Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: A9Gkh5NULeJ5YnVb0U7w42lcfGhK08Hfw1Wwxj2gfBQ=
Subject key identifier: 7C:41:4F:59:5C:FF:05:A7:9A:86:06:B5:3C:D0:9D:12:9D:03:F8:5E
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019A15E0D1438A4D54C682B819CD60394D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 16F0
Signing time: Fri 24 Oct 2025 11:00:46 +0000
Manifest this update: Fri 24 Oct 2025 11:00:46 +0000
Manifest next update: Sat 25 Oct 2025 11:00:46 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: gCuT2PPTm8c2klVQEw4DjryGDvxWayZpmxTDbUPKOB4=)
2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:d1:43:8a:4d:54:c6:82:b8:19:cd:60:39:4d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Oct 24 11:00:46 2025 GMT
Not After : Oct 25 11:00:46 2025 GMT
Subject: CN=7c414f595cff05a79a8606b53cd09d129d03f85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:d4:d0:31:fd:1f:40:24:3c:21:92:b8:a1:
c8:22:d8:c2:6a:a4:41:8e:c6:91:23:96:d6:41:77:
d8:bc:3e:b1:c4:84:31:d6:47:50:2d:25:37:96:bd:
e4:86:d1:1b:92:2a:fd:21:18:ac:6a:b7:c7:65:a0:
a6:c1:aa:84:0b:ea:c7:8c:ad:35:2c:d1:93:0d:f0:
de:6b:bf:f3:09:cf:69:c2:86:9c:00:58:72:24:61:
e2:5d:44:39:60:b6:25:ab:11:d9:c6:8b:68:c1:ea:
11:71:92:e5:54:b5:80:8b:69:e7:ba:36:cb:92:29:
68:99:20:4d:d3:71:eb:b5:0c:e0:db:10:4f:7f:40:
6a:cb:55:f3:bc:3c:8c:58:9d:e0:17:d1:11:44:33:
25:8f:35:4e:3a:17:a8:e3:6a:db:60:a0:7d:35:b3:
ab:1b:06:7e:37:bf:e9:90:c3:cd:00:39:25:4c:ff:
fe:45:dd:cb:26:84:0e:c1:2a:a9:49:be:8f:03:c0:
3c:99:d4:fe:64:83:48:53:da:be:39:77:a6:36:8a:
be:c3:57:d6:80:f0:55:a2:de:cb:57:65:e7:47:e0:
e2:de:7d:22:7b:1f:1d:d2:01:80:c1:4b:e2:ee:10:
e6:90:b7:9d:7e:6b:43:b5:48:c1:82:8d:95:c5:93:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:41:4F:59:5C:FF:05:A7:9A:86:06:B5:3C:D0:9D:12:9D:03:F8:5E
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9c:d0:96:d8:4c:da:c7:6a:d3:d0:c9:7f:18:e6:1e:ee:d6:
45:60:4e:98:d8:7b:cb:f7:c7:82:27:c6:ae:d9:0f:d5:96:38:
39:fb:e7:ca:75:71:ef:1d:58:d9:1d:ac:9a:86:47:19:ad:01:
75:6b:99:2c:1e:f8:a8:d0:2c:11:1b:d6:40:9e:f4:96:82:71:
d0:4e:19:c6:a2:11:a0:2c:9d:ed:66:27:49:52:d3:65:83:7e:
55:5a:64:6e:70:64:83:50:a1:24:76:f2:5d:7b:14:38:a5:60:
e6:3d:6a:e1:11:51:d9:05:f5:f5:5b:ab:15:99:70:98:99:9f:
ac:9e:fc:1f:b2:09:7f:dd:b7:eb:1f:61:99:ba:d5:0f:5b:50:
a0:c5:8f:b9:46:4a:7c:c2:e7:9d:86:82:22:b9:51:fe:5c:9d:
ff:b0:2d:e5:26:5a:ed:72:08:5a:1e:a2:c6:79:0b:48:56:b5:
d6:5e:0d:b5:8a:27:a7:e7:39:8d:ec:50:00:c1:b5:a5:9c:c9:
9d:1b:56:09:a2:45:04:01:55:81:0f:fd:0e:81:28:a7:b3:b3:
aa:9d:f3:7b:4a:43:24:af:14:cc:81:74:c7:cd:23:ee:60:1a:
31:96:0a:b1:f7:5e:66:11:e2:72:3e:e6:7f:16:54:17:62:2b:
4d:4a:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:46:20 2025 by rpki-client