Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier: /3jzWdQO4Fjzl96mmZ310yE47AYxgPE1MWlfR5luefY=
Subject key identifier: 2B:3A:72:F4:F7:5A:E3:EF:77:15:B3:A7:DF:1B:E5:0A:CF:37:4A:BE
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial: 0199FCC66AC4E3812AC01EC4AC6C05691607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number: 07C7
Signing time: Sun 19 Oct 2025 14:01:25 +0000
Manifest this update: Sun 19 Oct 2025 14:01:25 +0000
Manifest next update: Mon 20 Oct 2025 14:01:25 +0000
Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: 3FON7FtNc7ZhrLbkDxP9cuzsZRTsS7lXcMwA4Mg17nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:6a:c4:e3:81:2a:c0:1e:c4:ac:6c:05:69:16:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Validity
Not Before: Oct 19 14:01:25 2025 GMT
Not After : Oct 20 14:01:25 2025 GMT
Subject: CN=2b3a72f4f75ae3ef7715b3a7df1be50acf374abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:0f:86:08:29:09:6e:ab:aa:95:ce:09:9b:
bb:60:bb:33:5a:e6:a8:85:ae:fc:95:87:66:e5:d3:
bc:85:8a:58:03:e6:42:ce:ca:6c:0b:f1:90:bb:29:
db:a6:f1:e6:4c:43:fb:63:ea:75:0e:13:38:38:7b:
b8:c0:82:c4:97:10:f1:a0:38:b1:bd:4b:01:6f:50:
8d:16:38:66:04:37:05:38:26:3f:5c:ae:07:2d:48:
82:e9:9b:dc:1c:d8:7f:41:83:e9:aa:e1:ba:a8:13:
2f:bb:68:29:69:51:80:37:d0:2f:2e:13:ed:dd:58:
59:c4:62:7b:60:7d:0e:52:42:50:6c:b1:7e:44:ed:
5b:6c:1d:af:1f:9b:c1:c6:33:73:e4:37:61:40:79:
f1:bf:45:23:d5:dd:96:81:cc:7f:09:ee:a9:dd:6d:
11:99:15:65:1c:1c:ce:5e:b3:9b:28:aa:8a:7e:ff:
71:60:b5:54:3a:95:7f:bb:d5:ed:8f:3f:9d:40:04:
22:6a:f0:6f:af:fe:78:3b:03:5c:1e:1a:99:d8:2e:
9f:7e:81:7f:18:14:f6:de:2a:d5:bf:f7:0e:c1:2b:
44:53:bf:8a:e5:96:41:58:ad:db:dd:77:22:97:fc:
0d:49:f1:08:df:c8:d3:4e:c4:69:fe:c6:1b:74:e7:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3A:72:F4:F7:5A:E3:EF:77:15:B3:A7:DF:1B:E5:0A:CF:37:4A:BE
X509v3 Authority Key Identifier:
keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fb:ac:23:74:91:29:14:e4:0c:a7:7c:6c:09:63:5c:a3:e4:
9d:9a:25:bd:07:f7:df:93:7f:c7:ba:5a:7c:4f:84:98:bc:04:
02:62:ce:2e:28:e5:d0:3d:b2:e8:b5:79:50:8a:35:87:2e:de:
33:ba:4b:be:db:df:3c:8d:bf:ab:22:b7:27:42:06:17:e0:a3:
d2:dd:08:8e:c3:5b:65:ce:cd:45:4e:3c:a7:2c:7a:e8:dc:0d:
5a:1b:65:73:25:8e:66:42:82:e7:b7:31:1c:93:82:2e:10:52:
d9:f2:e8:a5:aa:e3:ae:0d:98:ea:4a:0c:54:bb:33:9c:34:fc:
00:b1:dc:38:37:7e:1a:e1:d4:20:73:02:b5:0d:ea:72:6c:0f:
fd:3e:5a:9d:26:02:0c:53:e8:84:80:4e:a7:bf:81:8b:33:b5:
1d:3d:f1:47:c1:a2:57:4a:a9:d6:00:48:19:9e:ea:b3:0e:7a:
b0:1d:2a:d2:78:7c:12:78:e5:76:a1:da:0c:6d:2e:75:a7:ad:
67:d2:c1:5e:a5:e0:10:47:1d:f7:e2:d8:19:3e:24:08:23:12:
44:43:98:55:63:ad:aa:ed:e1:7f:93:fa:07:d5:2f:8d:21:ed:
28:bc:2a:4c:b1:7d:bc:5a:65:6e:5e:e3:ca:69:7d:71:22:ae:
8f:92:f6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:01 2025 by rpki-client