Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier: ix+xyH0q5gTb+lliAYYhRm4GQWr5laAPoUr3Lp9sGlQ=
Subject key identifier: 15:E6:85:1A:B6:A5:10:99:F3:E2:E8:8B:58:9F:6A:ED:7D:8B:4A:AC
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial: 0199FEB4A0890EC49986E0BD03F635CE7B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 23:01:14 +0000
Manifest this update: Sun 19 Oct 2025 23:01:14 +0000
Manifest next update: Mon 20 Oct 2025 23:01:14 +0000
Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: 7k9sSmAMMsJZ5hLz3BYdKZLvWfT4U8s+6i/VVttj4OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a0:89:0e:c4:99:86:e0:bd:03:f6:35:ce:7b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Validity
Not Before: Oct 19 23:01:14 2025 GMT
Not After : Oct 20 23:01:14 2025 GMT
Subject: CN=15e6851ab6a51099f3e2e88b589f6aed7d8b4aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:2b:a0:15:47:a3:3e:cd:cb:89:0e:92:84:
b5:9a:f9:5c:8c:85:cd:96:33:86:eb:b1:fe:43:25:
36:84:6c:42:09:d3:e4:c2:b9:be:08:b6:d3:7a:9e:
38:05:f5:49:0e:5a:fd:d7:32:95:6e:ae:62:c3:e9:
5d:79:bf:9a:a5:f2:10:d3:1a:d8:24:1f:08:f6:f6:
c1:c7:28:22:2a:38:b0:aa:0b:fa:85:8b:68:6a:37:
3b:bc:59:11:80:82:39:0b:20:e3:4a:1b:07:5c:27:
9b:5d:29:ba:9d:a9:d7:e7:eb:52:17:e8:20:3c:0f:
c5:87:60:dc:79:d6:fd:ec:a5:e6:90:7b:20:59:37:
f6:4f:1c:0f:8f:47:8d:87:a8:1d:cd:b6:ce:a7:1e:
12:a9:17:b0:45:dc:9e:a8:4d:60:ac:38:e9:83:3e:
e2:35:b0:b6:47:eb:fc:f0:81:32:af:6d:76:86:86:
5c:20:48:da:d8:15:26:9d:15:27:76:c9:63:09:7c:
b1:b9:a8:cb:94:91:3e:10:58:02:19:fe:d5:41:ca:
1a:ca:65:21:b1:59:69:8e:b4:9c:4d:cc:45:a0:9e:
e3:bd:24:55:9a:0a:3c:3d:2c:6e:1b:7b:4b:ae:7d:
a8:e9:c3:57:2b:c5:19:f7:e5:18:51:01:b3:9d:a3:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E6:85:1A:B6:A5:10:99:F3:E2:E8:8B:58:9F:6A:ED:7D:8B:4A:AC
X509v3 Authority Key Identifier:
keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a5:3a:f6:4a:b1:b1:e4:f6:7c:f5:20:64:4a:38:1e:51:fe:
29:03:d9:f0:f8:14:41:67:fb:10:61:69:9e:54:c0:a7:27:7b:
48:a8:d9:19:16:08:8e:b7:1e:a7:52:66:67:4a:9a:bf:6b:ee:
dc:b5:90:66:56:48:6a:9d:a1:c1:f4:9a:a8:dd:7b:fe:f0:c7:
8d:4f:57:e6:84:a0:b4:11:bf:6a:bc:d7:e7:5c:e7:0c:7d:ff:
f7:21:a4:9a:62:96:82:ac:4f:aa:a1:b2:73:f7:53:5d:a9:88:
3f:0e:4f:80:73:e0:2a:26:1c:bc:20:f4:92:c7:97:4b:c7:67:
f8:bc:e4:d5:cd:eb:cf:72:f0:3b:a3:84:3c:c2:ac:52:e8:1e:
b7:54:7a:01:fe:1b:ad:6b:8b:b7:66:80:99:d9:e2:9d:af:79:
40:48:88:4a:b5:4b:76:8c:10:63:48:ad:8d:58:fc:58:37:08:
08:1d:5d:a7:9f:c5:48:0a:43:73:70:eb:39:b4:23:36:a1:aa:
70:00:8e:ba:71:18:ca:31:1b:d5:c6:3d:99:ae:53:a0:44:18:
60:bf:fc:e9:1a:b8:d0:9b:0a:cd:91:f2:72:6c:ee:2c:62:ef:
48:9d:25:4f:7a:3a:39:97:c6:97:6f:17:6a:58:be:d1:8a:98:
de:b6:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:49 2025 by rpki-client