Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: sQj6ABdYAldX0PZrljmSuWChHM4S4gQNN22vQ2/7OzE=
Subject key identifier: 74:19:7A:FD:F9:B8:5E:F4:34:A7:59:05:39:79:ED:D9:9F:24:69:C1
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 019A711344E930BD20D05CFC692E2E357F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 1657
Signing time: Tue 11 Nov 2025 04:01:19 +0000
Manifest this update: Tue 11 Nov 2025 04:01:19 +0000
Manifest next update: Wed 12 Nov 2025 04:01:19 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: rtaM1qgt9qvOOq8zSwCqX4stbWxpmA5W798PeI8ISn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:44:e9:30:bd:20:d0:5c:fc:69:2e:2e:35:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Nov 11 04:01:19 2025 GMT
Not After : Nov 12 04:01:19 2025 GMT
Subject: CN=74197afdf9b85ef434a759053979edd99f2469c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:e4:a4:c7:4f:5d:b5:00:55:72:d4:5e:de:
82:b6:05:a8:43:98:91:14:a9:43:c3:ae:24:1d:b4:
5c:4b:29:83:b5:25:da:eb:40:ff:fe:dc:a4:fc:68:
3d:52:18:f5:75:0c:a6:44:ee:2b:ab:3c:dd:b7:64:
84:95:ec:25:84:92:6a:1c:dd:24:d5:20:af:0e:b8:
15:5b:87:62:76:bb:15:b3:13:ca:32:01:e2:ea:d5:
73:aa:94:cf:38:be:ac:8f:21:31:ac:77:94:c9:e3:
8f:1b:83:ee:07:81:52:89:97:dc:96:2e:78:12:29:
25:a0:ee:94:2f:09:00:34:c2:22:21:7b:6b:48:3b:
ba:29:93:76:da:d3:07:a9:1c:99:79:31:8f:94:5b:
fe:b3:de:42:0b:9a:62:99:68:4a:93:93:39:05:24:
fe:4d:e1:4d:e9:1f:3b:c1:7c:a1:4a:b1:25:b4:ae:
1e:ea:d2:28:b0:ea:22:63:ce:29:f4:55:26:2d:8e:
d7:9e:3e:68:52:1d:1d:ed:62:c3:f0:63:81:58:e0:
b6:5d:97:5d:d4:44:f6:61:ac:89:ff:27:58:0c:5a:
25:c2:d4:85:25:45:23:f3:dc:ef:25:e4:9c:9a:39:
ea:97:08:91:84:d6:0f:1d:26:61:db:c7:bd:19:de:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:19:7A:FD:F9:B8:5E:F4:34:A7:59:05:39:79:ED:D9:9F:24:69:C1
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a3:f0:b4:9c:69:f9:37:9d:4b:cb:01:9c:88:5e:e3:94:e4:
6c:ea:ac:e0:65:22:c5:a0:ff:ab:76:7c:6b:0c:16:02:ef:6e:
ad:35:fb:26:fe:a9:3d:b7:40:b6:74:a8:00:b4:86:a3:eb:91:
ce:d3:cc:03:56:55:cd:6f:8b:df:66:8f:31:fd:11:96:87:b6:
c7:86:cd:5d:eb:15:71:05:04:a9:11:54:b6:85:8a:65:26:7f:
67:fe:7c:c6:e0:c2:2e:94:01:4c:4a:54:84:90:79:02:25:69:
ff:20:2d:50:f1:9b:1f:96:3e:1b:67:dc:a9:7e:82:93:d3:2b:
6d:e7:ef:40:44:2b:5f:b2:06:cf:df:c3:cf:1e:b1:b8:0b:98:
4a:51:74:c9:76:cb:06:b6:b8:5b:6f:f9:a4:0b:0a:65:ab:47:
ac:60:86:33:d9:64:e8:8f:70:a2:fa:bb:69:2b:73:d3:eb:cc:
21:76:6f:98:a7:e1:d5:e6:ad:bb:0c:05:69:eb:d6:59:b5:ad:
49:16:ce:f1:e4:06:7c:0a:00:7c:a2:5a:0d:18:17:1e:6e:a9:
c0:c5:2a:df:fd:d0:66:9e:c0:96:bf:ff:8e:c9:67:2f:f3:07:
43:c9:49:3b:fa:94:0e:57:79:99:6e:e8:60:a3:26:56:91:6d:
8a:83:fe:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:42 2025 by rpki-client