Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
File: PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json)
Hash identifier: ZQZZqH7gGBkRexGlnXDYNiXiwRC2TgJEnqPKkRUJ90A=
Subject key identifier: 97:30:1D:EC:F0:7D:68:0F:F0:A7:C2:5D:C3:B2:48:11:C4:8E:F1:CB
Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
Certificate issuer: /CN=3d0263c9575cbd011263ae88839a7888b74fa076
Certificate serial: 0199FBEBB559870F25969E8CA5893605670D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
Manifest number: 120D
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: sEY92kyrtFhHh16/aTHBs0NvlFmNMZkJUxyfKDeFAH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b5:59:87:0f:25:96:9e:8c:a5:89:36:05:67:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=97301decf07d680ff0a7c25dc3b24811c48ef1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:9c:a6:a4:ea:fe:10:b0:5a:eb:41:21:7e:
2c:e0:16:49:ef:cf:98:b2:7b:30:74:3e:a5:1d:48:
b7:fc:a8:dd:4c:21:3a:33:51:59:8d:c2:14:f1:ae:
bf:7a:ef:a7:83:a0:9a:fa:fd:0c:94:cd:35:34:d7:
36:b1:bc:41:e1:65:b6:1c:4a:04:74:3e:f7:c8:15:
ab:1b:5d:10:92:47:5c:f3:a4:8c:7d:49:fd:1b:c9:
07:6b:0b:f7:fc:83:8b:42:47:7e:2b:a9:d0:ff:e0:
fa:9e:18:11:67:a6:2f:86:f6:73:b9:11:3c:31:e5:
2a:4c:f4:17:a4:49:9c:fb:97:12:71:6a:f1:1f:5c:
b2:b2:cd:07:da:3a:c7:34:01:04:96:1d:d9:99:09:
ea:dc:46:a8:a4:94:0f:ee:fe:4b:a8:98:e4:39:1a:
80:ff:20:d6:f2:a1:24:7b:aa:61:74:fd:c0:b7:ec:
8e:7a:4c:d4:38:15:6b:70:3a:b7:43:cd:b9:17:2c:
af:0c:c1:d2:bd:df:cb:66:4f:48:a3:09:60:d0:91:
c6:a6:04:05:8f:75:fd:c1:5f:63:30:cc:90:ba:2f:
60:79:54:1a:16:dd:02:4a:e6:b2:d5:36:db:b3:0b:
40:05:45:41:0f:57:d0:f8:89:69:28:f3:f8:8d:65:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:30:1D:EC:F0:7D:68:0F:F0:A7:C2:5D:C3:B2:48:11:C4:8E:F1:CB
X509v3 Authority Key Identifier:
keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4c:a3:15:aa:d0:d4:e8:9f:b5:1f:15:db:a2:f9:aa:52:40:
db:75:8e:c4:f2:38:16:09:48:44:23:31:0d:06:97:77:b8:de:
07:6f:1e:1a:6f:88:22:ac:1f:44:f6:ce:e8:d1:05:44:8b:aa:
9e:ca:df:1c:fa:eb:94:4a:e3:d7:2d:e5:c0:ae:d0:69:83:71:
2d:59:2d:c2:25:a7:45:64:4e:9c:cc:fd:93:9b:78:ed:d5:1e:
42:ea:d8:72:30:b2:0f:9f:9d:48:46:9e:ce:74:b4:80:6f:dc:
6c:ec:85:d7:9c:33:81:9b:53:3e:6b:41:f2:d7:c3:e8:51:a1:
a2:49:82:37:38:07:a2:df:96:4a:6b:d0:e1:25:49:a8:bb:47:
d2:a3:0b:d7:3c:2e:24:47:c4:ab:0f:af:7a:a3:c3:7c:f6:26:
76:cf:c0:12:25:00:4f:03:1d:b3:c8:9f:df:22:23:58:fb:d8:
79:5c:36:8a:5c:6c:a7:94:d9:9b:fb:d1:c3:5a:d8:e1:fa:cc:
28:69:18:0d:a4:b9:3e:c4:9e:4f:35:47:67:1a:80:4a:3b:79:
f6:0b:e8:8c:e9:15:47:8d:ab:ba:51:55:dd:6c:b3:9b:13:8d:
7d:25:3a:9d:30:7f:bd:a4:30:80:e0:a1:5c:45:2a:91:00:f1:
04:06:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:19 2025 by rpki-client