Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
File: Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json)
Hash identifier: pTO+n+j5V7OpC0LQCdCQ4666NivQEwsMiHHNo7A9NLk=
Subject key identifier: B0:95:AD:18:9D:0F:97:D1:72:28:7C:73:43:B2:C9:34:62:20:74:AE
Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
Certificate issuer: /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Certificate serial: 019A725C7DC73958D3A1D528608F6F660D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
Manifest number: 073B
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: uKyNJdIamBVVXHEBMbWd61JZr8qbB5CaDlW/7sdiPM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7d:c7:39:58:d3:a1:d5:28:60:8f:6f:66:0d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=b095ad189d0f97d172287c7343b2c934622074ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:e2:84:ec:55:80:08:b7:90:29:58:e4:98:
f0:71:bc:6e:6f:79:e3:c5:eb:82:7c:4f:9e:b8:6e:
f2:fb:00:63:5d:bf:ba:d5:25:d5:dc:ee:e2:cc:8b:
eb:66:bd:8e:a9:0d:75:c6:41:a1:c6:64:40:f4:25:
df:03:91:c4:d9:16:88:92:df:98:09:30:a9:29:98:
fc:18:a6:e0:5f:ec:a9:c1:6c:cb:04:bd:c1:df:4b:
92:cf:56:8f:60:d8:c5:80:0b:dc:6d:4d:3e:5b:76:
29:43:a6:78:51:5b:d6:62:5f:51:0d:fc:38:19:25:
53:72:a7:ca:f2:8b:d2:87:2d:07:ad:7e:e5:f0:70:
a7:c6:25:e3:79:73:1b:82:d8:f2:8a:b9:99:d7:2f:
4e:a9:e7:26:7b:2f:e0:e8:5f:c2:27:6f:bf:47:d2:
60:8f:5a:2b:b9:ad:15:b9:b1:60:e8:39:bd:43:ea:
d9:70:e6:23:fd:69:55:0d:6b:25:26:ca:39:e3:c4:
b8:0f:d0:7f:10:64:e9:3e:16:2d:76:0e:a5:32:db:
49:30:1b:0d:0f:eb:96:01:59:ad:87:ed:a0:bd:4f:
86:be:59:a6:04:54:86:08:62:23:24:91:5f:60:7a:
30:88:10:f6:47:b5:bf:68:3e:ff:9a:ac:83:42:4e:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:AD:18:9D:0F:97:D1:72:28:7C:73:43:B2:C9:34:62:20:74:AE
X509v3 Authority Key Identifier:
keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:01:9c:28:24:19:e3:e3:b4:2f:62:61:b7:e8:6d:9d:32:93:
f6:7c:fc:1b:be:46:d0:ab:45:73:ab:42:36:aa:19:be:19:0c:
4e:41:cc:1e:c2:f7:28:0b:49:9f:a7:02:a2:9b:be:53:03:1d:
60:8b:6e:65:52:81:58:a8:6a:6f:34:dd:b1:2b:df:cc:83:f2:
30:d4:5b:e3:f6:58:c6:5e:a1:c0:c7:14:c1:65:81:bb:ff:36:
90:69:06:c0:dd:56:ae:25:ad:d0:6d:63:8d:1d:56:0e:55:bb:
c4:e8:7a:c2:0e:6a:66:89:80:7f:ba:a5:1a:c0:34:42:a8:6f:
a3:d2:6c:e2:5f:1a:af:0c:e0:16:35:3f:b3:7d:4b:59:57:a3:
09:21:07:b7:4b:5f:00:48:4b:8f:77:87:74:96:ef:b4:6b:ec:
0b:2c:e1:85:d0:c0:b3:ca:4c:31:86:f7:26:c5:c1:1f:c3:a2:
07:b6:bc:e6:48:77:a1:4c:e1:66:d0:13:9b:ab:c0:5a:2f:1b:
0c:8a:ac:98:10:ed:6d:88:57:02:6c:ea:0b:69:bf:6a:24:7d:
33:5a:01:04:c1:a0:e1:d6:9e:c9:ec:cd:eb:3b:d0:29:5d:c5:
93:63:6e:47:d7:13:7d:a5:86:19:c5:b0:0c:26:9c:59:f5:db:
68:7a:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:43 2025 by rpki-client