:82:11:76:cd:95:7d:98:03:ab:82:0b:
25:9a:31:18:d2:bc:c5:7c:c5:ac:ff:94:15:ed:8d:
b6:09:8b:ce:f3:74:2a:87:d4:65:24:0d:86:f7:5b:
d8:53:1d:4a:de:c5:25:08:97:4b:f5:ae:ff:9d:3c:
b9:a5:4d:01:da:b0:17:32:6f:4a:6d:0e:6d:53:5f:
5d:ba:db:ca:0c:ad:ea:44:68:a2:3e:f1:46:29:fb:
63:f4:8f:96:00:e7:b4:8f:f1:d2:ef:9f:96:15:cd:
ed:61:de:96:22:4d:50:9b:96:57:c0:0f:34:09:8a:
b7:1a:6a:12:d2:03:03:cc:9f:ce:bc:cb:e8:c5:4a:
37:3d:e8:b9:c0:b0:80:e8:13:08:f8:d1:5d:4e:83:
1b:4e:47:ee:91:d3:a1:bf:ff:ea:14:f6:a0:10:c0:
ce:c8:7e:1d:14:15:56:1d:7e:ad:c7:5b:3f:5b:a3:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:8E:A1:CD:99:D6:EB:63:D8:43:30:2C:A8:B8:69:91:39:D0:DC
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1d:39:2d:01:58:ff:1c:96:85:a6:31:d9:49:83:3c:e9:fb:
8a:6b:e4:64:92:9f:ac:63:b6:3f:dc:44:82:69:dc:f2:5e:4f:
39:d4:19:22:79:d5:f0:af:f4:26:35:d0:55:49:03:2b:a7:d4:
7a:2b:04:9b:f0:54:4a:6c:07:5c:4d:e6:0d:74:0b:24:90:7f:
e5:16:21:a4:8c:52:8d:19:85:4b:2c:63:84:7b:a1:28:ad:24:
7b:c9:f3:9b:31:34:18:8d:18:3e:92:f1:6a:48:e0:7a:a0:b4:
a1:40:5e:95:0e:0a:62:70:5e:96:9d:78:ac:9e:f0:bb:96:4a:
9e:f6:89:85:bf:89:4c:e6:50:34:a9:a9:a2:0f:66:89:54:08:
a5:b2:f0:2f:72:60:b0:66:93:35:2f:8f:d4:4f:a6:9a:47:ba:
fa:7a:0b:4c:b5:ad:04:71:5b:d6:46:99:82:5c:35:eb:f2:78:
3f:d5:3e:8a:eb:be:15:4b:88:09:89:a8:b4:87:3a:4c:de:e6:
b5:e4:73:c6:54:1c:7a:b0:71:29:c9:94:41:b9:99:a9:28:83:
97:21:68:f4:62:62:e8:ec:1d:ae:17:f7:29:b5:2d:c4:20:18:
1d:d6:5f:f4:c4:e6:b4:52:48:aa:57:49:48:1a:d3:14:b1:ae:
51:5c:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:57 2025 by rpki-client