Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: iEDgO8XypppoIwqsH7P4t0zvsT6oY0mKyu/uXMnls7k=
Subject key identifier: 79:50:D4:57:88:85:22:CB:42:B5:11:53:BF:11:6C:20:C7:CB:22:99
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 0199FBEBF6F06D3272D005E6B74615A9BEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: 2xKhJQ54Xi/joCXP9qdc/dRbh1kNRx4OcsaBOEoO+5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f6:f0:6d:32:72:d0:05:e6:b7:46:15:a9:be:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=7950d457888522cb42b51153bf116c20c7cb2299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:54:f7:12:5f:0e:5d:64:57:7e:87:a5:37:
b7:86:5d:43:71:0b:82:45:2e:db:95:50:68:de:7d:
51:c7:34:a0:76:29:15:e2:4e:53:eb:5e:6a:bc:52:
48:ed:c0:1a:69:de:1f:6e:9b:8d:6c:80:a3:7e:13:
45:21:54:bf:de:29:70:d7:92:b0:5d:e6:58:ad:bf:
17:5c:d2:a1:dd:1c:18:f0:d9:43:be:9a:dd:ba:2b:
ca:6f:d7:af:1d:6f:29:a9:a6:81:85:7f:fe:d9:2d:
06:73:3a:61:cc:aa:a0:1b:40:eb:7b:9c:c9:52:80:
1e:db:b0:d3:90:ad:1a:98:04:3d:8b:68:43:7b:0d:
38:99:f9:26:05:9d:92:e7:5c:5c:c2:63:8c:b8:a4:
a9:5f:f9:bf:52:fd:94:66:13:cf:50:b1:40:0f:c1:
08:97:88:7c:68:13:38:d5:7e:e7:38:58:48:84:2f:
b4:b8:ec:fb:ac:8f:00:84:d7:25:c5:8b:6b:3f:56:
86:70:7b:b4:f4:69:e4:ab:68:6a:0d:11:09:cf:c1:
a3:b4:45:f7:27:10:8c:37:66:e7:ac:38:6b:09:94:
0f:da:5c:17:2e:4e:9b:1b:14:b0:ce:b3:7b:11:7d:
a2:81:fa:0a:ac:7e:07:a7:cf:7e:bd:f4:6b:5a:99:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:50:D4:57:88:85:22:CB:42:B5:11:53:BF:11:6C:20:C7:CB:22:99
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:27:7d:c2:26:2f:09:06:30:33:0b:20:ec:86:02:05:7a:
4e:81:b2:0f:ba:fa:ca:f5:45:e8:2c:71:7e:80:b0:b7:1f:43:
ed:3d:ca:b0:cc:12:31:ad:a3:83:3e:c5:98:2f:d5:a8:4e:9d:
af:9f:38:bb:4d:1d:a2:21:45:fd:5c:e7:ae:6b:eb:92:67:14:
dd:ff:ba:99:05:e3:86:81:6c:6f:3b:a5:a1:56:92:05:da:29:
6b:b8:27:03:29:9c:4c:43:ec:f6:bb:b4:1d:70:40:97:f8:07:
41:50:5a:13:e9:2e:62:f2:88:e4:16:0b:1b:c8:5a:b6:88:d2:
75:d6:fd:b2:29:6a:0e:41:34:b9:8b:a7:83:99:ff:5b:3f:60:
01:a7:29:64:3d:0e:44:2d:7b:5e:19:21:f1:4a:4e:bb:47:6d:
13:09:07:44:11:43:64:43:4d:12:79:6f:99:44:b5:9e:78:90:
75:d6:9a:67:82:2f:9b:c6:93:6a:bb:82:e4:1a:27:db:99:2e:
c2:58:77:12:90:43:51:66:94:24:36:6e:73:70:40:dc:be:47:
fc:59:80:aa:d5:22:38:f5:d9:62:58:b7:d1:86:74:4f:29:fc:
38:e8:08:c5:67:80:b3:7f:c2:18:6d:14:5f:d4:bf:67:a5:a6:
01:e0:16:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:34 2025 by rpki-client