Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier: VFiAwlAPlDrfkGK4JFtCATBZk/OC5U1Z+pcIgdEWHAs=
Subject key identifier: 11:9B:84:B5:36:A0:03:94:16:41:4C:D3:CF:46:55:90:49:90:15:3B
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 0199FEB523E98263CD08719EC64A463024FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number: C5
Signing time: Sun 19 Oct 2025 23:01:48 +0000
Manifest this update: Sun 19 Oct 2025 23:01:48 +0000
Manifest next update: Mon 20 Oct 2025 23:01:48 +0000
Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: O2KWyCLSD62HdDccO8Y8XpB/yNUtA0YzkuVisy4nB9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:23:e9:82:63:cd:08:71:9e:c6:4a:46:30:24:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: Oct 19 23:01:48 2025 GMT
Not After : Oct 20 23:01:48 2025 GMT
Subject: CN=119b84b536a0039416414cd3cf4655904990153b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:94:e1:0e:b4:17:30:94:0d:71:17:99:a6:
05:f8:6f:cd:c7:8d:7d:d4:e6:3e:96:60:f1:b2:92:
f9:3b:11:4c:94:9a:a7:15:2a:01:58:c9:b0:3b:26:
26:f7:ba:ca:20:1d:9c:94:45:5c:f0:c4:38:21:4a:
62:e6:8c:22:f1:e5:84:89:a9:13:99:93:64:4a:e6:
4b:74:a5:c2:b3:10:43:b1:43:71:87:0e:15:66:1a:
48:94:e7:14:f4:d6:e9:75:9c:3e:13:92:a2:6a:32:
1c:b0:4b:9e:e6:64:02:a4:c9:6e:d6:49:8c:c0:b4:
09:3a:b0:fc:93:bf:34:95:70:33:b6:08:f5:c7:b0:
76:bb:70:35:99:f8:55:d3:c3:df:d0:cc:89:2d:1b:
db:28:40:70:64:d5:b2:07:67:ce:c0:23:2f:0c:fc:
49:8b:ec:9b:03:65:14:9a:f2:29:26:95:c8:6f:1f:
c2:8b:b6:5a:be:0a:4b:bb:12:fe:eb:02:a9:cc:6b:
84:ea:b3:3d:db:3d:2b:1e:25:f9:45:c7:9f:f1:d5:
6b:7d:c9:08:50:f7:e4:96:e9:7b:89:b3:42:3a:47:
de:39:67:98:05:9a:2b:76:80:b6:a1:d5:25:e4:4a:
16:ed:8f:b9:5f:70:86:23:b4:0b:20:fe:79:2d:7b:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9B:84:B5:36:A0:03:94:16:41:4C:D3:CF:46:55:90:49:90:15:3B
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e0:b1:d9:ed:08:e3:15:09:7b:76:3c:dd:82:51:cf:09:4b:
3a:3d:4d:de:e0:40:d8:00:02:17:fb:a9:71:ed:6b:eb:1b:11:
78:b9:d5:0f:8f:4d:d4:d1:d8:80:6b:17:b7:ec:06:4c:e2:cb:
ed:15:3b:49:95:b7:93:ed:eb:a4:5a:29:38:b9:22:30:0b:9c:
78:75:61:8a:e6:ed:ad:3f:f7:a4:79:20:7b:24:1e:2e:41:ef:
d9:52:16:8f:05:9d:a5:31:16:70:78:78:4d:a1:b1:08:be:da:
87:e6:a6:43:aa:5c:d0:60:e7:e8:d8:9f:39:f5:c0:bb:f1:49:
9e:9d:6e:08:4b:6f:95:c3:d4:65:85:06:26:65:22:32:f4:c5:
99:5d:67:8a:bb:ce:bc:51:d9:f1:21:e3:1c:97:2b:b5:ea:78:
42:6e:2c:ee:69:a6:a7:7e:b6:52:1b:10:9c:3d:2a:99:2b:05:
49:b6:a8:05:05:e7:36:09:b2:df:ae:33:ba:be:b9:80:d5:b5:
17:d6:94:7a:35:05:d1:f2:f3:8c:57:cc:9f:58:43:0e:56:aa:
be:9c:6e:97:11:45:68:b5:79:d4:11:56:92:8d:af:33:72:3e:
3b:48:12:54:45:fe:06:13:6e:cf:b7:22:26:74:ae:dc:f2:19:
ed:1a:e7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:28 2025 by rpki-client