Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier: sgD4wDXYb2bfddyWhNgcGaKzXPBai+k7WOV1vp3POVc=
Subject key identifier: ED:3F:43:0C:D9:3F:6F:A5:69:86:50:A9:59:F2:6B:1F:6C:18:F1:19
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial: 019A70DC80FF1364E4031E606D9CADE28E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number: 130F
Signing time: Tue 11 Nov 2025 03:01:30 +0000
Manifest this update: Tue 11 Nov 2025 03:01:30 +0000
Manifest next update: Wed 12 Nov 2025 03:01:30 +0000
Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: LUEW8KB6a/KYoQauelD3DOEaWhuWrIr0MosEr17M4gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:80:ff:13:64:e4:03:1e:60:6d:9c:ad:e2:8e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Validity
Not Before: Nov 11 03:01:30 2025 GMT
Not After : Nov 12 03:01:30 2025 GMT
Subject: CN=ed3f430cd93f6fa5698650a959f26b1f6c18f119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:25:ea:9d:00:69:41:78:86:85:a5:c8:c1:
61:80:65:47:16:70:67:43:d8:9b:b9:ba:2e:4d:bf:
80:6b:48:a2:84:1e:85:0d:15:4a:b2:68:cc:8e:46:
39:6a:e1:50:71:af:5c:86:b9:a5:1a:23:cc:6c:0b:
d7:f0:4a:31:fa:08:24:6a:e7:e3:f0:ac:87:08:02:
9c:84:a3:d4:5b:ac:8c:a4:ef:2c:3b:e4:4b:75:9a:
ec:67:53:bb:8e:9c:6e:93:8d:0e:c6:1d:88:1a:0a:
b4:8a:e3:ac:ea:aa:53:63:18:b7:58:4f:c9:fa:26:
fd:7c:55:c7:f0:be:5d:63:3d:ac:31:e4:6b:d8:40:
78:35:ce:0d:4f:ae:5b:60:13:4b:04:e6:14:b6:24:
9f:3e:e8:7d:07:52:ef:10:e6:5b:c8:fb:bd:27:07:
49:71:1d:f9:89:61:66:b5:1f:cb:d3:fe:8f:2a:2d:
90:4e:a5:18:c6:bb:41:f7:9b:33:4d:9c:f5:0b:03:
d5:2d:1e:23:4a:e4:8e:d3:eb:e3:f4:22:32:e4:84:
95:69:1e:25:33:ce:47:fb:2b:e6:05:d7:45:b9:e3:
ac:ff:0b:54:4f:bf:b7:40:62:01:d0:8c:97:2b:c4:
5d:d8:61:c3:ce:30:be:14:db:bc:8e:85:cd:4c:12:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3F:43:0C:D9:3F:6F:A5:69:86:50:A9:59:F2:6B:1F:6C:18:F1:19
X509v3 Authority Key Identifier:
keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:51:f7:9e:83:cb:76:6e:d9:d6:2d:21:67:7a:66:da:5f:ba:
f0:62:cb:74:a9:04:ad:41:8d:85:27:fb:00:f9:a7:d8:5e:75:
00:d6:40:66:09:51:89:49:80:b8:5c:5e:85:06:06:03:b4:bf:
07:8f:7c:84:65:b0:05:73:12:95:60:76:17:19:8f:a6:f8:e7:
62:23:1c:de:ac:0c:e9:c6:9c:dc:18:2a:17:78:75:32:2c:ec:
31:af:92:b7:fd:2d:f3:a3:6e:ff:5e:2a:12:a5:7d:5c:19:bf:
e2:ef:bb:f0:7b:3a:9d:1a:4d:89:6e:d4:8f:b3:1d:a0:af:9f:
5a:9e:d0:71:85:60:53:44:a2:f7:a1:ea:c3:e7:72:8b:a9:05:
96:74:bc:d3:2f:a2:38:f1:e9:91:93:70:b8:65:b5:0d:3e:aa:
82:b7:e7:75:3c:9c:91:9c:96:87:67:eb:5b:9f:f1:d6:ef:d9:
df:c3:00:b6:26:cf:93:ea:2e:80:69:31:0a:f8:3d:56:29:2b:
e1:52:68:e8:26:3f:4c:1b:55:10:c4:c3:3a:92:bf:8b:8f:2b:
e4:df:e7:94:b9:0b:41:b3:93:2e:e7:f1:37:76:bd:4d:5f:00:
c9:8b:f1:b9:7e:6e:23:95:84:bc:00:b8:b6:f9:32:3f:55:19:
02:7c:84:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3ID/E2TkAx5gbZyt4o4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTk0YWY4MzExOGM5M2ZmZThiMzYyNzVlZDUzNDk5NGQ2
N2EyZGQwHhcNMjUxMTExMDMwMTMwWhcNMjUxMTEyMDMwMTMwWjAzMTEwLwYDVQQD
EyhlZDNmNDMwY2Q5M2Y2ZmE1Njk4NjUwYTk1OWYyNmIxZjZjMThmMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSUl6p0AaUF4hoWlyMFhgGVHFnBn
Q9ibubouTb+Aa0iihB6FDRVKsmjMjkY5auFQca9chrmlGiPMbAvX8Eox+ggkaufj
8KyHCAKchKPUW6yMpO8sO+RLdZrsZ1O7jpxuk40Oxh2IGgq0iuOs6qpTYxi3WE/J
+ib9fFXH8L5dYz2sMeRr2EB4Nc4NT65bYBNLBOYUtiSfPuh9B1LvEOZbyPu9JwdJ
cR35iWFmtR/L0/6PKi2QTqUYxrtB95szTZz1CwPVLR4jSuSO0+vj9CIy5ISVaR4l
M85H+yvmBddFueOs/wtUT7+3QGIB0IyXK8Rd2GHDzjC+FNu8joXNTBLsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0/QwzZP2+laYZQqVnyax9sGPEZMB8GA1UdIwQY
MBaAFD6pSvgxGMk//os2J17VNJlNZ6LdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZjQxOTEtYjlmMy00MzgyLWJlZTEt
Mjk1N2FmYjE0Nzk0LzEvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZjQxOTEtYjlmMy00MzgyLWJlZTEtMjk1N2FmYjE0Nzk0
LzEvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1H3noPL
dm7Z1i0hZ3pm2l+68GLLdKkErUGNhSf7APmn2F51ANZAZglRiUmAuFxehQYGA7S/
B498hGWwBXMSlWB2FxmPpvjnYiMc3qwM6cac3BgqF3h1MizsMa+St/0t86Nu/14q
EqV9XBm/4u+78Hs6nRpNiW7Uj7MdoK+fWp7QcYVgU0Si96Hqw+dyi6kFlnS80y+i
OPHpkZNwuGW1DT6qgrfndTyckZyWh2frW5/x1u/Z38MAtibPk+ougGkxCvg9Vikr
4VJo6CY/TBtVEMTDOpK/i48r5N/nlLkLQbOTLufxN3a9TV8AyYvxuX5uI5WEvAC4
tvkyP1UZAnyEJw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:54 2025 by rpki-client