Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: 2dhiFRUNjjrvvyEp1wYsRVwWsvK08+3T/lD38w+f3NM=
Subject key identifier: 18:74:B3:0D:ED:8A:89:86:19:D8:A2:AE:3C:EA:BA:14:8E:ED:CF:86
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 0199FD33E0B6338241AEFE6F0935B8455C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 161B
Signing time: Sun 19 Oct 2025 16:00:59 +0000
Manifest this update: Sun 19 Oct 2025 16:00:59 +0000
Manifest next update: Mon 20 Oct 2025 16:00:59 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: 6hV6QdCShHo1tS48WQQJckJSoLPjgbdsiovr0PVRx/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e0:b6:33:82:41:ae:fe:6f:09:35:b8:45:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Oct 19 16:00:59 2025 GMT
Not After : Oct 20 16:00:59 2025 GMT
Subject: CN=1874b30ded8a898619d8a2ae3ceaba148eedcf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:a8:c4:97:e5:29:62:1e:36:32:a8:e5:cf:
87:9e:73:cf:2c:ce:77:f3:32:ae:ea:85:43:ba:0d:
fd:b1:a7:14:7d:69:1a:53:da:39:90:71:e1:d0:0c:
58:bc:c7:37:78:78:5f:46:15:10:50:d8:e7:48:4e:
e3:ea:b2:a5:de:28:40:93:fa:3d:49:45:f1:8f:4e:
b5:05:06:18:b9:49:3e:e8:e3:21:32:9b:f8:ea:90:
2b:78:7b:4c:07:64:de:c5:a4:65:db:c7:3c:64:ab:
93:5a:53:93:79:d9:db:68:ae:a9:22:29:45:fa:8b:
b0:ef:2e:5b:a7:f1:eb:93:eb:b9:a1:9f:28:31:12:
fd:58:97:50:99:1e:59:f6:fd:05:76:24:3c:f6:86:
a5:c9:14:9c:47:45:b8:8e:96:ad:e8:bb:bf:69:85:
30:19:15:97:40:19:b9:0f:dc:1a:18:6c:fc:a3:b9:
bc:ed:79:23:06:68:4e:cf:f5:86:e5:a6:98:a7:97:
66:26:73:44:48:9c:57:98:3f:8c:b7:bf:64:9a:2f:
fe:4d:44:87:a2:b0:20:d7:18:aa:7e:33:8a:58:18:
95:fb:f6:85:07:57:45:e4:75:a1:0f:9b:ce:78:12:
d6:6c:fa:9c:f4:3a:9b:5d:ed:92:ed:5f:7c:6d:24:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:74:B3:0D:ED:8A:89:86:19:D8:A2:AE:3C:EA:BA:14:8E:ED:CF:86
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f0:12:32:38:c7:ad:90:f1:b0:7a:6d:a6:45:75:a8:5f:f2:
cc:9a:8d:6d:7c:76:96:37:1a:b3:23:31:60:9f:3d:8f:11:ce:
fc:43:34:12:ea:2d:8d:22:39:2c:dd:43:9b:ca:d7:5c:fc:b9:
3c:53:02:66:3a:97:a0:cb:7d:fd:ff:38:b4:b1:ac:89:4c:40:
49:a4:df:1d:b1:96:96:37:f4:e1:4b:3c:9d:5b:0e:db:4d:96:
29:f1:6f:98:60:9a:2c:65:43:08:af:7e:33:75:6c:5f:f0:62:
f5:8b:bb:ad:32:7c:3a:7b:cf:e3:7f:b3:ad:6f:5f:fd:6e:78:
15:5b:88:c4:42:64:29:ad:16:57:86:88:cd:2d:69:c5:c5:4a:
88:8e:4d:bc:1c:ab:21:51:df:2c:97:7c:b3:9c:f9:dc:c4:b7:
e1:e9:38:7a:fc:33:95:e7:21:c8:72:96:30:b7:46:96:ea:fc:
d6:da:da:65:43:61:6f:10:a2:d4:50:e4:b7:01:c2:3e:7b:69:
91:53:e9:8f:b4:da:d7:74:4d:39:d0:ec:e7:f8:29:4a:80:56:
e1:7f:6e:d5:03:ae:ee:e1:f1:5f:2c:68:f6:e0:dc:4b:51:04:
20:3a:7f:e3:72:1e:90:5c:60:75:65:ed:55:ea:82:78:95:05:
ad:b7:25:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:46 2025 by rpki-client