Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
File: Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json)
Hash identifier: 0X8vjsp8Dgr0LvKGAO2IiLFjNU3EiFFJ8TG+ApMv/9A=
Subject key identifier: 5D:A7:90:0A:99:0A:0B:8C:61:F1:E0:7F:05:1E:42:EB:48:88:87:C4
Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
Certificate issuer: /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Certificate serial: 0199FC8F50D7DBA824581639F286635B08D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
Manifest number: 06FE
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: cA9FAp1h+UrUUmjGMQM0w8Ww/22sWB1xGLadEhzLaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:50:d7:db:a8:24:58:16:39:f2:86:63:5b:08:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=5da7900a990a0b8c61f1e07f051e42eb488887c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:24:ae:c8:a9:f2:eb:b7:49:13:d5:44:35:
49:37:a5:89:08:de:f6:09:77:3f:35:ea:fa:d9:d7:
19:40:89:92:6c:02:73:a6:aa:c4:d5:06:51:69:d6:
1b:d1:1e:5a:4b:e8:13:e2:51:d7:2d:9e:71:f8:ac:
87:26:73:bd:d6:f7:6a:2c:1e:8a:bc:a1:f5:51:54:
ff:8d:45:da:2a:58:8e:d2:11:cf:cc:55:ba:b4:98:
53:05:d1:3e:34:ea:c6:66:80:3c:9f:cf:5b:15:06:
fd:9a:1f:a5:5f:4a:3a:33:96:59:92:70:eb:eb:01:
4b:05:21:c0:35:ee:aa:a9:15:3b:40:d1:a1:e6:fd:
7e:0b:fa:59:18:4e:ae:7d:43:a2:0b:68:61:07:b5:
a2:ba:75:4f:e0:42:d2:ef:67:3d:18:ca:c3:72:b3:
f7:66:38:f1:f6:d3:5a:06:22:a6:8e:b8:52:b7:e2:
31:b0:11:0d:c6:30:2f:84:73:42:d0:3f:c9:ba:74:
97:0f:f3:63:25:9d:c2:23:99:62:79:30:38:82:5f:
2b:eb:53:07:3f:e9:36:85:3b:bf:af:e5:56:da:8e:
72:4e:40:fb:0b:a8:e8:e7:82:0e:92:61:03:21:c9:
6f:4f:9e:d1:49:8c:e1:4d:02:e2:a3:fa:f6:87:fc:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A7:90:0A:99:0A:0B:8C:61:F1:E0:7F:05:1E:42:EB:48:88:87:C4
X509v3 Authority Key Identifier:
keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:71:22:ad:f0:80:a7:b8:49:c5:e1:0f:cf:5a:9e:a8:9e:8b:
e2:2d:8d:69:66:fc:19:80:40:c2:63:af:06:61:17:79:ce:b6:
fe:ba:ef:a6:68:c9:d4:74:8f:d8:45:9b:6a:f6:70:b7:f8:be:
eb:7e:80:36:63:e9:53:32:5e:f5:44:48:1d:59:ab:9e:4f:10:
e3:00:6d:87:81:a3:63:91:bc:3d:8d:24:be:f6:41:7f:65:88:
11:19:c6:69:26:95:cb:b1:88:72:48:50:d6:84:ca:bc:d6:ad:
47:af:56:eb:ef:6e:58:15:90:87:b6:21:48:90:bb:2c:f9:ef:
a4:36:ce:38:74:27:ee:ec:d8:bc:8f:c3:e2:32:79:dc:c2:e7:
2b:a2:6f:ba:c9:0c:94:eb:ae:1e:2b:5b:21:ca:fd:dd:48:bf:
ae:a4:18:a8:79:f1:f5:f1:26:ee:48:e7:75:6b:f8:ed:85:67:
39:e9:20:f9:35:db:ac:aa:2b:04:64:c6:b1:e6:38:bd:1f:d3:
45:60:c2:7e:26:5c:24:dc:46:d1:4c:59:38:54:94:ec:97:4c:
2a:28:55:98:e0:43:e2:37:44:f3:b1:d7:a3:06:80:a5:c3:32:
3d:c1:33:43:34:12:5c:5a:a4:68:31:5e:24:11:35:79:4c:57:
24:4e:58:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:20 2025 by rpki-client