Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
File: Pq9YPXwbe09XMQE8iymLpQVGTlI.mft (raw, json)
Hash identifier: N6b74LjaSynRoS90VE2AYqEdEVH+03xFshxoDXzw0lA=
Subject key identifier: 98:34:5C:B9:DF:FE:F4:08:90:D8:61:B3:AC:55:9D:91:44:09:7F:98
Authority key identifier: 3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
Certificate issuer: /CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Certificate serial: 0199FD345E8FB01E0D25519F72A5700051FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
Manifest number: 12FC
Signing time: Sun 19 Oct 2025 16:01:31 +0000
Manifest this update: Sun 19 Oct 2025 16:01:31 +0000
Manifest next update: Mon 20 Oct 2025 16:01:31 +0000
Files and hashes: 1: Pq9YPXwbe09XMQE8iymLpQVGTlI.crl (hash: PUYp+nXkonY147g66rH5wnxRfygOv1WhyxsStai3d6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5e:8f:b0:1e:0d:25:51:9f:72:a5:70:00:51:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Validity
Not Before: Oct 19 16:01:31 2025 GMT
Not After : Oct 20 16:01:31 2025 GMT
Subject: CN=98345cb9dffef40890d861b3ac559d9144097f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:36:e3:ab:e3:8f:d0:48:c0:11:01:ed:40:
f4:e0:37:9b:45:20:cf:e7:42:be:28:1d:a0:b7:ce:
3c:b3:9f:d5:9b:32:89:cb:ec:23:b4:a1:84:ba:d8:
c1:62:ec:b4:1d:8a:18:c5:50:99:14:1d:1a:51:b8:
22:b4:d8:8f:d6:06:42:37:7a:32:eb:d8:bb:5b:46:
f5:4f:48:2f:95:db:53:0e:48:08:3d:7d:92:99:fb:
a1:1a:3d:10:8f:19:af:7c:05:69:d0:51:e2:7f:60:
c3:b4:70:41:f0:70:97:c8:76:fd:dc:ed:fc:48:c6:
e8:6f:45:a2:4f:ea:30:f0:48:9c:14:20:5b:39:86:
52:29:93:79:e3:ac:40:c7:84:65:99:47:0e:5d:ef:
c1:fb:2d:44:c3:98:56:56:ef:bb:27:51:33:54:d3:
c9:20:6b:f9:d2:c9:6a:63:22:c4:56:40:c6:f8:0b:
4e:e0:0d:52:4f:20:14:bc:a7:f8:6e:a0:c5:df:e2:
cd:54:9a:40:45:c1:0e:00:59:e8:2c:d4:c2:22:b0:
df:a1:62:9d:ec:d5:99:c3:ed:13:07:1a:22:14:e1:
30:35:94:cf:94:ee:98:98:79:0e:12:61:30:43:47:
16:09:a4:98:c0:12:f0:1d:a9:94:36:83:a9:f1:4b:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:34:5C:B9:DF:FE:F4:08:90:D8:61:B3:AC:55:9D:91:44:09:7F:98
X509v3 Authority Key Identifier:
keyid:3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c5:fb:01:aa:e5:94:b6:c0:51:d2:50:ce:a5:31:29:0f:c9:
36:bc:48:79:e0:83:39:dc:f5:7a:a6:69:01:09:57:37:3c:a0:
06:45:36:cb:af:aa:70:ed:85:f1:9c:d3:3f:f4:2a:18:4d:16:
a2:a0:ab:02:a7:6f:22:3f:02:e8:35:f7:65:30:6d:60:35:a1:
8a:c5:76:49:54:c6:4a:b3:31:c4:77:06:3a:a5:4f:4d:85:d2:
0c:7b:75:76:0a:06:cf:8d:e0:75:d4:10:fa:fe:1b:12:4c:40:
27:bd:f0:75:a3:67:0e:d9:e5:82:7b:6f:9d:79:ee:98:33:e0:
29:9e:03:72:f8:25:8e:25:2c:b3:16:11:f7:f8:5d:e9:e6:3f:
f6:f6:39:3a:33:da:c8:3b:7d:39:85:0a:68:60:9e:0b:c8:ce:
42:02:dd:c1:b2:1b:85:4b:64:21:54:fa:8c:3b:65:c6:8e:49:
e0:87:a1:32:d2:7c:e0:b3:a9:dc:f4:77:64:22:07:76:03:6b:
32:67:bb:eb:19:49:f8:e9:c5:9a:75:a8:77:6a:e1:f5:0f:a2:
13:14:b6:b3:fb:bb:ea:ab:b9:e0:58:c6:ee:51:61:a6:df:26:
bd:7e:ac:da:a0:b5:7e:71:35:0f:93:c1:67:0f:f2:73:17:d8:
67:f1:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:27 2025 by rpki-client