Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: Hxy/Cvn6RU43Kl1onOAIaSIR6O+G9tRsuUqgRDKffPU=
Subject key identifier: 08:92:12:D2:79:3B:04:83:34:D6:75:A2:A0:51:7B:72:43:42:A2:F2
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 019A711346024E444A3BAE0E1FDB2E47FB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:19 +0000
Manifest this update: Tue 11 Nov 2025 04:01:19 +0000
Manifest next update: Wed 12 Nov 2025 04:01:19 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: nIUB0R+0X1vyyDeMUB2oLBX1ZOZqorfH9UxxAxJu+ZE=)
2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:46:02:4e:44:4a:3b:ae:0e:1f:db:2e:47:fb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Nov 11 04:01:19 2025 GMT
Not After : Nov 12 04:01:19 2025 GMT
Subject: CN=089212d2793b048334d675a2a0517b724342a2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:b8:4e:68:5a:58:6a:6c:19:e7:8c:5c:6c:
57:c1:be:50:29:18:2e:e4:70:17:a6:99:b8:e9:d7:
7d:7c:d6:57:9d:cf:9c:fb:9b:ae:19:a9:a7:4a:ed:
bc:6e:ff:0e:75:23:2d:b2:e9:22:e1:ee:28:46:28:
b5:bf:17:40:8e:80:d3:08:8c:a5:be:13:69:8a:d1:
43:b4:4a:d6:94:c8:ef:f7:f4:52:7d:ff:14:f2:30:
94:96:fe:ad:26:9c:37:ee:76:18:5d:3a:92:d7:27:
74:92:75:4a:50:c8:e1:d4:79:c1:e0:4a:94:c4:14:
9d:9c:78:b5:e1:ee:39:72:14:10:b7:7a:54:48:5f:
4c:3e:a8:1f:b2:0a:f2:86:7b:35:0b:a4:86:a5:05:
a1:73:97:a3:01:40:da:59:e5:34:e1:e3:2d:e7:04:
d0:a1:da:46:7f:14:b1:4f:2d:43:f2:12:05:02:83:
19:3e:79:06:6c:8c:fc:81:87:7d:93:6d:dc:fb:e7:
bd:33:81:c1:27:27:65:bb:cc:b9:ff:18:ff:bb:16:
7a:27:6f:ca:75:40:a6:00:ad:92:97:74:71:78:9e:
86:5f:c2:a8:dc:22:f0:39:8d:0d:72:97:16:2d:3e:
af:59:2f:41:a0:0e:05:45:85:1c:cf:52:68:21:00:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:12:D2:79:3B:04:83:34:D6:75:A2:A0:51:7B:72:43:42:A2:F2
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8c:20:3e:8e:58:2c:0e:28:eb:f2:1d:36:2b:89:62:bb:dd:
a4:c7:13:42:20:cb:0f:b4:7c:e3:5f:2a:70:fd:47:a2:c6:10:
40:37:80:bb:db:94:f5:b9:9c:3f:ff:84:c8:de:dc:ef:87:a9:
3f:73:e4:46:90:0b:f4:73:17:ad:32:d1:d5:dd:69:c0:28:ea:
be:ba:a0:ab:38:a7:71:53:af:5a:42:32:0c:67:0d:6a:cc:ec:
9b:77:52:1c:31:82:c7:ab:0b:c5:2a:03:73:7b:bd:b1:4a:48:
cc:41:d8:6e:f3:2a:c0:4e:d3:9e:99:f5:b9:0b:21:c7:07:ec:
98:87:c9:e1:a5:d6:07:5b:61:19:7c:e1:ea:fa:4c:5e:10:b6:
78:6b:59:8f:85:18:68:6b:8f:35:86:a1:6f:c9:75:e6:15:04:
73:f4:bb:66:5c:fb:ab:d5:1c:a3:7f:c3:e8:30:24:7c:e7:de:
aa:70:d8:57:d0:c0:76:39:e5:4b:9f:96:d6:72:e9:99:ba:be:
6a:2c:e2:18:70:a3:1e:74:c9:77:c2:14:dc:35:7b:e1:31:76:
64:2f:25:61:9e:11:43:fa:f2:af:ad:ef:6f:40:ed:7b:23:e2:
d7:17:1f:07:0f:b2:e2:a3:c9:d7:84:3c:d0:9d:c6:0d:b8:60:
b9:1d:20:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:30 2025 by rpki-client