Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json)
Hash identifier: t7RTFakkNIblLDBOYuK5/Gi1/oOttyPudQBLkHVU9t8=
Subject key identifier: 14:F0:3A:26:51:54:B5:E8:0D:9B:03:FE:7B:74:11:F8:B7:E4:D3:B4
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 019A01EC0CD29415665D0C6BC92013E7D84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
Manifest number: 0CF7
Signing time: Mon 20 Oct 2025 14:00:38 +0000
Manifest this update: Mon 20 Oct 2025 14:00:38 +0000
Manifest next update: Tue 21 Oct 2025 14:00:38 +0000
Files and hashes: 1: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: D+IohVZochC+6xErc7kFzEndhNlcuWwiLs7Y9JnUnnM=)
2: dJvnPDYPLo4Sslu_Zmnf2lx_js4.roa (hash: 5Msv4aPMo6ReE0YmQsW6vQo0j0v5HFcFjEhrex1AtOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:0c:d2:94:15:66:5d:0c:6b:c9:20:13:e7:d8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Oct 20 14:00:38 2025 GMT
Not After : Oct 21 14:00:38 2025 GMT
Subject: CN=14f03a265154b5e80d9b03fe7b7411f8b7e4d3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:32:e0:77:88:70:93:c2:9c:0f:43:83:1b:
16:e6:c3:cd:6c:2c:33:4b:dc:6c:85:ac:3f:bd:5c:
a5:85:82:c5:46:8e:6b:6b:e8:a2:ee:cf:71:c0:40:
20:16:0c:77:b1:95:22:62:3b:f0:55:8b:09:4f:70:
31:3d:16:72:1d:d8:f3:21:a0:03:ed:ad:cb:86:68:
d7:1e:67:bb:a0:1f:c0:af:cd:24:2f:bd:54:46:15:
55:9a:89:cb:6c:38:28:00:c4:a7:6c:75:0c:97:de:
6b:de:f7:cd:4b:34:f0:56:b7:e3:07:32:32:b7:95:
f0:b8:59:aa:03:cb:18:ce:02:2c:2c:b6:da:50:fa:
0e:b7:ef:23:b6:43:4a:07:dd:b2:a5:20:d8:09:31:
ae:a0:3b:9e:b8:d0:ba:a4:45:5b:16:98:76:e8:a7:
c4:58:f3:73:74:2d:a0:26:a6:27:3a:fc:78:7a:c2:
1d:55:fd:da:3a:0d:25:3b:74:ca:24:f6:d8:e3:18:
3b:86:e0:fc:40:35:4e:5f:cc:8e:38:48:18:d3:65:
27:f2:a0:48:4d:5d:e0:51:d5:d3:e3:34:72:d5:b0:
44:bc:97:2d:62:2a:99:b4:0b:74:96:12:d1:70:ae:
92:ab:67:6d:2e:48:6e:ef:cf:bb:a1:c4:4b:db:df:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F0:3A:26:51:54:B5:E8:0D:9B:03:FE:7B:74:11:F8:B7:E4:D3:B4
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:43:47:31:67:e7:9a:55:e7:f7:fd:e9:18:22:2e:8b:5a:68:
c1:62:9e:c2:61:e0:a9:06:85:e6:1c:07:1a:f5:1e:46:28:58:
f5:d0:87:43:78:3e:04:62:52:84:de:2d:4d:28:7e:88:4b:03:
15:28:50:9b:52:21:3f:44:2c:fc:ae:72:f3:6c:9a:21:5f:16:
15:f6:f0:a7:c4:32:a2:3f:f5:02:50:1a:f8:04:d6:1b:d5:cb:
6e:c1:b8:66:fb:82:8b:0b:ec:7c:b8:a7:ec:df:20:65:96:1d:
a8:dc:c2:14:0a:c2:91:7b:91:29:c3:96:93:59:c9:92:d4:27:
f8:a9:c2:a4:b1:ea:75:fd:f4:43:8e:2e:92:51:49:52:69:31:
a8:6a:00:c3:81:73:a9:6a:fa:a7:5e:e9:d4:d7:32:54:f9:f9:
1f:5d:18:64:bc:77:06:f7:0d:04:79:4c:9b:ae:44:57:fb:b0:
1e:3f:d5:e9:19:84:fd:89:eb:77:2f:18:a4:ab:bc:44:4f:6d:
d7:8e:c6:5d:bc:fc:60:1e:aa:09:ab:4e:f1:95:91:06:6c:8d:
08:5b:a1:fb:f8:ad:53:77:3c:87:b5:6d:7c:cf:62:49:b3:9e:
6e:ad:55:4d:c7:35:42:a9:5e:9f:2d:60:d9:a8:0e:78:a9:4a:
46:92:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:28:59 2025 by rpki-client