Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier: Ct7CMXF3/r2u267GxgtNbAjy9Vtr61ApmdG7bbfevU4=
Subject key identifier: 97:0E:65:43:0E:8E:7D:DF:BC:DF:48:72:30:2A:23:E7:D2:3C:C1:AB
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial: 019A7293F1129B211C402A9F1AAC8DCE73F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number: 0804
Signing time: Tue 11 Nov 2025 11:01:29 +0000
Manifest this update: Tue 11 Nov 2025 11:01:29 +0000
Manifest next update: Wed 12 Nov 2025 11:01:29 +0000
Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: k3zleRBW1k2QtIjOylRatw+i5A8r1PREaLqQaka13gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f1:12:9b:21:1c:40:2a:9f:1a:ac:8d:ce:73:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Validity
Not Before: Nov 11 11:01:29 2025 GMT
Not After : Nov 12 11:01:29 2025 GMT
Subject: CN=970e65430e8e7ddfbcdf4872302a23e7d23cc1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:f3:84:b6:0b:e3:e9:2c:70:4e:13:38:a1:
71:24:0f:95:39:df:6d:89:d0:ac:5a:62:a2:0d:d4:
59:28:06:0d:6a:8e:5f:40:18:de:60:ce:27:74:8b:
61:c4:25:75:23:b7:e9:b0:0d:6b:86:d6:4d:5f:9c:
80:f7:3a:e2:35:12:00:76:ab:0e:88:5e:08:0d:19:
e7:31:8f:a1:5e:7a:c8:b7:4d:e5:f2:b6:68:54:18:
c7:c0:5a:9a:57:41:ac:a2:57:70:1e:52:f4:4e:b6:
30:b8:38:a6:4a:92:a6:fb:a4:0a:2e:9a:6a:3b:dd:
b2:b5:3d:0d:09:84:4c:0d:42:8f:9a:66:bd:38:08:
d9:32:1e:af:cb:fd:a8:ff:bf:b0:92:5c:c1:f5:0a:
1a:6a:02:70:2e:6a:e1:86:3e:2e:fb:da:52:67:ee:
56:3d:dc:c0:79:31:22:59:c6:1b:c8:b8:81:b2:36:
d9:99:a1:6c:e3:17:3b:b4:12:ab:83:20:2b:df:8e:
55:d0:a0:b4:90:de:e9:36:8c:8a:02:a9:57:86:c1:
56:e5:85:a5:10:2a:56:53:af:36:7f:91:9f:a0:37:
8d:f8:d2:c3:55:78:90:76:8e:52:9b:ae:b4:b7:68:
02:c8:6d:19:c1:5e:8d:ca:9b:25:d1:37:c8:ff:bd:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0E:65:43:0E:8E:7D:DF:BC:DF:48:72:30:2A:23:E7:D2:3C:C1:AB
X509v3 Authority Key Identifier:
keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:52:b5:f9:45:7c:73:13:a5:6b:c8:c9:4b:02:43:0b:c4:47:
7a:54:73:b7:2d:fe:be:b0:da:1a:86:70:20:a8:11:68:89:44:
0a:b8:10:18:ef:4f:9b:3f:ac:71:2a:4f:76:47:c3:1f:63:9d:
86:19:32:2b:97:21:50:47:ef:5c:a8:fe:c8:06:55:0c:7f:44:
77:5b:34:ee:72:63:8d:09:6b:46:ba:a1:48:6b:37:df:ba:71:
50:29:67:21:63:0e:13:37:fe:7b:e2:a9:1a:ab:29:43:2c:2b:
49:f9:2d:95:17:8f:32:27:90:9a:85:6c:13:d4:78:95:c7:68:
ec:5a:55:3c:cd:a2:31:b9:0d:a2:8e:26:a7:e3:b2:a2:7a:91:
53:e5:4a:dc:be:d6:72:64:6b:cd:0b:11:5c:1b:94:ed:39:28:
7e:05:66:c3:2e:19:83:2a:0c:ee:db:8f:2e:27:4f:3d:95:e2:
ea:ae:a0:36:06:ca:25:1a:0e:cf:df:88:20:40:a5:52:7f:fb:
06:ab:b3:13:e2:89:24:de:3d:ec:3f:9c:b3:50:ba:d6:da:d5:
40:c5:ab:05:4c:db:b7:ce:bf:a4:fe:b4:30:c5:aa:18:61:68:
89:d3:bc:e6:63:92:b0:52:5a:58:c7:32:bb:66:fa:3d:03:53:
49:03:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:41 2025 by rpki-client