Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: 864jYwIXlthkWpDYsYLv31lQiisZzsYUZjltXwWP5/s=
Subject key identifier: 55:31:34:A6:A7:02:F6:0D:DE:4B:C5:95:F5:BD:E1:56:6F:F2:7D:70
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 019A25538949FA9B98561B2739ABAE4A157F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 12CD
Signing time: Mon 27 Oct 2025 11:00:22 +0000
Manifest this update: Mon 27 Oct 2025 11:00:22 +0000
Manifest next update: Tue 28 Oct 2025 11:00:22 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: PDccKeRwTTuhpusmqpZgLWujs/c19RH/fdAvabxw9K8=)
2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:89:49:fa:9b:98:56:1b:27:39:ab:ae:4a:15:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Oct 27 11:00:22 2025 GMT
Not After : Oct 28 11:00:22 2025 GMT
Subject: CN=553134a6a702f60dde4bc595f5bde1566ff27d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:5f:50:68:00:f0:0c:53:f2:95:64:d5:cf:
46:37:e1:a7:96:68:e8:bf:8f:56:62:9c:0f:f6:b9:
b5:fa:e5:db:16:4c:f0:54:34:52:d5:20:21:37:ba:
8a:da:0b:57:9a:d4:26:88:92:0c:fa:3b:19:84:1b:
f7:dc:ed:ba:d0:17:20:5a:d2:a6:b5:4c:2a:0e:8e:
0f:bf:ec:d2:09:27:23:ec:80:4d:e4:91:ad:31:dd:
5c:c6:c6:a5:4d:f0:ce:ea:63:1e:46:d6:4b:47:23:
54:9a:2a:b0:73:b5:c1:86:13:e3:47:60:19:04:1c:
b4:c0:6d:70:f3:47:5e:61:40:64:97:f7:1d:e6:40:
b1:25:d4:2b:3c:35:47:f5:00:5d:77:7e:58:39:7b:
c3:bd:72:fa:dd:f9:ef:1c:7a:40:55:97:4d:e5:68:
fc:08:70:c2:72:8c:46:ff:9f:51:9c:30:89:78:a8:
4f:07:e6:ee:72:e7:ed:96:8a:7f:17:09:5c:3f:71:
43:bf:10:55:4c:18:d0:f0:00:c6:6f:01:95:94:6b:
1e:a2:82:64:18:24:f6:27:1c:95:e0:6a:04:7b:10:
31:50:ee:f3:8b:0f:ee:7b:58:d7:6d:e1:ed:9b:a0:
d6:6e:56:48:6c:22:0f:98:5b:43:e9:bc:7b:4e:47:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:31:34:A6:A7:02:F6:0D:DE:4B:C5:95:F5:BD:E1:56:6F:F2:7D:70
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6a:c9:79:cd:0e:bf:0d:66:c8:75:7a:bb:50:61:a4:c1:b8:
73:98:8f:d2:d2:62:78:2a:a8:9b:0e:62:61:91:7b:db:7c:f3:
92:13:19:70:4e:af:36:93:a6:77:8d:ed:1e:84:21:42:42:96:
27:52:c5:76:56:bd:0e:e6:4f:6e:5e:32:7d:9e:8e:6c:9c:eb:
5c:47:3d:79:c9:fe:2d:c1:1c:0c:c4:5f:7b:da:91:8d:d4:5d:
68:e9:2d:52:2c:4d:92:b8:b4:9c:71:95:47:9a:ef:7e:6e:dd:
80:3c:2a:0b:b8:db:4d:a5:e9:97:21:c5:ee:bc:51:bf:32:58:
88:04:3e:ab:c6:3d:88:13:01:e2:32:a9:13:4a:01:ea:5d:32:
0a:32:db:71:68:96:86:42:66:5e:ff:05:c9:e5:56:25:46:a7:
be:f1:5c:e5:80:a5:8e:56:83:59:73:6f:88:57:24:21:2f:74:
f8:64:68:cd:b8:57:51:9b:c3:26:37:3f:71:c0:8d:f1:52:a5:
30:19:97:37:ec:22:a6:1b:6d:b5:a2:3a:23:5e:28:4f:b0:d5:
ca:12:b7:41:7c:77:65:00:dc:b7:99:8b:c4:87:e9:24:54:32:
e6:7d:a9:26:8b:9e:1b:6b:f0:e7:83:8d:a2:97:1d:12:85:23:
10:77:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:33:58 2025 by rpki-client