Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier: rfGzsqQ4YGrbZNakF4tLtH7sTtgQG9OXby9Foh+/Waw=
Subject key identifier: 14:AB:B9:8E:F2:0C:5A:E0:D5:E9:8B:4A:4A:7D:08:7C:0F:D6:B4:5B
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer: /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial: 019A7293FC8252671624B04195A7B07B3224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number: 074B
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: fDPuwhGMmJGqnSfmfWnOL4HMjXXi8/ektPTru9GwCDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fc:82:52:67:16:24:b0:41:95:a7:b0:7b:32:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=14abb98ef20c5ae0d5e98b4a4a7d087c0fd6b45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:17:fa:4a:42:2e:9a:d0:42:6b:8b:ab:23:
bb:60:41:d1:d1:d6:69:53:7f:33:fb:d1:37:80:54:
81:32:fd:46:95:30:b3:ec:36:26:0b:2f:73:f2:04:
53:22:4c:6d:e8:68:56:be:a2:d8:5d:06:f7:70:3f:
39:2b:ca:cc:3d:02:36:0f:c2:fd:52:7d:de:69:56:
41:4c:07:4f:c9:2a:f4:03:fa:6d:29:bc:47:4c:14:
b7:7e:8b:ec:a2:b5:66:ab:6f:4d:0f:dd:5c:67:4a:
64:68:df:e1:58:cc:fb:70:e8:cc:7d:4e:3c:23:c2:
4b:91:ad:92:7f:fd:75:50:a6:9e:6d:ea:fc:22:0e:
9e:87:8e:78:f6:99:ea:27:6a:91:01:e9:91:ae:41:
60:fd:bb:62:03:b2:52:7e:d6:52:57:84:49:29:1a:
17:96:98:d4:78:94:47:6e:fd:7a:04:12:b0:44:ad:
da:72:0d:1f:9e:db:78:34:0e:11:fc:5e:94:53:fb:
62:ba:bd:03:10:7a:33:b2:67:76:49:4a:68:20:a5:
da:65:51:ec:2c:73:b1:54:11:d7:d7:bc:e3:2a:fe:
bf:71:cd:e0:7f:13:ad:88:74:6c:90:ec:07:53:51:
78:79:a2:a7:4e:11:da:a6:45:e4:19:0f:1f:0d:13:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AB:B9:8E:F2:0C:5A:E0:D5:E9:8B:4A:4A:7D:08:7C:0F:D6:B4:5B
X509v3 Authority Key Identifier:
keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a8:dc:5a:a9:0a:47:60:0e:62:d0:02:ee:ee:88:89:af:a9:
f7:c6:68:af:3c:cf:dc:29:55:33:94:28:0f:83:1e:ee:4a:3b:
0e:82:c3:4c:de:95:3b:5b:d7:73:bc:e4:d1:82:a7:f6:7b:ba:
99:00:52:0d:fd:77:1c:55:2f:e3:2b:7d:e2:24:03:1b:9b:45:
03:f2:99:72:bd:35:f8:00:9d:c3:c1:e5:b6:e1:4e:23:56:ca:
4a:61:2c:a2:d0:6b:8b:c8:f0:1a:f5:f7:61:ae:13:81:2f:eb:
2f:31:36:91:0e:9f:1c:a3:ca:02:81:6e:cd:c4:62:ea:47:c3:
76:e0:de:59:26:4f:8a:86:0d:13:52:73:d5:64:05:f5:2d:11:
fe:52:af:24:e0:80:e9:7f:90:85:ee:55:38:49:b2:d1:7c:3c:
d0:4e:68:b0:fe:30:e8:fb:dd:6c:9e:77:57:5d:23:4e:d3:95:
13:19:bd:8f:89:f8:71:36:e7:28:b8:e7:b6:e7:28:c9:7d:b5:
a0:39:37:8f:fc:f0:36:36:e2:be:3b:c4:e0:ee:7e:d9:e0:23:
e4:49:d6:6c:41:4f:b7:f7:ba:e5:8c:e9:57:57:5c:a2:91:7b:
49:47:c2:3b:d7:96:cb:0a:d7:d0:67:14:a8:a1:38:20:37:7e:
d5:5b:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:02 2025 by rpki-client