Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
File: Pq9YPXwbe09XMQE8iymLpQVGTlI.mft (raw, json)
Hash identifier: /XoFzUkNaZJXtoJImodLOTE/BXpgM9+JOCdHQ37TIUQ=
Subject key identifier: FF:E8:77:19:40:F0:40:34:3C:B0:8A:5E:74:99:88:3C:7E:D2:67:1D
Authority key identifier: 3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
Certificate issuer: /CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Certificate serial: 019A71134B54D04F9A1D63D01F73F1F99F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
Manifest number: 1338
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: Pq9YPXwbe09XMQE8iymLpQVGTlI.crl (hash: iJ8jI5iWNPzzIkF51P9NizK3lRn+DRUpBgXRmgrNK9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4b:54:d0:4f:9a:1d:63:d0:1f:73:f1:f9:9f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=ffe8771940f040343cb08a5e7499883c7ed2671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:99:b5:c4:23:e1:9d:e3:35:84:a0:0a:dd:
a3:92:2d:60:77:68:5c:d9:4b:9e:85:11:66:77:e0:
c1:c2:bf:b3:9b:da:39:8d:70:b9:06:0f:1c:33:bd:
e1:e2:28:37:0a:3a:e3:1b:85:21:06:30:d6:f1:0b:
41:d0:d5:f4:47:08:4d:27:5a:86:1b:00:b9:97:25:
60:89:5a:cc:28:dd:1a:df:b3:e9:32:20:19:4b:6c:
ab:e1:e3:9b:d7:05:9d:11:40:53:c6:93:6a:aa:fd:
47:64:ce:e6:69:8c:2c:fe:10:6b:4f:24:52:94:49:
4f:35:38:e0:91:af:cb:27:3b:ee:4b:df:e4:71:7e:
1c:d3:fb:cb:a2:0f:13:f5:df:39:c5:8a:c3:77:ac:
37:bb:67:2f:3a:ae:89:d0:1a:ea:91:00:19:b6:26:
1a:f1:8a:89:52:bd:a5:f9:90:c8:95:86:c6:17:db:
61:1f:76:57:31:5d:d2:0c:70:c2:c5:0b:91:3b:7a:
f3:f2:19:ee:37:7f:83:a2:cc:f3:7e:87:cf:66:11:
64:bd:df:18:00:f5:37:86:67:da:c9:1a:73:75:fa:
76:eb:ea:31:2e:b7:0f:de:70:0a:c4:45:fb:90:ea:
f2:4f:5a:1a:54:d1:80:50:fd:63:e3:07:7d:a6:fb:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:77:19:40:F0:40:34:3C:B0:8A:5E:74:99:88:3C:7E:D2:67:1D
X509v3 Authority Key Identifier:
keyid:3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:95:02:22:46:62:8f:57:76:d2:0b:88:e3:95:da:c8:01:6e:
c4:00:5a:92:3b:1d:ff:60:08:36:8f:bd:1d:9d:41:a6:c1:00:
ef:d2:60:a9:23:2e:f3:6c:46:26:f3:7f:02:31:86:9c:28:c3:
94:6b:7f:49:b3:72:cc:fd:1b:da:b5:77:40:ff:1f:b8:f1:bd:
6f:39:45:7e:da:04:30:37:56:a8:b6:d0:77:af:af:a7:3d:7a:
cc:7e:8a:fb:16:b0:18:5f:c0:c9:27:f0:5e:0f:16:ff:19:4f:
fc:8e:a1:76:15:55:74:d1:ea:3f:04:cd:67:63:ac:ed:21:4a:
04:5f:16:fb:8e:3c:c5:af:db:38:88:63:0e:be:d0:28:e0:ba:
80:0b:3b:24:85:82:d6:4a:af:6c:2b:1e:17:6a:c1:57:73:1f:
ad:ba:8a:22:8c:3f:8b:10:b8:b4:fa:2c:c5:da:41:c0:87:40:
3c:8c:12:4a:26:7f:53:15:65:68:d1:92:46:6a:85:4d:4c:41:
d7:a5:5a:e8:42:ad:2f:74:40:85:eb:30:51:17:58:cb:68:9d:
84:48:81:83:4a:32:ae:8c:9f:12:3a:0a:1e:fe:79:3b:4f:7e:
2a:c2:5e:89:68:29:07:72:ef:01:4c:c8:e1:8b:7d:dc:1e:60:
9c:96:8a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:34 2025 by rpki-client