Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
File: pcvT2g02IF_SyP0d-VXFC1UB7dE.mft (raw, json)
Hash identifier: S69x1YiCy9GpyKuz4HNpDO1CsvHNfDntfzTDHj6NA2w=
Subject key identifier: FB:55:4B:37:53:5C:24:68:70:BA:48:F3:6B:D8:2B:40:8E:DC:E4:D3
Authority key identifier: A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1
Certificate issuer: /CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1
Certificate serial: 019922FA1E34E1796787E8B839D5B7865B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
Manifest number: 011E
Signing time: Sun 07 Sep 2025 07:00:40 +0000
Manifest this update: Sun 07 Sep 2025 07:00:40 +0000
Manifest next update: Mon 08 Sep 2025 07:00:40 +0000
Files and hashes: 1: pcvT2g02IF_SyP0d-VXFC1UB7dE.crl (hash: k6ku5MOUpqOmJpsSJqgMLUPgJS7D8KbwMe7cui+5rzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1e:34:e1:79:67:87:e8:b8:39:d5:b7:86:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1
Validity
Not Before: Sep 7 07:00:40 2025 GMT
Not After : Sep 8 07:00:40 2025 GMT
Subject: CN=fb554b37535c246870ba48f36bd82b408edce4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:51:36:f6:49:3a:40:86:72:c6:67:df:40:
81:c3:02:4f:c3:09:88:a6:2a:d4:73:85:7d:ef:72:
19:46:04:8b:2d:24:cf:2b:9b:14:2c:3f:de:56:ae:
f6:8f:53:b5:2c:ff:5c:69:d3:43:5f:fe:32:07:5a:
6e:46:e6:6c:0e:dd:4f:c7:28:95:fa:7c:c0:a1:c9:
e3:5f:1e:09:51:a0:66:60:5f:42:14:d3:47:99:f3:
28:a7:0d:ed:e4:47:71:d5:1f:01:90:2b:aa:4d:ba:
45:0c:88:81:16:2d:53:12:20:9d:6a:13:80:ad:a6:
84:a2:d9:a5:53:0b:88:cc:71:f7:07:80:2c:20:b5:
0b:07:fb:60:9b:d6:55:5e:e8:81:30:ad:e4:66:2f:
72:ab:dc:e4:78:05:c5:c2:60:f8:56:36:b6:5c:26:
8b:2a:cf:1c:3a:fc:8a:10:49:d7:e0:ab:f4:9f:4b:
dc:de:8f:b1:65:51:df:07:44:15:f7:89:a6:ee:3e:
84:be:1c:85:1b:45:d3:9c:7b:78:7e:9f:b6:92:d6:
72:c1:0e:d3:40:07:bc:d9:a1:0b:1e:ee:68:29:fb:
9a:dd:a3:81:d2:ef:3b:71:9d:68:32:18:2c:64:08:
9a:98:97:99:7c:e0:0c:91:5d:a2:81:70:d6:0e:05:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:55:4B:37:53:5C:24:68:70:BA:48:F3:6B:D8:2B:40:8E:DC:E4:D3
X509v3 Authority Key Identifier:
keyid:A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f0:03:c2:9a:44:0b:b7:53:a7:ff:1f:7b:bf:34:51:8e:fd:
c9:11:8c:8b:99:bf:20:7e:df:d6:c7:cd:96:f1:a8:da:60:99:
55:0a:f1:b7:73:76:d9:d5:aa:87:ea:c6:dc:51:e7:11:03:ef:
c7:62:99:84:3d:d7:ba:77:8a:1b:2f:f1:ae:49:33:b4:18:62:
b3:34:26:7f:16:91:b7:9b:2d:b8:cd:a4:7f:4e:c9:e6:fa:8f:
06:1a:37:c6:f5:3e:11:2d:a0:3f:3e:64:7b:85:2e:07:a3:53:
3a:5b:c1:4b:d0:97:e4:c6:13:fa:b1:00:4f:8a:ca:ac:37:8d:
e1:d0:89:54:ca:91:fc:a6:cb:84:1f:61:4e:63:8f:de:01:82:
83:c3:3c:86:51:d7:fb:bb:d9:3f:12:51:eb:82:78:ba:2d:5f:
f6:79:51:07:1f:86:97:9c:a0:ea:19:67:a0:c3:0d:2d:18:ec:
05:5d:ba:70:6d:ec:4e:d7:0b:c0:7c:10:4a:f2:c5:cf:b8:ca:
90:45:de:11:2d:9b:76:b4:14:85:91:54:00:e2:67:c8:a1:9b:
6c:4b:0d:7b:ba:85:3c:c6:a4:6f:39:66:fc:e8:f8:62:16:1b:
13:6c:04:b1:4c:76:8a:41:e2:e9:38:7e:14:6a:75:6c:49:4e:
43:c5:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:29 2025 by rpki-client