Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: 7XufvrVSKuTJtGyOGC5rYKL/dXUf3kG2Xv87IUScaug=
Subject key identifier: EF:A9:B2:DC:AA:91:B7:82:D3:04:38:88:CB:CB:57:D4:49:A9:63:E2
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 0199FCFDB12EE344D7071AFAF03B86CF87BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0E28
Signing time: Sun 19 Oct 2025 15:01:48 +0000
Manifest this update: Sun 19 Oct 2025 15:01:48 +0000
Manifest next update: Mon 20 Oct 2025 15:01:48 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: 4FN85BQEeDkE9CSPZD7V/cQPXeIw5WzX9VoVuimEE7Q=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b1:2e:e3:44:d7:07:1a:fa:f0:3b:86:cf:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Oct 19 15:01:48 2025 GMT
Not After : Oct 20 15:01:48 2025 GMT
Subject: CN=efa9b2dcaa91b782d3043888cbcb57d449a963e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:ed:04:e0:6b:1f:ad:62:c0:d8:84:7b:d6:
27:d7:58:6b:02:59:9c:0b:b4:bf:f1:1d:c5:89:78:
c8:2a:60:24:a8:8b:f3:52:6f:bc:78:30:87:41:1a:
6e:ea:09:7d:ac:c8:96:2e:d1:f3:d3:02:2a:1a:b3:
d3:cf:ec:59:e3:59:05:88:f4:e3:64:79:09:71:da:
69:d6:17:0d:92:34:37:04:7d:e1:a5:78:7b:2c:87:
be:b3:ac:ea:34:9e:23:d0:38:1a:0f:70:e9:db:14:
04:c3:b6:6d:12:ed:79:fd:03:fa:ff:9f:af:8e:78:
b9:dc:b5:a3:4f:ce:2e:f9:50:89:7b:fe:1e:d1:f1:
93:d4:ab:3b:6e:c5:9b:28:7e:a8:54:3a:d1:ac:30:
c6:21:c0:90:b7:ce:70:df:e1:21:f4:9c:15:64:99:
93:3d:a7:51:a6:33:33:40:11:ef:14:57:56:da:08:
47:6b:c5:78:e0:50:f1:6f:ad:48:a4:90:8b:bd:ec:
ef:4f:0b:ee:b9:b5:00:1b:07:14:a3:4d:ce:84:86:
37:c8:ba:80:36:d2:1b:53:f0:7d:a9:b0:65:1a:eb:
60:d8:1c:ab:21:c0:49:1a:f0:05:b9:56:7e:7e:49:
0f:2a:b4:19:9d:f5:c5:16:15:e5:a8:6c:48:83:33:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:B2:DC:AA:91:B7:82:D3:04:38:88:CB:CB:57:D4:49:A9:63:E2
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b7:59:8b:c0:fa:53:fe:a0:78:19:e7:9f:c9:4f:cf:df:e5:
78:93:ea:f8:e5:a0:f4:4e:48:84:71:21:65:d9:3a:e0:9e:fb:
2a:b3:41:98:f9:cf:9a:74:52:3a:f3:b7:37:d6:87:d3:f5:c1:
87:b3:f9:ff:33:a2:7f:8a:65:37:d2:e1:34:98:15:f3:3c:9f:
8d:57:d5:3f:2b:61:61:f5:9b:c5:ce:a7:11:5b:02:f8:4a:0c:
a9:66:f1:d3:53:a0:81:16:b6:54:27:67:d2:41:74:cf:c6:a4:
fc:c7:c0:1c:b1:e1:12:55:7c:fb:1e:66:68:f8:04:06:cb:05:
94:b0:8e:f9:07:f8:9c:98:2e:05:c6:4b:59:cc:50:26:4d:52:
45:75:d7:b4:10:95:6d:87:0b:a0:0e:c9:d6:57:5a:b2:3e:d0:
e0:a3:b8:44:2e:49:14:a8:51:11:2b:89:70:06:8b:58:3f:f8:
dd:fa:32:6b:7a:2e:1d:c1:f2:54:3a:20:30:34:98:26:42:40:
fe:b4:aa:52:e4:6b:8d:96:58:4b:88:9b:cf:93:7b:19:70:be:
a9:ea:88:10:3b:3e:a5:7b:e8:5a:86:0d:d8:58:a2:3b:14:35:
3e:d4:1a:57:d9:f7:f0:19:bd:a2:0a:07:e4:f4:4b:b2:0c:0a:
e1:55:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:25 2025 by rpki-client