Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier: LcE0S1UcoTuc3DemS2zRglu0Vi2tRdHBhzp9IbgKsYc=
Subject key identifier: 01:EF:3E:13:D6:0D:1D:60:9C:27:F4:04:62:8D:54:AE:3A:3C:B1:62
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial: 0199FC58EB4E4318519379EEED8F0EBB383C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number: 0719
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: u74HpyRfltj8+OSE5n5Zxkdpc3HDb3xAC6zZ296lV/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:eb:4e:43:18:51:93:79:ee:ed:8f:0e:bb:38:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=01ef3e13d60d1d609c27f404628d54ae3a3cb162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:6b:62:a4:87:98:77:a1:fe:ed:22:ee:c7:
a5:17:9b:97:c0:a9:ab:e5:91:00:73:16:31:2a:16:
6e:91:cf:97:4a:b8:2b:4e:38:47:4c:bb:ab:5a:af:
96:d3:a8:c4:50:70:66:3e:0b:30:95:4d:78:8c:47:
a6:be:15:a3:7e:13:22:9e:20:a8:07:81:2a:ac:28:
b4:7e:b4:be:c6:40:a0:c1:12:09:4f:46:0d:51:81:
15:0c:88:b8:5e:0a:d4:3c:e2:a6:47:a0:33:c2:ea:
79:56:19:db:49:09:eb:35:47:aa:e0:00:9a:95:c9:
5b:37:6e:a9:d2:9a:a9:b3:40:a1:90:78:6c:1f:f1:
f0:87:e4:3e:6c:23:bf:da:c1:fc:94:53:1c:c7:e4:
c5:1e:0c:8c:07:47:78:50:aa:0a:fd:6a:ea:6c:75:
55:45:93:50:06:ed:d7:2f:be:97:42:ec:76:18:9a:
48:6f:ad:67:f8:e3:1f:5a:5b:49:a2:26:a1:34:2c:
e4:58:8d:98:95:68:26:92:1f:c4:29:c6:0a:58:90:
9c:9a:87:01:70:6a:2c:6d:ea:d1:24:9e:34:8b:2a:
1e:90:9a:ef:b8:24:8d:8b:70:95:cf:b6:36:3f:27:
7c:c2:b2:c4:3b:12:f3:76:ec:5f:3b:d2:05:f8:50:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:3E:13:D6:0D:1D:60:9C:27:F4:04:62:8D:54:AE:3A:3C:B1:62
X509v3 Authority Key Identifier:
keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9b:32:36:3d:da:16:40:8c:2d:49:d5:4a:e6:48:9f:8a:27:
c0:66:6a:f0:8a:6d:0d:36:d0:0f:e2:21:0c:1a:d5:db:50:91:
4d:3f:28:a9:9d:dd:5f:04:5c:9c:3f:6b:52:4f:c4:58:65:93:
46:a3:a3:10:e9:10:cf:dc:18:3d:1f:34:cd:c7:a1:54:5e:48:
9f:50:fc:f1:0b:b5:44:05:64:6d:85:c5:de:9f:80:09:e1:79:
13:30:17:29:6c:11:ec:a2:6f:2a:fc:54:eb:b9:62:7f:d7:6d:
c7:63:e0:23:84:66:8a:c8:89:2b:a0:49:50:86:a3:65:91:8e:
08:fb:14:2a:53:69:72:b8:2a:2a:ad:97:1c:2f:16:ac:98:32:
04:9f:69:28:f6:78:3e:32:d3:ed:43:b6:1a:de:77:77:c1:58:
53:e6:3c:21:48:76:19:51:82:89:f6:7c:0a:a2:6a:34:6d:fc:
d6:33:2e:c6:84:21:f9:0a:70:3a:b4:45:2c:ed:57:e5:e3:6b:
32:c6:a9:4d:03:39:e5:b8:6c:73:32:b3:d3:20:c3:cf:c0:e6:
90:1a:f7:15:29:6d:70:f6:90:b4:a6:e6:42:28:a5:c0:92:55:
21:a1:0d:eb:03:a4:f1:85:1d:61:45:ab:a1:bc:4f:30:3c:66:
5b:0d:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:35 2025 by rpki-client