Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
File: PP7M1r9kBrDPRPaCuTzYbjNGUko.mft (raw, json)
Hash identifier: gtoS6LJmBGpCepXJ9jv2kPa1YzBfW1fmp9WASyvDIEI=
Subject key identifier: C6:57:D6:BC:D2:D9:D3:99:6C:A2:4B:0E:AA:A6:3D:44:2E:DC:25:D0
Authority key identifier: 3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
Certificate issuer: /CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Certificate serial: 0199FDD91AB5D2447C5D7474AC9224D7057D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
Manifest number: 1259
Signing time: Sun 19 Oct 2025 19:01:27 +0000
Manifest this update: Sun 19 Oct 2025 19:01:27 +0000
Manifest next update: Mon 20 Oct 2025 19:01:27 +0000
Files and hashes: 1: PP7M1r9kBrDPRPaCuTzYbjNGUko.crl (hash: mFK6pU2d/sNpXGhoCCVz5vLtLbDgK38O54BNSwp57Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1a:b5:d2:44:7c:5d:74:74:ac:92:24:d7:05:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Validity
Not Before: Oct 19 19:01:27 2025 GMT
Not After : Oct 20 19:01:27 2025 GMT
Subject: CN=c657d6bcd2d9d3996ca24b0eaaa63d442edc25d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:b6:2b:97:b6:66:8d:b4:22:41:20:b1:c7:
fd:44:05:95:a5:8f:52:a9:e2:46:ef:55:2f:93:6e:
64:28:d2:c4:16:88:aa:ec:bc:09:9b:ae:82:f2:68:
68:d6:4c:1a:69:4d:a9:e2:95:97:ab:13:c3:c2:df:
70:29:8a:b3:11:30:8e:c5:16:91:7c:6d:dc:d1:f4:
44:c7:d8:68:f4:86:46:78:11:41:7c:ec:e2:7d:5f:
2f:f5:d4:15:b2:a5:1e:08:18:3c:d9:59:dd:31:16:
40:2a:be:a2:18:c0:24:8f:c9:b8:6a:4e:93:fe:3a:
76:14:0e:03:b2:d1:5c:eb:a4:92:25:6a:b3:54:90:
22:58:0e:c5:75:8b:22:25:4b:ed:1b:1b:25:56:c3:
e4:03:f6:ed:78:54:4b:e1:cd:67:5a:de:34:45:17:
e2:eb:eb:e5:4c:bc:58:28:12:4d:09:cd:23:59:56:
49:c5:65:e8:1f:ff:b5:e9:28:eb:1f:96:4b:a5:1f:
35:8b:66:79:10:59:9f:44:84:4a:4c:2f:90:80:5d:
de:84:97:1f:33:70:e2:64:4d:91:df:8f:a6:21:7f:
de:0f:e7:2e:aa:e9:67:05:33:34:c6:9f:94:79:ed:
64:06:a0:5d:4c:43:7e:1f:ef:4e:98:cf:b9:8f:30:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:57:D6:BC:D2:D9:D3:99:6C:A2:4B:0E:AA:A6:3D:44:2E:DC:25:D0
X509v3 Authority Key Identifier:
keyid:3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:29:f3:c1:5b:48:57:79:24:a5:4a:00:6d:19:35:92:2c:aa:
54:5e:e6:4a:7d:1c:5c:84:d9:65:02:91:6b:aa:d5:22:0b:ec:
41:83:9c:e3:2e:30:e9:f8:5b:b6:a3:ff:9f:fd:72:2a:3f:a0:
4d:63:f2:28:eb:8c:20:a6:3f:3d:f8:0e:44:19:33:d2:fc:d7:
cf:26:28:d6:2b:e5:34:c3:ec:ef:6b:14:91:43:8d:f5:e4:1e:
ab:b0:dd:01:c2:d3:b2:9b:93:75:bf:93:74:65:b3:a0:de:0b:
6c:75:4d:71:58:2c:04:59:f5:99:2a:10:09:0a:23:96:9c:d2:
05:21:63:52:5d:80:42:89:dc:62:51:d0:01:2c:06:a2:a1:cf:
fa:53:46:19:e1:72:00:8c:3b:47:cd:15:d7:b7:f9:0a:9b:eb:
06:ee:fd:d2:f9:96:33:c7:ae:e7:96:55:ee:e5:a7:04:17:20:
3b:cb:8b:01:9c:61:d2:2f:14:cb:4a:51:23:34:ff:de:2b:e4:
b1:3a:24:98:0f:65:27:83:62:fd:35:57:f6:1e:78:50:8c:83:
58:0c:da:4e:f1:b7:df:5b:48:40:45:d0:20:81:5a:d3:2f:bb:
94:df:a7:ac:62:3f:a3:b9:a9:6e:95:2b:b2:3f:a2:e1:c1:bc:
60:56:33:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:29 2025 by rpki-client