Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: M1xCRFmVzMJKcUfkEq/CtZP7xVZShbrLGROz6pJAItU=
Subject key identifier: 11:DC:55:29:9D:1C:DB:B7:EB:2D:0E:0F:6B:98:26:B0:13:06:40:E9
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 019A725C889E194E1DAE0487FE5E97DDCDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 141D
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: Ovtc+0pAcoVNEvF/jtJTkv0NvzOWOgceEDaIsyaoPFU=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:88:9e:19:4e:1d:ae:04:87:fe:5e:97:dd:cd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=11dc55299d1cdbb7eb2d0e0f6b9826b0130640e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:8f:5b:58:57:45:d2:f9:d5:3c:5e:37:97:
e2:74:e0:5e:74:e7:73:a6:7a:67:2e:4f:a0:bc:2c:
95:6d:02:10:85:9b:bf:fc:6a:bc:55:73:1a:28:64:
69:d4:cc:a8:74:c2:71:05:e4:a0:95:f5:6c:39:9e:
e2:89:42:66:a9:3c:25:fb:b2:12:11:87:34:15:6d:
7d:43:b5:ce:e1:55:ac:a5:6f:bf:6e:4e:eb:7b:95:
14:09:a0:23:0a:03:a2:de:a9:e7:f7:b9:fa:bd:72:
17:3f:09:b4:c8:39:47:c9:ca:87:b7:cc:14:d0:94:
93:af:7e:fa:c3:bb:72:be:c4:76:ee:ea:34:2d:70:
f2:34:2d:4d:16:b4:f6:e3:b9:b3:07:2d:ac:bc:f2:
27:6e:db:2f:74:99:5b:43:b0:b7:d1:5b:64:df:66:
a4:c0:fe:25:d8:0d:80:23:2b:11:f9:92:1f:53:89:
f9:d4:71:04:ac:f0:8e:ce:0a:40:5b:0f:b9:b8:b8:
a3:89:f1:ed:1f:27:87:3c:e8:c4:5d:d2:53:09:bf:
e1:58:9f:78:bd:df:9e:ff:fa:f6:d9:99:5e:01:99:
ca:cb:13:01:c2:9a:93:cc:73:28:45:08:c7:4e:69:
06:f0:72:a1:fe:2d:f0:11:ff:cf:5a:f3:4a:39:34:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:55:29:9D:1C:DB:B7:EB:2D:0E:0F:6B:98:26:B0:13:06:40:E9
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:46:3b:59:d0:9b:2e:0c:8c:df:d2:d1:2f:96:20:ce:87:43:
95:3b:08:38:24:b9:8d:e5:67:63:b7:7a:29:37:8c:40:3e:5e:
2c:f1:d4:a3:71:77:11:60:10:40:bd:51:0b:f3:0e:95:57:a0:
b1:50:dd:68:b5:c2:36:3c:82:18:88:59:e2:d5:f7:88:0b:37:
75:4f:6b:3a:00:23:dc:3e:aa:44:fb:df:ff:40:42:ec:0e:a2:
42:28:d0:7d:29:1d:05:e4:f5:e8:83:71:3e:41:e4:6f:ff:d6:
df:00:a3:fe:b4:f0:a5:21:69:f5:66:5e:38:ba:4c:75:d3:38:
94:bc:d8:5f:67:59:54:d4:79:75:b8:cc:46:c7:26:a0:ec:57:
ad:10:bf:77:c2:fc:6d:3a:bd:b9:7c:57:fc:00:55:30:6e:85:
50:25:88:b9:59:f2:9a:02:35:98:2a:77:49:4c:5c:87:ee:78:
73:4b:f2:37:f4:30:e4:40:ce:eb:3e:03:66:84:a6:3b:b9:94:
6e:61:10:83:32:9b:62:8b:85:f6:ab:77:1e:9c:ba:55:6f:df:
26:d8:b1:fc:81:28:40:9d:36:1b:35:15:09:7f:3e:6d:ee:ea:
30:b4:7c:e5:c0:55:c0:92:8a:6d:d4:e9:75:ff:96:cf:fd:0f:
22:85:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:09 2025 by rpki-client