Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: Lyyt2fhsro70+KEiVU5thFfuUaUqZyFsdZEtcEttZAA=
Subject key identifier: 5A:9E:8A:43:8C:CA:09:09:46:85:83:0B:B1:F4:53:4B:6E:AB:22:07
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 0199FCC687586190A8A9D1EC6F0270629D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 12B8
Signing time: Sun 19 Oct 2025 14:01:33 +0000
Manifest this update: Sun 19 Oct 2025 14:01:33 +0000
Manifest next update: Mon 20 Oct 2025 14:01:33 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: 0X7mHsB3Yy/NccevXUnp/rMEzQZURNRCgJKLSIUczds=)
2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:87:58:61:90:a8:a9:d1:ec:6f:02:70:62:9d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Oct 19 14:01:33 2025 GMT
Not After : Oct 20 14:01:33 2025 GMT
Subject: CN=5a9e8a438cca09094685830bb1f4534b6eab2207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:b7:f2:f5:a4:af:64:13:1b:ac:a0:f8:d6:
1d:93:b5:71:ac:e3:8a:3d:ba:cb:fa:46:08:26:f2:
85:dd:53:6e:a8:8c:f6:d0:84:53:3e:34:42:8d:17:
2f:63:d5:1b:d9:cd:d7:12:94:7d:cc:b0:8a:74:34:
2b:d1:69:3f:f5:25:ab:5e:4a:5d:c6:36:18:ae:f2:
7d:26:0d:64:ba:4b:c3:0f:82:38:7b:98:b5:2e:7e:
7a:da:11:a5:aa:6a:15:3e:dc:83:28:5d:11:d8:8c:
97:ef:73:7c:5d:bb:2d:eb:45:f0:9e:68:8f:8f:c5:
6e:cb:da:4b:28:5e:72:fa:9d:96:0c:8a:fe:0d:32:
ea:bc:3e:e9:18:66:d9:46:55:04:ec:b7:01:bc:9f:
1d:94:76:09:cb:de:c8:80:16:f2:e1:df:f6:6a:1d:
b2:c7:ec:e7:b8:fa:88:3d:c5:a7:83:1a:ab:f8:49:
6f:20:af:6d:da:b5:e9:99:b0:9e:49:97:ef:d0:c9:
89:3a:a9:3e:1a:b6:35:af:39:5d:0b:b2:7e:86:8b:
61:bd:32:92:64:c9:c2:c3:5d:42:45:dc:d3:c9:e9:
47:c8:76:54:d6:ba:49:9d:c8:9d:3c:82:83:e1:ff:
49:86:57:43:fa:25:6d:3e:74:83:5b:e6:92:4d:09:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9E:8A:43:8C:CA:09:09:46:85:83:0B:B1:F4:53:4B:6E:AB:22:07
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:65:c8:2e:82:13:01:51:e3:d8:b7:86:c2:e3:a8:7b:f9:5b:
20:85:a3:d9:65:35:81:0d:d2:fc:67:40:f1:10:48:63:11:cf:
a2:0e:94:7e:0b:20:64:e6:0e:21:29:f6:47:6e:87:19:dd:94:
d5:16:bc:68:e1:f8:8a:67:73:d3:31:ce:45:d0:14:4e:86:29:
1a:94:91:4c:d0:73:da:f6:c3:be:b5:91:42:d6:8a:26:59:e8:
64:44:92:52:fa:c1:df:8e:1d:da:a7:51:fc:2d:53:2f:95:b7:
f4:da:f4:21:fd:0d:18:77:0c:04:16:a6:6c:06:61:86:e8:15:
19:d0:6a:51:84:dd:3e:fc:5f:9b:2b:bd:9c:6f:7a:57:a5:d3:
44:12:7c:d2:a9:2c:65:cb:56:37:c6:a5:30:9c:55:4f:80:c2:
8c:71:1e:60:bb:4c:b9:88:77:f5:fb:96:a9:55:bf:74:83:e4:
f5:d1:26:5a:37:6c:f7:e7:75:64:c7:54:28:43:25:b1:0e:27:
06:b7:48:3c:c7:e0:88:ee:29:9f:e2:e7:5b:af:67:6a:1a:b2:
02:6b:22:75:30:4b:00:bc:24:01:05:87:76:24:07:d1:99:c7:
15:c1:6a:3e:54:b0:26:89:4a:90:03:2e:54:36:24:d5:47:18:
07:55:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:25 2025 by rpki-client