Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: iykaUwUPzs8Vyx158mXBt27YSylrSy9GCFq+bDsPGV0=
Subject key identifier: 52:B7:0B:63:30:BA:21:55:86:D3:2C:38:86:5D:56:8E:A2:25:2E:37
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 019A73382F064024C5544DACED6E7323A95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 05AF
Signing time: Tue 11 Nov 2025 14:00:53 +0000
Manifest this update: Tue 11 Nov 2025 14:00:53 +0000
Manifest next update: Wed 12 Nov 2025 14:00:53 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: w7WL7kn3kdpXSdXqTmoeqtoquUv2+pNTYY/6wnFv07U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:2f:06:40:24:c5:54:4d:ac:ed:6e:73:23:a9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Nov 11 14:00:53 2025 GMT
Not After : Nov 12 14:00:53 2025 GMT
Subject: CN=52b70b6330ba215586d32c38865d568ea2252e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:84:7f:04:d8:a8:85:75:bd:5c:cb:b6:aa:
42:2a:70:ca:3d:53:e1:38:b5:bf:76:a4:3e:96:cf:
ee:b3:31:4d:61:93:18:36:8b:83:f5:ce:f5:97:eb:
26:b8:91:f6:54:60:88:42:6b:ab:c9:7d:00:b9:dd:
cb:9f:f2:30:72:6d:25:ff:7c:58:eb:6b:67:90:4c:
b9:1f:c1:f8:1b:0a:55:c9:57:98:0b:34:a5:ba:15:
89:62:43:67:db:73:e9:ab:63:a5:14:34:b6:89:c0:
af:ad:7f:cf:cd:ea:a1:f2:0e:1b:28:56:27:16:2f:
fb:8f:de:66:f4:01:23:3e:89:aa:1d:60:e0:0c:6f:
7d:4e:49:07:e7:fe:d2:b5:80:90:4d:6b:07:6e:f0:
53:6a:92:c8:b4:3e:c6:bc:e8:a0:67:e5:37:85:c8:
81:70:ed:6a:4b:f8:da:9e:d6:83:f8:55:11:ac:4a:
13:c9:5c:47:ff:96:5c:15:90:b8:8d:a4:23:5e:5e:
4a:99:11:c2:bb:79:97:73:b9:18:c4:b6:37:73:96:
2b:dd:ea:4c:29:ca:59:95:26:11:3a:51:11:e9:e2:
f4:a7:db:4c:37:d3:c4:8e:99:2e:15:a6:dc:d0:88:
e1:9c:ce:b3:f3:59:a2:e7:0f:b7:03:8c:87:f3:f9:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:0B:63:30:BA:21:55:86:D3:2C:38:86:5D:56:8E:A2:25:2E:37
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e4:53:a3:52:19:31:6f:16:58:28:df:fc:f6:ef:ea:8d:1b:
82:f0:86:b9:a0:f5:97:71:a0:c8:c1:43:63:2a:a8:6a:6e:d7:
74:ac:5a:80:bc:bf:b5:9a:87:67:1c:90:8b:9b:3e:03:a6:3a:
9f:89:1c:4b:dc:f1:3c:68:42:5e:3e:fd:89:ab:fb:b4:16:0c:
c2:ec:b3:37:e6:2f:77:78:b2:48:e1:af:a4:21:23:84:7b:81:
cd:ec:ea:d1:51:76:cc:12:85:b1:b4:6e:6c:5b:2a:21:22:1d:
e5:79:dc:89:f9:bb:81:8c:20:2f:e9:81:f6:ce:84:56:56:3c:
dd:77:80:ae:06:08:4a:16:7d:c3:52:19:69:63:01:16:2a:d7:
27:df:60:75:b0:f9:3a:cb:bf:11:76:1b:7f:0c:f6:eb:df:b6:
fd:b7:83:38:a8:13:03:ee:1e:97:ca:09:bd:98:68:50:6d:cd:
bc:8a:c8:12:22:63:16:21:e1:6c:55:37:d3:ab:78:ec:9e:1a:
b9:81:a4:20:6b:11:5e:8c:af:49:d3:1a:98:12:8f:d8:62:8e:
22:13:8d:ec:88:a7:50:30:12:51:4c:e7:cf:c5:27:a4:69:b1:
96:9e:f7:ad:eb:77:01:c7:0f:c2:a2:11:98:ab:6a:9c:84:a4:
d5:5f:24:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:51 2025 by rpki-client