Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: X/gU6Z3cuo+SwR34xM3q5PCLXZMxulFffFKqn4xQrYo=
Subject key identifier: BF:49:FA:90:D7:17:DE:71:77:10:31:62:D5:47:48:00:97:04:C2:C5
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 01992CD911B55904AECCAA23B4F00ADA1EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 1674
Signing time: Tue 09 Sep 2025 05:00:47 +0000
Manifest this update: Tue 09 Sep 2025 05:00:47 +0000
Manifest next update: Wed 10 Sep 2025 05:00:47 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: M+0VUM9y3IdwTCFnmHpnC0kroTwGPqN25D38zFAx/d0=)
2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:11:b5:59:04:ae:cc:aa:23:b4:f0:0a:da:1e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Sep 9 05:00:47 2025 GMT
Not After : Sep 10 05:00:47 2025 GMT
Subject: CN=bf49fa90d717de7177103162d54748009704c2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:55:31:d5:39:04:bd:68:f2:dc:aa:c3:79:
76:e0:62:fa:14:08:33:c4:5d:16:92:25:82:ee:ec:
bb:0c:68:dd:01:a6:31:73:91:3d:28:e4:6c:3a:96:
1d:bf:2a:92:a6:52:df:4f:a2:c9:f6:74:f3:4f:54:
1f:e9:e6:20:fc:17:97:b1:c9:fa:df:0d:56:ee:df:
e4:51:e7:0c:16:07:d8:db:d1:3f:fc:85:56:82:7a:
8a:c8:a8:ce:01:b1:36:2e:5f:92:9f:8d:76:17:0b:
2b:e5:9b:2a:01:40:37:5c:8c:6e:86:57:4e:51:dd:
32:ad:cd:e7:6c:6f:5f:52:3b:87:c4:f1:c0:7b:e1:
c1:b5:06:7d:f2:c2:d8:7d:fc:c9:99:f6:70:5c:8b:
a0:7c:3f:df:9a:a9:49:3b:cc:f7:44:35:e8:16:41:
dc:66:6c:c4:c8:d9:e4:77:ec:0a:e1:b0:93:2a:d8:
1a:8f:93:d4:89:92:51:d6:2a:9e:e4:46:39:98:d5:
45:fb:7c:74:f6:d0:f3:7f:15:36:63:6e:b6:c2:44:
44:c0:56:4f:fb:2e:c3:eb:ba:95:55:43:eb:a0:7f:
e8:7e:de:74:c6:26:6a:e6:c5:fd:39:1b:ab:98:d3:
cb:f4:1e:51:82:ac:7b:14:6f:1e:eb:d9:5f:20:6a:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:FA:90:D7:17:DE:71:77:10:31:62:D5:47:48:00:97:04:C2:C5
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:08:af:df:aa:a5:1a:d2:7a:38:af:44:d0:b5:1d:c6:a1:ec:
af:e0:91:63:d4:df:cf:97:84:90:f7:91:0a:89:be:bc:61:49:
9a:6a:0a:9c:82:eb:51:8e:c4:fa:c7:17:32:77:5e:7e:6d:a6:
76:f1:4c:6b:08:36:d8:0c:c2:af:3b:8b:1d:18:e3:4e:e5:94:
66:19:61:e4:fb:13:6e:36:71:d9:38:13:7e:fa:eb:93:2a:15:
36:09:4b:fc:ff:b8:a0:08:0e:44:8c:dc:61:67:9b:3e:bf:9f:
e9:58:9c:06:0a:7a:48:af:99:b0:43:b7:a2:70:cb:57:b7:17:
25:14:d3:79:c3:14:56:58:df:ea:45:bf:30:76:9d:29:6f:54:
c6:68:99:a5:d6:b0:bc:f2:40:2e:d9:48:71:9b:e3:d0:d1:f5:
22:25:24:d9:7f:07:3c:02:eb:8f:7c:41:6a:51:50:95:77:3f:
3c:28:a0:66:39:ec:fb:95:32:d6:f5:22:8d:98:4a:08:9f:6b:
89:7a:9e:22:81:b9:85:5d:92:08:91:52:89:26:04:3b:7d:4d:
43:57:4b:da:4f:da:51:44:22:1a:38:3e:e1:01:df:e8:4b:e2:
a1:11:ae:13:8c:ff:4b:28:77:f2:f3:cf:65:89:01:08:51:3c:
d7:a6:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:57:06 2025 by rpki-client