Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
File: pffZAsirU0AJh6GIKrJ_fPoBt0A.mft (raw, json)
Hash identifier: zu3hymJKOvWUazNWUcKqIRQBfhWaEISffHS+GtLmcwQ=
Subject key identifier: 04:EF:19:A7:3C:F2:71:BF:0D:07:D3:46:FD:F4:4E:5F:89:FF:34:47
Authority key identifier: A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
Certificate issuer: /CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Certificate serial: 019A006C2EF230C5C6085276A5E5806FAEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
Manifest number: 033D
Signing time: Mon 20 Oct 2025 07:01:21 +0000
Manifest this update: Mon 20 Oct 2025 07:01:21 +0000
Manifest next update: Tue 21 Oct 2025 07:01:21 +0000
Files and hashes: 1: pffZAsirU0AJh6GIKrJ_fPoBt0A.crl (hash: oKOUTdXXjw9Q6NrFLJoZccDPtgw+KMA4lZPz9wJ0qsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:2e:f2:30:c5:c6:08:52:76:a5:e5:80:6f:ae:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Validity
Not Before: Oct 20 07:01:21 2025 GMT
Not After : Oct 21 07:01:21 2025 GMT
Subject: CN=04ef19a73cf271bf0d07d346fdf44e5f89ff3447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:4b:80:44:c4:ee:48:b5:d7:6a:a5:72:59:
d6:66:73:2f:d6:68:0c:dc:a7:59:cc:ea:ac:8a:d9:
5d:21:bf:cf:2b:4e:02:ec:98:10:e7:62:cf:5d:36:
0c:de:3b:5a:80:94:c4:64:e4:7d:4a:01:f0:34:72:
e6:33:1d:c8:ec:dd:48:fd:5b:cd:ae:b4:75:a6:94:
8f:34:af:ed:d5:74:bc:28:17:6e:45:de:99:57:45:
34:1d:af:5f:56:de:db:19:8b:6b:4e:00:45:c5:fe:
4a:a3:f2:45:17:fa:1e:9c:78:c6:b6:28:ca:b2:cc:
dd:84:1a:43:92:30:01:b8:23:89:cb:82:18:8c:36:
4a:8f:f3:0d:a1:b9:86:48:6e:a6:3a:c2:a7:d7:cb:
22:74:3b:30:11:a9:03:ab:e2:8f:4c:75:58:43:33:
7d:45:45:ae:f3:9e:c5:0d:df:c9:e8:9f:22:bb:02:
44:3d:06:6d:52:cf:bd:d7:cf:55:a3:3e:ba:9e:56:
4f:63:11:c1:5d:c3:80:ab:dc:e0:54:80:ea:fe:5b:
5f:f4:90:24:f3:02:98:76:d0:36:f8:b2:2e:04:34:
78:28:e0:06:e4:82:d8:62:d4:9b:dd:46:c2:e7:cf:
8f:7e:80:31:1f:71:ee:e6:02:5d:93:50:25:3b:50:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EF:19:A7:3C:F2:71:BF:0D:07:D3:46:FD:F4:4E:5F:89:FF:34:47
X509v3 Authority Key Identifier:
keyid:A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5e:cc:29:47:e4:b6:a6:7d:47:95:8f:22:06:47:b3:66:7d:
37:1e:02:94:f1:5b:32:19:40:28:39:2a:ae:99:4a:8b:9b:68:
9e:56:cd:5c:87:20:2a:a6:70:64:0f:6e:f6:95:f6:6e:0c:71:
08:1f:c0:e2:c7:2c:8a:ee:e1:1c:9a:68:c2:aa:19:01:66:f6:
78:36:f3:ca:84:66:ba:5b:e2:d7:19:2d:8c:58:d8:75:89:cd:
38:73:f7:64:85:45:e0:ad:21:41:3d:0a:f4:2b:89:2e:2f:4f:
43:08:93:09:f7:b9:88:8d:39:7e:f7:e4:89:4e:03:5f:13:e1:
67:41:45:38:cf:31:f3:71:d0:c5:bd:ed:61:0b:54:3b:ae:44:
62:41:38:49:06:bf:e3:b1:64:31:00:5a:b7:f9:48:e2:30:56:
ae:b8:f6:9a:3d:ec:31:71:b4:88:87:98:8c:d8:9f:b0:0e:10:
2f:28:7d:f6:83:33:24:41:c0:e6:d0:9d:e2:0c:a5:80:e9:50:
52:a1:93:33:84:e0:e4:63:86:4a:83:0a:52:31:c1:0c:49:4e:
a2:fc:5f:5f:cc:83:44:c1:f0:d1:cd:09:54:04:b2:a1:a3:93:
4b:fd:d1:18:e1:e1:01:c4:9b:8a:69:8d:61:d7:3f:20:ca:64:
e8:d5:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:58 2025 by rpki-client