Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: KBZySbEGtLUWn5QH+lWNz4vro3DInSS96JPjBZReKWc=
Subject key identifier: 27:36:06:2F:6D:7F:0E:B4:53:45:25:58:14:A2:20:90:E5:0D:CC:96
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 019A7112A3F57A4507276063662D335F4882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: FzVhd37LkoSH0CIva4bLMezGZMdLJ9Xlmjklo82OpIw=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a3:f5:7a:45:07:27:60:63:66:2d:33:5f:48:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=2736062f6d7f0eb45345255814a22090e50dcc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:cf:86:38:48:7e:6a:3f:e2:04:39:15:d4:
d8:38:50:39:b4:2e:8c:74:3a:23:0b:48:2c:58:6b:
eb:d4:b9:c5:6f:8d:7c:0c:88:78:e2:71:ba:5a:87:
6f:7d:04:73:71:e6:f2:a2:e2:7e:48:1c:51:08:65:
e7:76:8b:b4:bb:4d:c3:50:ad:41:00:4f:d6:3d:f4:
b0:71:de:94:1d:59:ae:17:7d:33:43:52:97:5b:cf:
32:46:e3:92:a1:43:37:d3:02:52:b2:e9:a1:ac:2d:
15:5c:28:99:30:29:de:6a:de:cd:ad:b0:5f:76:35:
33:98:3e:02:eb:30:bb:10:76:5a:76:13:41:5a:5e:
2d:3c:80:5e:56:8b:37:95:8a:6a:49:c6:a9:28:88:
e0:46:cc:84:51:2d:66:29:24:51:9c:80:e7:b2:11:
8d:eb:64:9a:8c:45:92:b2:42:04:a1:fa:ff:b4:26:
4e:73:3b:bb:6c:dc:a0:bc:a1:af:21:26:3b:14:dd:
31:0f:29:15:5f:a2:9d:59:d9:4f:82:20:b0:39:98:
20:da:bb:5d:69:19:35:44:22:18:93:c5:81:1c:16:
c7:dd:4c:e8:75:15:7c:a6:55:0e:f5:ee:f3:f5:64:
a0:cc:0a:c7:cb:50:6f:a0:50:40:3a:43:a4:ae:9b:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:36:06:2F:6D:7F:0E:B4:53:45:25:58:14:A2:20:90:E5:0D:CC:96
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c4:e6:f6:c6:a7:2f:2f:86:b3:52:21:ff:49:94:95:e7:a8:
92:2f:33:3a:29:44:50:54:58:72:33:fe:20:a9:ec:3a:db:65:
dd:76:c8:38:2d:1a:46:86:00:41:f0:5a:d5:4b:98:2f:bd:ce:
08:d0:f1:19:3f:1d:2e:5b:6a:f7:2a:3b:3f:73:a6:6d:26:6a:
f8:26:16:6c:62:ee:72:2e:ad:7f:db:3a:83:be:ba:08:d1:44:
82:84:5d:5c:53:96:44:8c:9f:95:8f:5b:3d:11:e7:40:38:dd:
9c:79:1b:d7:45:0e:ba:b1:1a:fe:b1:d1:19:92:f0:2c:a3:3a:
46:b4:c7:2d:a7:bc:13:fa:8c:bc:4a:ec:25:c0:b8:54:fa:71:
66:0e:a2:ce:ff:d5:2d:6c:ba:cc:5a:5a:c8:2b:1c:fb:c4:ee:
3b:60:c8:68:9b:f9:41:16:b8:5d:49:d2:c7:52:94:83:78:43:
02:3d:a4:fc:d4:80:af:bd:94:fa:a3:9a:b4:fa:dd:1f:ad:68:
ae:b9:44:a9:73:d8:45:fb:f6:7a:0c:a0:53:da:72:64:2f:86:
01:a0:b3:cf:07:e7:b1:c7:7e:a3:66:1e:30:4e:0d:59:a7:0f:
3b:96:38:69:41:26:e7:27:cd:44:66:f2:a2:8a:1b:6f:13:94:
f2:7e:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:19 2025 by rpki-client