Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
File: PqU6yajcRG-34BE7aLOOlwwZ98w.mft (raw, json)
Hash identifier: Ee4Z95dJqyyGVauDitHu6Y02pk9LZwtSYZXeNxi3LsA=
Subject key identifier: 6C:E2:8B:67:E0:E5:C2:94:D4:64:77:06:6B:C4:BF:F8:19:D8:68:27
Authority key identifier: 3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
Certificate issuer: /CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Certificate serial: 0199FEB49DEB3AA7EAE148494B10BC472E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 23:01:13 +0000
Manifest this update: Sun 19 Oct 2025 23:01:13 +0000
Manifest next update: Mon 20 Oct 2025 23:01:13 +0000
Files and hashes: 1: PqU6yajcRG-34BE7aLOOlwwZ98w.crl (hash: 5JiS5JBWgzEWXBXdM12W6jdnEY34SzkrOYgJFbDrZFg=)
2: ZFcvFlhDWryyoXWXMpIDlrIOANM.roa (hash: vf4LDljSHDeogKMO6SAS7Y9xTDtYGGINc31+p97CZuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:9d:eb:3a:a7:ea:e1:48:49:4b:10:bc:47:2e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Validity
Not Before: Oct 19 23:01:13 2025 GMT
Not After : Oct 20 23:01:13 2025 GMT
Subject: CN=6ce28b67e0e5c294d46477066bc4bff819d86827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:28:23:36:80:8b:a8:12:08:99:fc:f8:38:
8a:70:eb:02:6d:64:a5:57:45:02:6d:71:09:e1:0f:
c7:b7:25:20:0e:f4:0c:93:da:31:23:e4:b2:fd:f3:
c6:1a:e0:8a:35:1f:02:79:cb:5c:a2:2e:90:88:5e:
c1:56:bd:40:dd:00:76:8f:de:00:6c:6f:be:fb:5b:
2d:26:89:30:3b:17:df:86:39:00:ab:b6:a4:9c:42:
59:80:d8:f7:8c:eb:04:5c:3c:38:c3:02:dd:c4:15:
58:27:39:ca:55:a9:59:f0:30:99:e8:1c:57:29:f3:
0e:58:7e:f8:ff:b0:8b:04:d5:39:97:91:b8:f2:75:
c9:ce:52:65:0f:2e:39:b9:51:50:f6:6d:48:66:c0:
17:ac:7f:a4:3f:3f:5d:47:ac:96:10:c2:cc:e4:ee:
a7:7b:9b:a6:b3:f7:33:38:8b:61:f4:07:37:ef:d7:
83:f6:14:7e:97:8b:c7:b2:ca:35:c7:8e:ca:5c:35:
b3:4c:7a:a6:2e:cb:4e:cc:c5:a8:e0:c8:c2:4e:02:
d5:2a:c4:19:90:7d:aa:66:4e:51:24:e7:b3:d2:c2:
e6:4b:ba:a7:5e:62:f0:dc:05:25:c2:f0:6a:35:00:
0e:52:ff:84:2d:a4:fe:61:44:c5:56:8a:51:93:b3:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E2:8B:67:E0:E5:C2:94:D4:64:77:06:6B:C4:BF:F8:19:D8:68:27
X509v3 Authority Key Identifier:
keyid:3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:39:61:c9:6d:4a:7e:49:ba:b9:21:96:45:d0:af:05:e6:da:
d7:00:b2:f0:a0:62:20:4f:c6:f6:af:af:d0:fb:bc:c7:05:68:
11:11:9c:68:f4:6c:bc:71:f5:01:ac:a0:f7:99:4e:3d:8c:57:
8a:d6:f1:2c:c2:17:d1:b0:06:b8:b2:37:ed:8c:8b:31:d3:fd:
e0:16:d0:4b:c8:fb:8e:cc:1b:9b:e6:14:61:f0:5e:6f:53:b7:
4b:bc:05:79:0d:f7:d8:78:33:d0:5f:26:06:32:9e:b0:b9:85:
b5:25:84:0a:05:56:b7:e9:0e:97:90:d5:a9:ae:fa:fd:44:36:
c8:dd:34:41:b3:72:33:04:c9:d7:3e:39:3c:2b:db:d2:5f:d5:
0c:04:d2:d2:cc:3b:98:64:fa:a3:57:30:34:db:f8:1b:7f:7b:
77:a2:8d:5a:f6:97:0b:91:75:47:98:e8:c4:de:13:7c:bb:c2:
e1:e5:74:fd:37:49:96:96:a9:63:99:47:b8:50:d6:d2:fc:21:
bd:e6:c7:74:94:4b:41:e7:35:5d:46:29:e0:64:11:90:54:fc:
06:d1:6d:31:51:40:67:31:eb:f5:b8:be:8a:5c:9a:4a:56:41:
4c:39:82:dc:30:4d:cf:bc:19:b0:10:38:35:ce:1c:32:29:13:
37:12:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:38:37 2025 by rpki-client