Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: sL9FqBpzZRDj6z9d7PGNE9fZb/mN33SUwvKNBv5+png=
Subject key identifier: 66:47:B8:BC:09:5A:A0:F9:51:96:67:DE:25:D7:3C:33:A6:92:CF:FD
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019A71B78B8A796EAB46594DF68F6444CE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: tYauPNqSA1ZtrEUtFzkUXCKZDJ3vNJUEsqQ6YljQG8o=)
2: yxseiDrTDKkfKumKkJUQ-S699SM.roa (hash: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8b:8a:79:6e:ab:46:59:4d:f6:8f:64:44:ce:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=6647b8bc095aa0f9519667de25d73c33a692cffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:7c:66:e7:b7:50:5f:53:00:4e:0c:c3:64:
f6:e4:e7:67:2b:35:cf:37:2e:81:13:bf:8c:cc:9f:
ae:b0:9e:d0:93:e2:48:99:d0:30:73:ee:90:b8:5c:
f7:4e:06:91:9e:10:b0:67:14:36:9d:48:13:eb:7f:
15:50:3f:c2:04:85:c6:d9:a2:4c:de:fe:97:84:4e:
5b:6e:00:fa:89:06:52:fc:82:f9:c7:66:d5:42:de:
dc:8c:1b:44:ef:a2:db:d3:c0:2e:30:12:50:92:cd:
bb:c4:d6:34:32:84:09:22:13:db:fb:79:e5:6d:0b:
51:3e:a9:83:8e:94:36:8f:cb:93:2b:04:03:e9:87:
cf:e7:e0:9c:ce:8b:d8:83:23:54:2c:11:ac:e5:57:
ae:b1:e3:a5:e4:f2:e3:d1:4b:df:81:87:70:07:f2:
f5:4d:ca:ff:f0:9a:97:ea:6c:18:12:82:7d:e5:d1:
a7:e0:3d:75:ed:18:66:78:fc:f1:6d:d2:6d:c5:bb:
fe:1b:cd:c5:5f:d8:43:f9:25:e4:56:9b:12:68:71:
ad:e7:d2:55:6c:bc:9b:21:5f:18:c2:a2:99:2c:dd:
0c:41:aa:8a:b0:7b:ee:2e:bd:de:9a:e5:46:ef:20:
c4:18:04:54:af:fc:93:2e:24:88:4b:95:a1:03:96:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:47:B8:BC:09:5A:A0:F9:51:96:67:DE:25:D7:3C:33:A6:92:CF:FD
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:95:25:2f:36:62:6d:1b:97:3d:37:3b:b7:57:93:bc:9e:36:
b5:b7:b2:ba:15:e0:aa:fc:18:af:1f:45:0e:1c:98:4d:3a:69:
d5:05:23:98:e4:5f:cf:89:e7:6a:1a:06:75:66:d8:fc:82:04:
b9:d9:e6:2e:34:76:1c:55:b3:0a:a6:e1:0f:d5:11:3d:9b:a1:
85:7c:a6:ce:a7:73:b8:27:07:25:15:72:a9:0f:66:7b:8b:ef:
70:59:da:7c:fc:7d:14:5d:c3:9d:10:22:05:13:78:43:45:4d:
87:bc:b3:78:60:f6:be:28:11:3d:3d:92:42:f5:20:82:6d:cb:
14:f0:26:96:f0:99:39:99:0d:5a:42:8a:3a:77:dc:c3:36:5a:
62:a8:17:30:a6:8c:08:a4:12:49:80:b5:a5:41:b4:85:54:78:
98:53:b0:47:ca:c5:4a:f5:c7:ec:3a:ae:78:8c:cb:25:0a:76:
3e:43:11:96:99:ae:41:a1:37:94:6d:2e:da:a6:09:2b:d1:23:
49:1b:ec:b2:67:a3:c1:ec:38:23:07:ae:5f:3a:ce:42:d1:ce:
54:78:62:fa:ae:79:22:cc:2d:b3:a4:a7:da:b8:b8:4e:f5:42:
a8:7d:15:cc:b1:66:41:9a:31:38:01:c4:b2:3e:7a:fc:8c:6f:
60:a7:c5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:31 2025 by rpki-client