Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
File: PcJAKLjucj8XJvRZUfpc_mteQms.mft (raw, json)
Hash identifier: /nvoE/oRV3u7G3vu0vy/CjPo5KnqntS2JcYLfP7YVwk=
Subject key identifier: 11:79:7C:64:1B:96:20:72:F9:DD:27:88:0F:EC:DF:A5:2F:F1:E1:0A
Authority key identifier: 3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B
Certificate issuer: /CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b
Certificate serial: 019A71136B3FC8E98B8C43B8846788D84698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
Manifest number: 01B3
Signing time: Tue 11 Nov 2025 04:01:29 +0000
Manifest this update: Tue 11 Nov 2025 04:01:29 +0000
Manifest next update: Wed 12 Nov 2025 04:01:29 +0000
Files and hashes: 1: PcJAKLjucj8XJvRZUfpc_mteQms.crl (hash: GB+mRvnuKALQXpzLClu2haFRyH3/QZRmzQPZvFAhbCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6b:3f:c8:e9:8b:8c:43:b8:84:67:88:d8:46:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b
Validity
Not Before: Nov 11 04:01:29 2025 GMT
Not After : Nov 12 04:01:29 2025 GMT
Subject: CN=11797c641b962072f9dd27880fecdfa52ff1e10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:46:d1:17:c0:90:e3:58:f9:1c:4c:0b:48:
8d:fd:3f:9e:49:a1:77:52:51:28:d8:d9:41:17:29:
da:32:1c:61:32:1b:c7:d4:6c:f9:3a:67:ef:c7:d2:
77:85:83:ba:9d:67:af:4e:79:21:48:30:a1:37:81:
77:36:0c:70:16:a3:c9:77:ce:0e:48:d4:39:aa:50:
14:aa:f9:86:1c:f3:a2:73:f9:21:f7:7d:7a:9a:7d:
ba:83:d3:57:15:c4:63:11:da:2e:07:ee:4e:82:d8:
91:81:27:24:53:99:d5:b6:93:24:e5:82:f9:c9:c1:
e3:2f:46:5c:f5:2a:51:9b:e8:94:90:d0:33:17:52:
9e:07:6c:e8:67:09:bb:d0:cc:66:bb:42:44:35:d2:
38:8f:b3:69:59:6a:13:a9:59:c2:5c:92:ea:51:14:
a1:80:b8:dd:46:b7:b3:4f:59:d3:29:92:ed:cd:c2:
a3:df:0c:29:dc:43:26:20:5d:1f:aa:a8:33:85:60:
99:69:12:61:3d:90:10:46:7a:26:9c:ff:6d:d4:db:
32:a0:f7:f9:3d:9e:d2:88:69:3b:50:9d:d6:1e:d3:
b8:5a:80:c3:a9:e9:3a:5b:89:cb:44:34:d4:e5:0c:
f7:8a:11:28:f7:f6:7d:25:67:85:76:01:0d:26:ec:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:79:7C:64:1B:96:20:72:F9:DD:27:88:0F:EC:DF:A5:2F:F1:E1:0A
X509v3 Authority Key Identifier:
keyid:3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:70:ba:76:69:bb:92:bc:42:07:91:37:67:96:43:c6:a0:ad:
16:5b:a9:60:c3:10:f6:84:63:47:f2:c1:f4:61:60:41:a3:c5:
5b:2e:bb:85:ca:7a:9e:f1:d3:1e:2c:36:a7:6f:1a:5b:34:f0:
bd:26:2a:54:20:04:8b:d7:fd:f8:76:a9:32:fd:3f:1e:2b:5e:
00:be:9a:3d:fe:29:da:fd:1d:76:df:c2:e0:fd:d5:19:ac:cd:
4a:18:97:14:93:ca:50:7b:fe:08:d3:b3:98:6f:e2:1f:33:c4:
9f:c7:91:b7:cd:9a:9a:57:18:e3:49:52:e1:aa:44:53:a6:5e:
c7:3e:ea:37:ee:42:e0:45:d7:51:3d:dc:26:dd:6c:f3:98:fc:
08:32:c9:60:b7:aa:e4:9a:db:38:7a:c5:38:e1:0a:5e:53:2a:
a7:3e:ed:fe:f7:2c:cf:8f:c7:bb:9d:4c:8b:33:7e:71:00:c0:
c3:46:a6:35:9c:d1:25:d2:c7:c0:3f:51:ab:d9:5b:33:db:b5:
cf:68:7a:bc:c0:0e:56:30:79:75:a5:f4:e0:09:5f:ba:3f:f9:
89:57:60:51:fd:17:a9:dd:c5:1d:c6:32:56:db:83:99:82:92:
d5:7b:00:2d:2b:26:73:05:8b:35:92:f9:11:04:ed:d6:b5:8e:
54:f4:46:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:41 2025 by rpki-client