Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: zpcKAlb50T14PVqOmLF3P4ACXfX7a1sMaYWQ1K8AUf8=
Subject key identifier: C1:DE:9E:93:97:A5:2B:E8:1D:EE:58:53:E5:28:D4:CE:9D:F4:91:CA
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 0199FFC8AD9438475AD8200D4475C5B575F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 16DF
Signing time: Mon 20 Oct 2025 04:02:45 +0000
Manifest this update: Mon 20 Oct 2025 04:02:45 +0000
Manifest next update: Tue 21 Oct 2025 04:02:45 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: lHsw2tUYhi0dzLHO2aZSSGeqnXtjmSzsjJW/ZVt7Zwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:ad:94:38:47:5a:d8:20:0d:44:75:c5:b5:75:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Oct 20 04:02:45 2025 GMT
Not After : Oct 21 04:02:45 2025 GMT
Subject: CN=c1de9e9397a52be81dee5853e528d4ce9df491ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:d9:62:01:3e:77:56:91:63:eb:cb:87:d1:
46:b4:ec:04:63:c9:68:ad:f7:37:fd:21:7e:3c:7e:
83:93:5d:c6:9b:c5:41:f2:c5:ce:3a:e6:12:dc:78:
83:35:28:31:aa:16:32:d2:46:55:db:35:1a:7b:47:
83:83:98:ab:f2:2c:3b:fe:20:44:97:d2:d0:0a:38:
ee:34:99:d1:97:38:07:54:d7:69:34:c1:cd:71:9f:
3b:3a:0b:0c:4f:07:61:bc:42:1b:29:d1:6e:6b:98:
12:53:ee:17:99:33:f1:e0:57:66:ea:82:0d:6d:f5:
56:e0:00:f2:b4:8b:29:00:71:68:74:5a:e4:88:24:
cf:b2:94:ef:8d:51:31:cd:ae:99:a0:dc:0d:c1:4b:
3a:a3:5d:3b:0a:64:e8:91:57:f4:9f:59:a4:32:a1:
e9:10:28:50:63:b7:7a:1b:5b:96:c2:41:67:ad:b9:
89:2a:e8:3c:77:4a:fa:e1:f6:bb:e6:83:37:56:63:
cd:8e:9e:4e:60:14:28:c6:b2:d9:d4:25:a8:0f:bc:
bb:27:ef:9e:b9:aa:53:e2:65:55:c8:02:74:0c:b6:
e1:bb:e2:a3:62:37:4b:61:16:53:56:19:fb:c4:7d:
8c:b1:fb:ac:1c:d7:f1:a5:aa:48:d9:11:12:7c:c0:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:9E:93:97:A5:2B:E8:1D:EE:58:53:E5:28:D4:CE:9D:F4:91:CA
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:77:33:66:61:ce:7c:16:0c:a5:12:e2:88:8f:50:8e:e3:d8:
b3:f3:de:8b:5a:e5:df:83:9c:e4:4e:e3:fc:f7:f2:d3:9a:92:
0a:02:2c:d6:63:50:cb:3b:3d:40:80:75:ca:ca:e4:2a:72:6c:
7f:ab:73:a5:d4:33:f8:41:c3:2c:55:3f:01:6c:8d:c9:3b:98:
a3:13:c3:3d:e8:bf:de:a8:67:44:11:76:34:07:02:d4:34:ce:
da:0a:4a:a1:c9:33:23:7c:cb:ac:e2:52:7b:29:4a:dd:78:b3:
6c:e9:c3:5c:1b:d5:a9:05:a9:f7:94:47:b1:1a:e7:45:47:b0:
50:82:01:3e:d7:72:1a:4d:77:b5:6a:54:1c:2c:cb:e8:91:88:
af:12:f3:d1:d4:85:ae:ff:bf:4f:cb:07:7d:ab:4f:1d:7b:36:
92:76:49:28:5b:b3:f3:fe:25:b4:39:7d:60:b0:77:fb:63:f4:
b3:dc:43:12:cf:13:7d:5e:ec:8a:22:0c:12:29:96:40:2d:02:
fe:d9:fd:62:64:ab:ac:b2:ef:0c:89:65:c4:ac:55:42:8c:34:
52:f7:1c:b3:12:e9:00:25:9a:48:8e:ea:16:89:21:d6:41:92:
d9:73:e1:8e:a5:af:91:3c:9f:29:7b:58:60:06:82:99:ef:f8:
b2:42:dc:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yK2UOEda2CANRHXFtXXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTZlZDMxZjk3ZjM3YzVlNWM1NTA3MzJmODVkMjQ2OTA5
NjJjZWYwHhcNMjUxMDIwMDQwMjQ1WhcNMjUxMDIxMDQwMjQ1WjAzMTEwLwYDVQQD
EyhjMWRlOWU5Mzk3YTUyYmU4MWRlZTU4NTNlNTI4ZDRjZTlkZjQ5MWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiLZYgE+d1aRY+vLh9FGtOwEY8lo
rfc3/SF+PH6Dk13Gm8VB8sXOOuYS3HiDNSgxqhYy0kZV2zUae0eDg5ir8iw7/iBE
l9LQCjjuNJnRlzgHVNdpNMHNcZ87OgsMTwdhvEIbKdFua5gSU+4XmTPx4Fdm6oIN
bfVW4ADytIspAHFodFrkiCTPspTvjVExza6ZoNwNwUs6o107CmTokVf0n1mkMqHp
EChQY7d6G1uWwkFnrbmJKug8d0r64fa75oM3VmPNjp5OYBQoxrLZ1CWoD7y7J++e
uapT4mVVyAJ0DLbhu+KjYjdLYRZTVhn7xH2MsfusHNfxpapI2RESfMAA9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHenpOXpSvoHe5YU+Uo1M6d9JHKMB8GA1UdIwQY
MBaAFD6m7TH5fzfF5cVQcy+F0kaQlizvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODkt
MmU2NzkxNjk0YWViLzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODktMmU2NzkxNjk0YWVi
LzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHczZmHO
fBYMpRLiiI9QjuPYs/Pei1rl34Oc5E7j/Pfy05qSCgIs1mNQyzs9QIB1ysrkKnJs
f6tzpdQz+EHDLFU/AWyNyTuYoxPDPei/3qhnRBF2NAcC1DTO2gpKockzI3zLrOJS
eylK3XizbOnDXBvVqQWp95RHsRrnRUewUIIBPtdyGk13tWpUHCzL6JGIrxLz0dSF
rv+/T8sHfatPHXs2knZJKFuz8/4ltDl9YLB3+2P0s9xDEs8TfV7siiIMEimWQC0C
/tn9YmSrrLLvDIllxKxVQow0UvccsxLpACWaSI7qFokh1kGS2XPhjqWvkTyfKXtY
YAaCme/4skLcdw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:05:19 2025 by rpki-client