Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: K3bkbfLQuAdysCKykrCfyUepNxooJoPnLeRRPAXrxAw=
Subject key identifier: 75:3F:8D:81:48:95:88:FF:1E:41:C8:94:F4:5C:1B:61:A4:D5:45:C7
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 0198D54E534FF9C57AAF110E470727415799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 121F
Signing time: Sat 23 Aug 2025 05:02:16 +0000
Manifest this update: Sat 23 Aug 2025 05:02:16 +0000
Manifest next update: Sun 24 Aug 2025 05:02:16 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: ooscFrD7nfg8gQapI7U8iT4/OZFnujJtTNkiEdY2YWk=)
2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:53:4f:f9:c5:7a:af:11:0e:47:07:27:41:57:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Aug 23 05:02:16 2025 GMT
Not After : Aug 24 05:02:16 2025 GMT
Subject: CN=753f8d81489588ff1e41c894f45c1b61a4d545c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:50:4a:2e:88:ff:72:17:0e:d0:95:7b:20:
65:c0:3a:b6:9a:ac:15:ab:e1:14:50:71:ba:1c:34:
9e:59:a5:67:3a:2c:70:6d:4a:8f:c6:31:19:e1:b3:
05:6d:c8:a3:65:ee:c2:d0:17:28:de:90:e9:35:2d:
45:70:e9:e1:ef:de:85:73:00:4e:5e:b6:81:4d:de:
e3:d9:6c:f5:72:64:a4:e0:29:d1:72:a1:84:30:b2:
ee:f3:4e:99:cb:c9:b4:26:59:3f:64:e6:e7:f8:4e:
5e:f4:52:4c:0c:2d:4f:87:2d:3a:6e:3a:3b:85:3a:
80:cf:d5:26:a7:5e:d6:63:f3:11:4a:28:7e:56:b7:
5d:af:c7:d5:3c:4c:11:be:09:15:63:0b:0f:40:9a:
ec:8b:da:86:a4:13:a6:35:f1:3f:91:d0:75:fc:49:
42:09:18:9b:6b:35:cc:26:96:21:09:ca:3b:2c:f8:
0c:11:8b:a4:71:69:6d:7d:74:09:7f:7b:6b:91:b1:
bf:f1:d0:6c:1c:9b:5a:8e:fd:44:a1:d4:a2:02:a3:
a6:81:9f:0e:15:1d:32:fe:35:bd:6f:eb:bb:13:57:
32:fd:aa:b4:30:03:4e:6e:81:63:98:d1:86:3b:31:
f4:3a:72:12:0f:e2:23:12:3f:2c:f8:18:86:9e:93:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:8D:81:48:95:88:FF:1E:41:C8:94:F4:5C:1B:61:A4:D5:45:C7
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b2:5d:be:79:7d:27:ab:62:b7:9a:98:a9:a0:ec:2f:03:aa:
c9:4d:5d:e9:29:d0:04:16:ea:d9:a8:44:c7:13:11:11:66:6c:
7f:1e:c6:9a:d8:73:ba:a7:73:e9:13:25:53:ff:24:c5:fb:27:
68:ec:d1:2f:06:97:45:6a:52:5d:2c:51:68:39:89:98:7d:fc:
c1:9f:25:46:ce:b1:1d:48:fe:2c:9e:b3:64:cf:34:cf:d3:05:
16:b9:94:e6:df:dd:78:ff:32:74:1e:fe:c3:76:61:e5:70:3f:
fc:a9:8d:c1:23:47:c9:68:46:95:bc:45:5a:e3:70:45:8a:a7:
26:3e:69:78:09:39:ba:be:6f:da:83:bb:cf:85:76:9b:35:3a:
3c:48:bb:7b:65:c0:87:68:04:27:24:ca:d6:ed:aa:85:33:9f:
00:21:c2:79:a5:0a:5d:c4:3e:74:89:c5:10:6e:bd:f7:dd:06:
76:f1:97:99:b9:2f:2a:f4:c5:bb:0b:62:5e:f2:ec:c2:80:e1:
3a:92:75:ba:2d:44:03:9d:34:8b:d7:71:36:d7:21:8f:ef:6a:
66:84:17:b5:83:1d:b7:4d:56:f3:ef:d5:96:0c:53:c4:2a:6b:
bb:3f:76:08:b2:33:f0:da:9c:14:98:28:6e:43:1c:14:1d:26:
96:e7:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:58 2025 by rpki-client