Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
File: pcvT2g02IF_SyP0d-VXFC1UB7dE.mft (raw, json)
Hash identifier: BVfccHbgJUvWfDQtotLbYEMLwKSiY2A0DgQrEqg4hrw=
Subject key identifier: 4B:55:AC:EB:24:96:E1:42:7C:C8:AE:F7:1F:72:E2:5C:24:A4:43:C6
Authority key identifier: A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1
Certificate issuer: /CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1
Certificate serial: 0199FD3425616417A9FC34F7149157348431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
Manifest number: 018F
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: pcvT2g02IF_SyP0d-VXFC1UB7dE.crl (hash: MfxgPH0h1C0ISJPBnINoZuiZ3jvdlfgE+A3aYLFcfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:25:61:64:17:a9:fc:34:f7:14:91:57:34:84:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=4b55aceb2496e1427cc8aef71f72e25c24a443c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:60:25:21:a6:5b:9b:86:24:31:79:57:a8:
73:1e:23:63:3f:78:52:14:75:4e:93:8e:4d:10:db:
c0:55:cc:07:1f:41:dd:6c:52:39:b9:27:08:b6:05:
4f:34:a2:a0:98:a0:47:5a:27:dc:04:1c:d2:01:d6:
08:e2:14:99:a9:b6:05:eb:21:56:ab:7c:d7:94:9f:
ca:c9:16:59:97:ba:b7:94:8f:08:26:ff:29:92:7b:
c8:89:bc:b3:ee:83:16:38:95:2f:69:18:da:a3:44:
da:35:8e:7d:0c:95:85:57:fd:fb:36:44:a6:18:b7:
2e:fe:65:ee:39:35:5c:95:f6:b2:e1:63:55:8d:ad:
74:60:ca:cc:39:91:f4:12:85:56:3c:8a:35:8b:96:
c8:5e:0e:9c:ae:d0:4b:c3:31:80:0f:80:64:92:a6:
2e:cf:7f:ef:b0:4f:c0:69:dd:b8:95:14:49:98:14:
74:41:38:0f:21:e3:7f:a4:6a:50:5f:51:4d:bd:c0:
c4:c6:88:8f:21:c8:bc:4f:5a:de:1b:16:de:0c:67:
7d:9d:5d:81:23:f8:48:c7:8f:65:b2:b5:fb:46:b6:
d6:ff:3e:17:b5:74:49:4c:ab:ea:21:b8:d8:5a:27:
54:ab:cb:ae:a3:bd:86:1b:88:f9:af:d4:47:8a:7e:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:AC:EB:24:96:E1:42:7C:C8:AE:F7:1F:72:E2:5C:24:A4:43:C6
X509v3 Authority Key Identifier:
keyid:A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ef:93:b8:31:d6:1d:76:60:02:33:8e:b1:a5:7e:3a:a4:e0:
d6:c7:16:95:62:b9:42:43:00:ad:c7:66:4e:1f:e3:03:fb:aa:
dc:66:2d:36:cf:e3:89:9b:d0:61:b9:69:cd:64:68:db:aa:d3:
5c:8e:0e:58:66:5c:97:25:5d:73:4f:be:92:d6:d2:d1:71:18:
a4:0a:22:2b:a0:f9:6f:4a:61:04:f3:2a:9a:ab:12:7d:b0:4d:
95:08:af:76:ea:b8:e8:26:fc:f9:44:4b:2c:77:e9:62:9d:5d:
0a:49:94:c7:f1:3f:82:39:21:f4:f8:03:5c:dd:83:15:56:da:
d4:a7:39:e4:80:28:a3:fc:80:63:35:33:bd:67:ac:0c:16:79:
c0:db:df:dd:25:97:94:8e:29:a2:67:dc:52:cf:e8:21:82:5d:
50:81:9a:62:06:a9:ed:02:d9:02:92:84:39:a0:b9:d7:64:dc:
14:f0:29:6a:c4:20:ea:b5:89:14:83:fa:b7:32:ed:d7:10:ee:
a9:a5:a6:17:76:2c:71:d6:ea:8f:a9:55:7b:d9:e8:8e:5e:c2:
3b:09:f5:66:43:a3:65:70:60:19:3f:7f:40:72:13:41:99:7b:
d8:9a:69:73:9f:a3:3a:bb:bf:64:b6:d8:46:4a:e4:50:85:fd:
7c:5f:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:11 2025 by rpki-client