Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: 7KeW3hTYieR71sX76HnO/ZBUzPk9UkRYS/infvy4m04=
Subject key identifier: D7:50:C2:B5:C9:17:BF:E6:AE:E9:1B:E0:73:16:DE:CA:CF:C5:70:D9
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 0199FEB47F3473A9E255DCE223D991E73956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 049F
Signing time: Sun 19 Oct 2025 23:01:05 +0000
Manifest this update: Sun 19 Oct 2025 23:01:05 +0000
Manifest next update: Mon 20 Oct 2025 23:01:05 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: X53TodDbAHZ7TwK2ontxotUDqHrcyooMX2DsD2DFrLw=)
2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:7f:34:73:a9:e2:55:dc:e2:23:d9:91:e7:39:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Oct 19 23:01:05 2025 GMT
Not After : Oct 20 23:01:05 2025 GMT
Subject: CN=d750c2b5c917bfe6aee91be07316decacfc570d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:e6:da:f0:71:50:5f:f9:70:3c:f9:9e:0e:
de:32:0d:da:11:23:00:96:3f:51:df:9f:28:bd:b2:
07:f8:c3:aa:44:95:55:5d:79:97:09:b2:f3:0a:f2:
79:4b:d9:df:1c:4f:c4:b2:20:57:77:08:1e:fd:e7:
64:25:4a:45:c3:ac:20:da:8e:6a:e1:9c:34:c6:5f:
9e:b6:50:6d:b9:6a:46:43:e6:76:a2:93:86:cb:49:
e8:94:4b:7f:80:8c:c5:c7:95:09:6a:8b:2b:93:73:
ad:42:4f:cc:89:3c:d8:92:26:61:2f:cd:5b:70:ca:
57:fd:89:1e:70:e0:96:8a:92:66:38:88:9b:e4:69:
1a:17:eb:98:53:f6:aa:f5:13:8e:4e:99:a6:6f:c1:
3d:e4:e9:66:63:3b:06:cd:39:eb:a6:26:51:fb:ef:
f4:d8:ff:06:38:a9:5a:3a:99:7e:56:30:22:b3:ff:
46:1e:e3:ef:d8:58:13:53:fc:17:29:1a:bb:6b:3c:
b7:49:8d:2b:f5:fa:6c:e9:6a:76:2f:c8:2c:b3:e0:
f5:5b:3c:85:f3:de:86:9b:44:f1:c6:57:46:7b:d9:
6c:f6:45:31:25:bb:f7:6f:d5:ce:32:cc:c7:04:f5:
d5:81:93:95:0a:4e:8a:d2:0e:d4:53:bb:84:d3:aa:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:50:C2:B5:C9:17:BF:E6:AE:E9:1B:E0:73:16:DE:CA:CF:C5:70:D9
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a7:a9:6f:30:b3:ba:1a:84:50:e5:92:f5:7d:4c:0d:7c:90:
44:9b:03:7a:a2:24:38:4c:e7:83:df:03:d2:3d:a1:3e:e1:f7:
69:ad:59:fb:e7:fa:cd:60:26:1a:91:37:09:c9:0e:ff:3b:9e:
1f:2f:6d:86:da:64:6a:b9:93:5f:41:30:eb:c2:91:e9:8f:6e:
02:9c:5e:fe:3e:b0:d9:af:c3:f6:41:52:80:2e:e4:e6:fd:0d:
bc:28:ca:73:f5:d9:c8:84:5b:2a:3a:a5:b3:de:2d:9f:23:a1:
a6:5e:47:7f:88:3b:91:de:ab:9d:d9:94:3a:ec:53:75:20:3f:
33:3f:ff:12:4c:e9:13:ee:6f:9a:b6:d6:04:4c:46:8e:5a:5d:
52:d7:24:ac:5a:2a:1b:51:0d:12:28:a4:69:9f:ea:3e:e0:3b:
10:7e:97:e2:03:e0:0e:24:59:79:20:4e:49:88:be:83:53:ec:
47:5c:fd:e9:22:02:02:4c:a4:8d:c9:10:99:54:b7:dd:67:f3:
2b:b8:1d:5c:9f:f4:89:b2:27:f8:94:a3:85:ff:99:2e:fb:85:
46:6a:f3:88:6f:03:c3:e1:b5:f0:86:ec:56:91:4b:e7:53:c1:
30:5d:f0:dc:e8:a9:df:36:25:de:85:67:76:d8:31:c5:44:d2:
40:0a:4c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:18 2025 by rpki-client