Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: dVbMxzWju/MO615n7xYXfpl+4Y7PaKV8H/kw+07o07A=
Subject key identifier: CA:46:1C:62:C0:AC:A6:E4:E3:57:CE:37:A7:C9:C4:98:C9:58:EB:29
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 0199FF5973294AFDC052AD6BCF7715611D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 02:01:16 +0000
Manifest this update: Mon 20 Oct 2025 02:01:16 +0000
Manifest next update: Tue 21 Oct 2025 02:01:16 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: KWD+a5V3OhSIyEOvE75ACGSLJvPAEKBt6Nx4zdCLmFM=)
2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:73:29:4a:fd:c0:52:ad:6b:cf:77:15:61:1d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Oct 20 02:01:16 2025 GMT
Not After : Oct 21 02:01:16 2025 GMT
Subject: CN=ca461c62c0aca6e4e357ce37a7c9c498c958eb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:c2:51:6d:ee:bd:b9:86:52:90:13:c1:a9:
8b:63:c1:1b:fc:8f:7d:10:ea:bb:e4:be:65:5f:ef:
56:b9:d1:9d:9b:7b:8a:a6:14:09:91:e9:72:43:1a:
9c:81:73:c8:e5:ac:a3:f3:8d:42:40:55:3f:4b:a0:
cc:5f:96:d8:fe:26:67:93:9a:db:d1:67:43:59:38:
db:d2:aa:53:5c:ba:ba:0d:3a:e1:ee:70:68:61:9b:
22:aa:4d:66:ff:00:03:eb:09:f5:78:ed:76:ca:43:
6b:06:d4:c7:23:92:1e:84:61:88:fd:96:fa:0b:53:
41:d4:2f:60:15:a2:f5:f4:12:df:bc:fd:60:a5:5e:
8a:90:33:2d:f7:06:42:2d:b7:18:e9:87:df:02:79:
6d:26:c4:5e:6e:92:c8:ef:19:1e:94:54:c3:89:b0:
39:fd:dd:d5:6d:69:f2:d3:58:51:e3:1c:d1:91:65:
50:17:10:a2:71:6e:e8:cc:92:f8:bd:0d:93:24:87:
be:ef:7c:c2:05:d8:87:68:74:8d:fb:1f:57:ab:0b:
e7:42:1c:45:56:a2:2b:69:86:e3:c4:b6:3d:fb:0b:
56:24:63:64:2a:ec:5f:ad:e5:06:88:e0:18:d2:55:
5b:2c:d7:e8:33:d0:2c:14:80:62:dd:85:f8:6f:8f:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:46:1C:62:C0:AC:A6:E4:E3:57:CE:37:A7:C9:C4:98:C9:58:EB:29
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:17:2b:59:40:2c:68:a7:05:30:55:ad:e6:fb:30:4c:60:ad:
0f:87:06:6b:26:f1:29:ac:f7:26:b7:15:4c:c2:15:df:e2:88:
16:71:85:7b:d4:04:26:e8:08:5a:5f:c8:37:c0:35:c2:e1:f0:
59:43:1b:4a:22:05:df:5e:f7:6d:59:75:88:11:d3:6a:d6:29:
9f:95:ec:85:18:1b:42:08:85:74:cf:5b:44:0b:51:e7:f3:eb:
2f:fc:de:a5:bd:51:49:8f:c4:a0:33:c1:84:22:53:59:c4:26:
fd:df:b8:57:51:b9:41:fb:a7:a0:bc:8e:ff:eb:a3:83:4d:3b:
b4:1c:8d:79:e6:70:c3:22:bd:64:68:e2:c6:61:cc:38:a7:0e:
a8:86:16:70:f5:d4:8a:0c:4b:8b:a2:8d:f0:1f:68:94:7f:85:
ed:37:57:9c:5e:d0:b2:07:e6:80:72:7f:3b:27:ba:38:60:00:
03:f9:34:f0:db:f0:55:cd:d7:87:a6:37:b8:af:ca:cc:31:1a:
73:d7:83:3f:06:cb:2e:c0:b1:e5:27:ce:ec:e2:7d:26:75:9c:
4f:d2:61:2c:dc:05:37:56:dd:ce:c1:6e:3b:47:4f:27:27:b0:
de:59:6e:c8:cf:a1:f3:8c:04:ec:7d:64:be:a2:dc:cb:2b:51:
e4:3e:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:50 2025 by rpki-client