Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
File: PqFIQth34nvEBouYH-dK64vufnM.mft (raw, json)
Hash identifier: W16Xr855tUWFzuH8TrO0Wo28Viny/1HDojyV1Q08uqM=
Subject key identifier: BC:65:EA:62:38:84:50:FC:D2:3E:49:61:30:64:EF:0F:39:1C:77:3C
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Certificate issuer: /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial: 0199FBEBDE9C272C322A0433C1940A35CA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:43 +0000
Manifest this update: Sun 19 Oct 2025 10:02:43 +0000
Manifest next update: Mon 20 Oct 2025 10:02:43 +0000
Files and hashes: 1: PqFIQth34nvEBouYH-dK64vufnM.crl (hash: XTqSroFn62Y9YWePcMqiyg5qNcXwJlmF1ziY/1jGSHE=)
2: h5AoEy-X54Db83-jTlFH2Y1fCVw.roa (hash: HOh3C7TWeQ0O5hO+1P91yiEiZozSeSnp7F1/q290vZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:de:9c:27:2c:32:2a:04:33:c1:94:0a:35:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Validity
Not Before: Oct 19 10:02:43 2025 GMT
Not After : Oct 20 10:02:43 2025 GMT
Subject: CN=bc65ea62388450fcd23e49613064ef0f391c773c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:98:9f:5c:38:d0:be:43:fd:13:c1:3c:79:
34:37:c2:07:e0:ff:5d:9d:a5:e0:93:86:92:fa:e8:
d7:3f:91:3e:14:2e:de:51:81:de:86:d1:28:63:dc:
f6:2c:1a:92:15:b7:d3:3d:20:d8:a5:8d:d0:53:8b:
51:ce:03:73:c4:aa:a8:fa:17:2e:36:36:c1:a8:78:
14:dc:7a:a9:f9:b7:6a:2a:1b:23:1a:0a:85:fe:7c:
20:92:50:39:cd:38:8e:00:99:3f:b5:96:b7:2b:2f:
44:54:72:96:02:37:fd:58:b8:76:9e:49:b9:f6:63:
b1:fb:6f:68:90:00:9b:27:28:05:f8:8e:65:c7:0c:
59:93:17:d2:d0:30:91:d9:85:af:bb:78:ce:50:f5:
d8:1d:e0:45:e1:8b:91:62:09:b4:39:9a:9e:67:38:
25:21:4c:d6:ea:71:a0:9f:62:e0:66:59:9d:e3:2c:
99:94:e3:a6:89:68:da:b4:f6:d9:1b:ca:55:97:46:
d6:5e:12:56:0e:5b:08:64:eb:36:d7:49:51:0a:01:
6e:17:ea:73:48:43:d5:e6:b7:d7:57:58:4b:ee:7e:
7b:ba:06:45:bb:60:c4:15:9f:49:1c:59:ba:cc:95:
ee:bc:e2:c5:16:9d:70:2e:76:0c:f6:23:4f:48:ce:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:65:EA:62:38:84:50:FC:D2:3E:49:61:30:64:EF:0F:39:1C:77:3C
X509v3 Authority Key Identifier:
keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:67:f2:a0:17:dd:bb:6d:9f:0a:b1:e8:30:8e:3d:69:96:03:
b2:c3:e9:90:89:9d:4b:ae:8e:6f:1a:ed:a8:eb:56:0d:c8:2d:
97:b4:2b:10:da:eb:6d:10:0b:8a:8f:22:69:ed:2c:a9:53:e5:
8a:aa:fc:3f:e5:e9:07:df:dd:d5:e3:46:6b:37:16:d0:29:90:
a6:ee:9b:bc:1a:7c:37:82:34:f5:00:b4:00:b1:60:63:a8:d3:
a6:bd:0d:c5:77:37:34:f2:60:66:cc:2d:81:54:84:c2:ee:96:
8e:bf:20:fc:e3:46:be:32:2f:19:2b:ac:a7:40:0b:27:e7:1e:
5e:e4:ef:4a:bf:d3:14:e6:54:34:f4:9f:14:9a:88:ae:ff:92:
51:74:75:94:07:2d:e9:d3:da:12:86:4a:d0:27:02:de:7e:b0:
3b:f2:53:35:d5:87:76:c7:a0:c5:43:ec:da:96:be:77:89:48:
58:0e:95:59:80:ac:3a:5c:91:72:0d:e4:8c:3a:46:45:04:d4:
ba:65:ee:01:56:dd:32:75:9d:dc:fc:d0:22:06:e1:f9:d7:bc:
6e:b6:a2:63:90:cf:45:9a:f7:5a:f7:73:c6:b2:2b:6e:5f:38:
eb:37:3f:db:6c:5d:bb:1c:45:40:41:0e:8f:63:d4:9d:32:d2:
80:36:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:25 2025 by rpki-client