Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
File: PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft (raw, json)
Hash identifier: AA7nlQ6BJ/nWmKIBbPkxqGbIadYUFW1vcPotADpeSRI=
Subject key identifier: F7:C5:08:4D:0F:25:6D:DF:91:D0:6F:EB:D4:AE:C7:F0:EE:0E:5D:54
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0199FB45B68A73D563570B813BBC08640E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
Manifest number: 11B5
Signing time: Sun 19 Oct 2025 07:01:13 +0000
Manifest this update: Sun 19 Oct 2025 07:01:13 +0000
Manifest next update: Mon 20 Oct 2025 07:01:13 +0000
Files and hashes: 1: PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl (hash: FxHK+tODXV4uC4xKO+swNVLrATbj2TeiT4w7ndaSZFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b6:8a:73:d5:63:57:0b:81:3b:bc:08:64:0e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Oct 19 07:01:13 2025 GMT
Not After : Oct 20 07:01:13 2025 GMT
Subject: CN=f7c5084d0f256ddf91d06febd4aec7f0ee0e5d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:85:30:15:d0:6b:c9:06:7e:44:f6:5e:24:
89:9f:0f:0a:e2:04:88:d7:35:5a:66:c9:c7:77:cd:
7c:ab:6d:b9:df:0c:db:4d:6e:d6:97:33:38:5b:f0:
cf:c6:c3:35:f2:6b:ff:01:11:de:60:8a:b7:ad:3f:
95:da:7d:36:e0:8e:ac:83:bf:be:ed:e6:6c:70:65:
02:cd:ac:3e:55:1a:ef:99:2f:01:04:4b:23:19:03:
37:e2:df:4e:a2:55:34:81:30:df:56:96:e6:2f:75:
67:75:29:d4:bd:06:bb:14:77:2a:8f:95:cd:1b:9d:
4c:82:2a:21:d9:7d:5c:ff:23:c9:38:99:25:9e:05:
35:49:17:9f:8c:34:c7:85:d8:bd:c9:39:8a:e6:b0:
df:eb:68:7c:da:b3:36:86:c4:61:e7:c9:67:75:27:
37:eb:c2:e3:0a:42:4c:b3:3e:9e:90:b9:7e:3c:99:
40:75:df:63:27:e1:7d:83:04:c7:d3:f3:2f:1d:b9:
ba:1d:d2:b4:26:90:01:14:fe:7a:3f:f9:12:bd:52:
d4:87:3c:cc:3c:db:ec:31:fb:0a:ab:ae:bc:ff:63:
b2:75:66:2d:6f:8c:a4:df:0e:2a:e8:3c:d4:d8:62:
58:35:8d:49:27:9e:34:e5:84:8b:80:4d:27:14:37:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C5:08:4D:0F:25:6D:DF:91:D0:6F:EB:D4:AE:C7:F0:EE:0E:5D:54
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0a:20:96:b4:f8:be:cf:7d:7b:7f:29:32:5c:16:f0:36:5c:
a2:99:39:29:b6:59:ae:85:b7:c7:2e:2e:c5:4e:ea:cf:69:e7:
7f:3c:fb:80:b2:a6:89:33:2f:e9:1c:07:9a:ab:a1:e6:83:3c:
63:dc:47:8c:c0:0a:a0:45:df:ab:da:30:51:87:41:e1:82:07:
04:f4:51:c5:59:84:3b:69:c6:7c:fd:c5:50:7a:f4:e7:37:4b:
13:c4:d0:0c:30:bf:07:0b:60:27:44:b2:6a:4d:1f:4e:3a:58:
56:7b:ad:e6:5d:c8:ef:19:8a:3f:bc:11:4b:2a:58:63:35:d9:
0d:3e:9a:e0:6e:cf:d7:dd:62:d8:be:39:93:fa:b2:eb:b5:e9:
1d:44:97:1d:ab:f7:6d:f5:50:87:e1:38:78:fe:95:16:74:7a:
d6:a4:cf:10:d4:d9:10:56:87:95:99:2d:84:ae:6e:86:c0:ba:
6a:85:0e:9a:f3:62:65:7e:96:d4:5f:5c:a4:58:2c:b1:45:3c:
bb:ff:3a:33:e0:1c:c4:85:63:67:42:f7:93:c5:1a:d1:df:05:
dc:00:71:8b:30:22:46:dd:9a:75:9d:77:49:3c:ae:f2:61:e4:
5d:3b:cf:79:92:bc:11:cf:06:7a:e0:34:48:77:41:a3:fd:3f:
9f:cf:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:25 2025 by rpki-client