Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier: ydTye4GTNecqk+gyypVmm9lHrk1wxy97vK/whI8Yq1M=
Subject key identifier: 7D:47:86:3D:B9:3E:3E:C4:C5:72:3F:55:B7:96:49:26:D0:02:35:ED
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial: 019922C315DCC8A0C73C75623FD0B146936F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number: 1262
Signing time: Sun 07 Sep 2025 06:00:34 +0000
Manifest this update: Sun 07 Sep 2025 06:00:34 +0000
Manifest next update: Mon 08 Sep 2025 06:00:34 +0000
Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: dQM9MgmLAh/+8W6YXpcsQDDFrvezOwFqhpMy+LceC7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:15:dc:c8:a0:c7:3c:75:62:3f:d0:b1:46:93:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Validity
Not Before: Sep 7 06:00:34 2025 GMT
Not After : Sep 8 06:00:34 2025 GMT
Subject: CN=7d47863db93e3ec4c5723f55b7964926d00235ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:ee:bb:b9:c7:33:5d:b3:a2:61:7e:7b:06:
33:cc:d9:30:22:20:15:99:62:f2:5f:ce:56:b8:46:
85:1b:e0:ee:76:d2:a5:28:e6:f1:2f:ae:e7:18:39:
51:99:84:ba:58:c0:c6:a1:2a:1c:03:36:67:00:ba:
b2:5b:81:60:24:42:5d:b8:cb:50:51:11:93:98:a0:
b6:96:ee:32:d1:ff:b7:fb:ec:ee:d8:60:8b:17:9a:
76:cb:08:44:78:ee:bf:81:3b:8f:7c:fe:b4:50:a1:
cc:e9:76:cd:48:3e:4c:f8:9e:43:03:d5:a4:ae:dc:
02:73:7b:95:6d:27:b7:29:6d:9e:2c:1f:a5:33:45:
e2:fb:e8:39:78:83:50:09:29:8e:2a:38:97:cd:42:
a9:d6:70:4a:45:64:63:44:5a:28:22:d8:81:e2:39:
26:0a:e8:df:a0:50:59:66:41:7b:7b:a6:f7:65:76:
04:47:d7:0b:4d:11:f0:5e:81:9b:75:77:97:86:51:
d1:7c:34:04:04:c6:44:38:0e:34:f0:d9:2c:e2:b3:
42:ad:a6:a5:d6:fd:1b:4b:86:c1:52:f3:6f:84:4c:
1c:36:ee:1a:f9:3c:82:cc:b8:5d:bf:e5:77:1a:19:
20:b4:d2:7d:01:77:70:a2:e6:a2:c8:28:5f:29:82:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:47:86:3D:B9:3E:3E:C4:C5:72:3F:55:B7:96:49:26:D0:02:35:ED
X509v3 Authority Key Identifier:
keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4f:0d:16:41:75:95:fd:97:00:bc:3b:d1:34:51:47:64:b1:
64:41:e6:fc:97:34:93:ae:16:01:51:44:b8:13:45:15:cf:99:
cd:e4:47:7d:e0:9f:24:a6:5c:54:e6:d1:94:55:75:df:6b:7b:
2f:24:ce:cf:a9:4a:28:32:a4:fa:6c:93:fd:1b:d1:28:a1:f4:
97:64:f9:bf:99:b5:24:d1:7d:d7:24:ce:9a:af:9a:20:b5:e1:
38:b7:bc:e4:7f:d1:eb:56:33:aa:63:0e:18:43:f3:e6:ce:cf:
5b:41:dd:e4:04:4c:77:35:ad:bb:c1:a6:69:b6:51:25:fc:39:
46:7f:6a:60:03:37:d1:69:77:3a:6d:12:86:6a:68:47:8f:6b:
10:c1:8b:6b:1a:2c:23:88:12:13:09:8f:2a:23:fb:4b:f1:2a:
13:64:07:69:d6:e0:68:8c:4e:9c:ab:2e:bc:ee:73:e2:4d:c3:
38:68:fd:30:39:7e:60:31:0b:7c:bc:c4:aa:0e:b9:b3:ae:9e:
bb:af:e7:0d:53:e0:f3:76:11:7f:2a:80:1d:05:b5:99:b6:92:
fa:90:d8:82:18:a8:07:1c:96:73:b7:c3:64:e0:c0:0b:89:ae:
8d:0d:af:e1:18:58:1e:b0:c8:0e:e1:c7:26:a6:83:f2:a9:97:
62:5c:16:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:18 2025 by rpki-client