Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: mHgjq3j2Y42iCc6ZjMEhVW3dOiUXvjeAnLwp1uqT+6Q=
Subject key identifier: F3:2B:E8:79:81:FA:5E:00:AD:53:A5:DA:06:D2:DB:DD:D1:C4:18:68
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 0199228C90C4FDB218FD21055BD67EE7A972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 0545
Signing time: Sun 07 Sep 2025 05:01:01 +0000
Manifest this update: Sun 07 Sep 2025 05:01:01 +0000
Manifest next update: Mon 08 Sep 2025 05:01:01 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: qlT24I6pVNPoymMPZphOJ69DLAOXB9ooO7cfEMtuIiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:90:c4:fd:b2:18:fd:21:05:5b:d6:7e:e7:a9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Sep 7 05:01:01 2025 GMT
Not After : Sep 8 05:01:01 2025 GMT
Subject: CN=f32be87981fa5e00ad53a5da06d2dbddd1c41868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:13:0c:4f:21:f1:1c:a9:d9:97:ed:7e:60:
02:d3:d7:fd:ed:98:ad:03:cb:fe:af:b6:44:3f:8b:
b8:46:86:a2:79:d4:91:e5:2b:f7:38:b1:2d:da:26:
bb:e5:6f:87:0f:d2:ec:9e:af:74:0c:c8:d9:78:55:
07:e7:c0:9c:d8:66:92:9a:e3:7d:5f:0a:bd:1f:3d:
79:eb:4f:b6:b2:c6:af:e4:b2:ea:a2:f3:87:38:cc:
78:f7:e4:f0:42:a0:f3:ee:24:67:82:32:88:4b:5c:
98:1f:e2:5e:18:c4:24:7d:26:a4:71:8d:71:62:04:
af:23:c1:fe:3f:d4:97:6a:1f:a0:df:d5:93:4d:85:
d9:ca:ce:a9:c8:5f:9a:7f:17:07:97:7a:01:02:f5:
fe:cc:87:7f:e9:3a:a1:2a:76:f6:ec:61:42:37:1d:
e0:cb:25:66:4a:ef:35:70:27:b1:d1:fb:b6:c7:df:
b4:93:1a:40:d8:0f:3d:20:97:a2:0e:14:a6:e3:bb:
69:67:72:6a:9f:78:2e:84:31:c9:3f:72:d5:57:23:
b6:14:f5:bf:87:54:b5:72:a8:23:d1:7b:8a:32:f8:
99:a1:a0:a1:60:d9:de:40:4d:d5:64:28:17:80:db:
89:85:0c:8e:02:ca:c5:2b:ba:f8:52:66:2f:d7:e9:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2B:E8:79:81:FA:5E:00:AD:53:A5:DA:06:D2:DB:DD:D1:C4:18:68
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:da:93:7d:e6:3d:62:9e:ce:ad:2b:7a:44:0c:ee:5d:9a:2a:
21:da:b0:25:52:7e:d2:e7:68:5b:b5:8e:71:60:0b:dc:e3:fa:
4a:9d:b7:2b:b2:b1:7e:51:9c:7f:fb:61:ae:1b:3d:cb:83:20:
b8:c5:fb:8e:5f:85:a3:df:64:58:0b:6e:ea:97:f6:df:df:4f:
db:87:80:fc:06:cb:f9:72:78:56:9c:49:d4:54:9d:4a:54:8d:
c5:cf:08:2a:e6:7f:f4:db:09:42:48:a5:40:92:63:b4:61:e3:
66:13:8c:f8:8a:9e:6c:39:d1:dd:39:a8:e5:2d:bd:91:8b:e8:
05:9d:21:49:3f:4b:88:4c:a6:3c:a6:6e:8f:3c:73:a2:3b:10:
54:a4:01:35:cf:7e:51:e4:da:f8:96:a2:6d:f8:77:15:17:1a:
5e:5f:7b:36:be:2b:31:1f:f4:e5:9d:a2:7e:63:42:32:73:13:
4f:0a:27:e7:5c:3f:01:0b:e8:9c:48:b5:b1:61:00:e3:8c:97:
8b:19:ea:cd:65:c3:31:0c:5d:17:cb:c6:f4:d3:c0:21:0c:28:
6b:5d:73:2d:f4:56:16:a8:3a:47:46:1c:d1:8b:1d:e6:98:00:
f5:a5:72:47:c6:7d:2a:45:5d:f3:2c:52:d9:4a:0c:24:71:0b:
fe:3a:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:22 2025 by rpki-client