Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
File: PE71UtfFcTYTTntE1pfLAs3n2H0.mft (raw, json)
Hash identifier: Tsc1MxHZC/cHd7/NNVoFZLL5CVBuxVzIt/hhQvxrad8=
Subject key identifier: 95:09:07:96:77:21:EA:0A:E6:83:F8:DB:47:AA:A2:47:1D:30:E0:8D
Authority key identifier: 3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
Certificate issuer: /CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Certificate serial: 019A71EE719C1599AA8DAFA0AD77D8F4A841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
Manifest number: 0B84
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: PE71UtfFcTYTTntE1pfLAs3n2H0.crl (hash: /1TwsoonDQmq1xwwCeOIqA20sLncmpbyZT1WCRlgweA=)
2: RuZvzxLvicWfAkL-HU_suiyEHkc.roa (hash: 1ChRVjdhLwU5Jyhx1uu/EkAAaI5ej8w7SIJnkr0NI2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:71:9c:15:99:aa:8d:af:a0:ad:77:d8:f4:a8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=950907967721ea0ae683f8db47aaa2471d30e08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:a1:5a:5b:ef:fc:a5:0f:af:4b:6f:04:b3:
d9:e2:82:fb:29:b0:82:ef:e1:89:2f:6f:6b:ef:da:
4d:83:95:bb:b2:ac:fe:b0:4a:ac:9c:ee:41:62:86:
49:f5:b5:51:f8:9d:ce:23:c7:86:d1:9e:a9:54:34:
48:9a:d5:48:2a:55:41:a9:af:f8:8a:77:df:d2:93:
90:44:fd:11:c2:0f:fe:f7:71:13:56:2e:f9:37:60:
42:15:e4:3c:4d:4e:8c:60:ca:c1:50:5b:6b:13:44:
a7:75:53:42:36:6a:2c:d1:9a:9a:45:68:b6:27:1d:
cb:1a:16:fd:24:36:f7:93:21:ef:7d:4f:30:a5:78:
f1:b7:95:d4:92:e4:c0:95:ba:29:42:db:ef:64:49:
27:ff:15:8c:98:fc:f6:03:3a:5c:56:c6:ba:6a:81:
85:a8:fd:5c:b0:6d:d8:61:fd:14:b8:bd:36:f2:e7:
3f:fd:db:2d:55:af:e5:79:8e:8e:5b:22:68:f6:88:
bd:80:61:8d:3e:8f:f6:7e:24:7f:0a:61:ae:47:75:
02:0f:e7:fe:3f:bc:20:bb:ba:1d:14:8e:18:54:47:
96:8c:e7:de:1a:f1:05:c7:0c:12:e5:59:d2:32:a2:
b9:6f:cf:26:b6:19:23:fa:f5:99:b6:11:a4:1f:e4:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:09:07:96:77:21:EA:0A:E6:83:F8:DB:47:AA:A2:47:1D:30:E0:8D
X509v3 Authority Key Identifier:
keyid:3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9d:1e:fe:d1:97:a5:91:fc:7c:ce:38:0a:85:d5:78:33:d0:
0f:09:7f:af:55:f7:51:47:ef:ac:12:54:cc:b1:6f:ce:cb:62:
20:58:65:9d:e4:dc:8a:3d:8c:bd:ab:5c:d8:b7:51:8d:5f:b5:
ee:b9:63:61:33:bc:6e:de:8e:52:a7:43:21:ca:4e:8a:19:81:
c9:6e:0a:99:c7:f3:4a:37:b6:db:4a:81:85:6b:65:9d:1d:10:
85:ac:58:e0:1b:13:f7:84:e3:f2:c1:ec:19:b3:b3:d8:89:84:
b9:f1:7d:17:2a:f7:5f:17:e6:98:6b:82:16:5f:01:7b:36:7b:
43:c0:bf:58:21:b8:67:16:d4:1f:4d:d7:61:37:09:ee:72:d6:
dd:94:dd:0d:86:e2:f9:24:25:cd:28:96:a1:95:96:ee:1f:c1:
d5:dd:d8:f9:89:83:fb:54:32:6f:39:53:e9:3f:e3:05:f0:84:
54:61:23:d9:3b:cf:1f:28:8d:ee:ca:02:7c:0d:ac:ff:24:24:
fa:42:33:52:0b:86:52:a4:18:4e:97:8c:54:7a:bf:9d:94:59:
99:f1:d8:53:b0:88:3a:d0:44:3b:19:30:40:81:32:04:50:2b:
fb:fb:99:83:a7:b4:7c:44:22:0c:0c:2c:95:ab:dd:2c:a5:47:
11:95:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:36 2025 by rpki-client