Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: /u6hp+fqoyOD9vRPN8vos4SAQXh4poDCgcbP7gJEY6U=
Subject key identifier: AA:10:CD:DC:AE:03:73:0B:03:ED:DF:72:1C:44:AE:0B:CD:FB:3C:DF
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 0199FD344B910EE96A3713F129A66688A1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: tWidLd3Sai0Nfek6SM0IF2yvYGJ2jAJHaIHNC7wwvZ8=)
2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4b:91:0e:e9:6a:37:13:f1:29:a6:66:88:a1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=aa10cddcae03730b03eddf721c44ae0bcdfb3cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8f:cc:8b:22:03:e6:61:cb:47:06:ad:b4:a7:
5e:e0:98:ec:99:30:f5:22:29:7e:07:7d:bd:48:79:
06:12:9b:65:38:41:4b:53:23:83:eb:ab:30:63:3b:
5b:7b:70:65:ee:d4:20:1d:5e:8e:29:06:39:16:7c:
9f:50:07:c3:0c:3f:26:ab:c9:6a:65:28:16:55:b5:
db:52:d5:32:bd:6f:81:b6:cb:60:33:e8:fa:3b:d2:
33:bb:e3:a2:16:85:f0:da:76:cf:3c:69:d4:aa:33:
98:eb:3b:ac:5f:b3:af:b7:93:45:30:5b:3a:7a:96:
bc:fc:4e:8f:ff:36:51:05:03:6d:ae:0b:6e:b2:f8:
3e:ff:e8:5b:74:d2:4d:bb:ce:17:40:68:20:40:5b:
bb:90:5e:96:d4:d9:e1:8c:fe:a2:f0:be:78:e8:84:
e5:81:5c:4f:6b:b5:f3:52:a2:bd:bc:f2:91:d7:33:
f6:84:b0:6d:03:cd:27:51:8d:05:d1:ba:ec:23:eb:
6e:09:e7:6c:2d:30:f4:d8:74:10:31:32:4b:66:79:
13:7f:05:09:fa:c4:7c:64:bb:bf:c6:99:13:6c:f0:
dc:e8:95:c4:3f:8d:13:ae:e2:0e:f9:69:f4:dd:47:
5d:ea:95:b5:2f:81:72:18:d8:c4:87:7a:32:26:47:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:10:CD:DC:AE:03:73:0B:03:ED:DF:72:1C:44:AE:0B:CD:FB:3C:DF
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:80:b7:f1:68:4a:a8:8f:57:03:9d:f1:80:bb:ad:d0:f2:d0:
18:d2:46:48:59:21:29:34:06:30:70:0a:b2:f5:8c:cf:ff:16:
75:9b:49:99:bb:f0:0a:b3:dc:e7:89:8f:91:d0:e1:55:c1:02:
72:08:81:fa:c8:c7:45:ba:87:8c:62:f9:6e:f6:1f:46:35:e8:
c7:c9:3f:93:11:14:4f:16:b4:5c:cb:18:25:41:cb:da:8f:2f:
3c:7e:92:57:46:cf:77:41:c2:6a:ef:17:11:6a:6a:b7:c0:b4:
8d:35:95:24:bd:ab:e3:dc:8d:f3:5f:4c:8b:6c:27:18:16:6d:
6e:4d:35:c4:3f:8f:58:ae:f1:8b:75:1f:fa:db:25:0d:30:69:
a5:be:98:cb:88:39:93:a6:92:96:3c:72:2d:76:e7:34:81:84:
41:a8:b7:bf:07:fd:07:1a:ae:31:82:ea:1f:15:86:7b:7e:48:
af:05:95:34:5c:bc:e3:42:e3:16:dc:41:bf:c5:1b:11:07:62:
4f:8c:c2:77:14:63:bb:a6:f1:f9:b4:cd:1a:24:0c:da:a0:72:
64:26:e1:a5:77:02:96:68:4e:1b:a3:e3:c0:52:15:e8:1a:84:
d2:b3:c9:aa:4b:30:63:d0:78:7d:98:d5:c8:99:ee:06:b9:aa:
7f:28:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:03 2025 by rpki-client