Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier: FoxnYN1EzsGGS6jAAKR2m3apyoJSZfNABo90dEU9rew=
Subject key identifier: FA:61:2D:A7:F6:D3:49:E3:46:F1:E6:66:08:18:70:E0:93:8D:61:E9
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer: /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial: 019A2C32B7F26DACA32200C51317BF3F0760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number: 16F7
Signing time: Tue 28 Oct 2025 19:01:52 +0000
Manifest this update: Tue 28 Oct 2025 19:01:52 +0000
Manifest next update: Wed 29 Oct 2025 19:01:52 +0000
Files and hashes: 1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: a9IMXEO4XpIWqVtn6vUhSmZfwlQX1bEf9Xy0A7xgSfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:32:b7:f2:6d:ac:a3:22:00:c5:13:17:bf:3f:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Validity
Not Before: Oct 28 19:01:52 2025 GMT
Not After : Oct 29 19:01:52 2025 GMT
Subject: CN=fa612da7f6d349e346f1e666081870e0938d61e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:b3:3a:79:cd:00:d2:0f:3c:7c:4b:10:72:
f5:ed:dc:51:e0:45:b5:f5:76:e5:74:8f:e1:80:42:
01:a4:af:de:16:2d:23:89:2d:f9:f8:3d:3f:b7:e4:
ef:a2:ad:16:31:cd:8a:0a:5a:ff:6f:86:cf:09:ec:
f2:c3:d5:40:a8:19:bd:cc:29:31:be:6a:4f:a6:b8:
83:5e:66:cd:42:3e:c6:38:31:00:bc:fd:41:9e:31:
14:5d:7d:dd:b1:20:79:71:38:0b:a9:8e:41:85:d7:
14:4c:2c:9a:b8:2d:55:ec:d3:5a:bd:b1:76:4c:ee:
dd:04:72:63:4d:4f:9d:bb:0b:51:d5:96:35:50:d0:
92:28:cd:c1:91:07:58:64:18:c5:b7:0b:d7:51:6a:
a9:78:f5:b2:db:f6:0a:2f:af:7a:4e:8a:6e:fa:fd:
e8:da:36:c3:ac:05:3c:a8:90:e2:14:f5:65:3e:6c:
5a:1e:7c:01:f7:dc:bb:48:90:94:47:b5:cf:6d:e6:
a8:71:cc:1e:e6:5f:18:5e:49:2f:d7:db:92:6c:43:
ec:af:b7:73:e4:fd:8f:7a:9a:df:7e:4b:49:af:59:
16:d6:35:d2:22:aa:21:7f:ba:dd:85:d6:bc:51:9e:
dc:58:50:a2:4b:c6:13:58:0a:65:31:c2:44:6d:b5:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:2D:A7:F6:D3:49:E3:46:F1:E6:66:08:18:70:E0:93:8D:61:E9
X509v3 Authority Key Identifier:
keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:35:60:c9:4d:a1:b9:58:c5:a9:fc:a6:60:ec:b2:81:55:3c:
41:21:64:1a:ea:26:6e:0a:af:71:10:42:39:d5:44:38:6f:ca:
04:3d:30:48:e7:d8:3c:d2:a7:1f:56:ff:b1:6e:d2:a9:7d:86:
63:23:54:86:f2:98:c5:0a:3e:e4:58:04:c0:8a:95:2d:01:06:
a0:2e:fc:5e:d9:01:f8:31:58:a9:a7:56:cd:3c:c7:c9:4f:47:
ef:02:f6:e7:fc:78:d5:24:3b:f6:36:d5:e6:2f:ab:6b:a7:ee:
39:fb:5a:8c:98:13:8d:1e:cb:52:86:34:23:fa:b6:0b:ed:25:
a6:a0:fc:d9:1d:dd:7b:ba:67:1b:7e:a7:bf:e9:1f:4e:ef:0d:
4d:bd:9d:d8:77:58:ce:e4:86:ae:c1:c3:0b:26:86:10:64:08:
91:f1:bb:71:67:1a:3a:b5:6b:29:b7:7c:e2:e9:0a:40:56:08:
c6:72:7b:75:f6:c6:b6:b4:6c:c9:06:4c:d2:be:e8:75:6b:a7:
ca:4e:90:d7:01:9e:97:b9:32:b8:c1:3a:85:d4:fb:4c:ea:08:
66:f4:70:d3:26:08:d1:d5:f3:46:e3:0c:cb:ab:3b:35:d1:85:
d8:39:35:53:ef:62:34:f5:12:d3:87:89:c4:db:9e:1e:d4:9c:
20:e3:14:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:07:30 2025 by rpki-client