Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: S0Kwtnaf/JoExW+hzMfz6sPtXF/a7EjshyQdFQTpRw8=
Subject key identifier: 83:35:8B:E5:F3:44:F1:08:26:AD:F6:93:3C:85:F0:EE:90:16:6F:6F
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 0199FB45C375047FD05DB4690A9D4DF18FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:17 +0000
Manifest this update: Sun 19 Oct 2025 07:01:17 +0000
Manifest next update: Mon 20 Oct 2025 07:01:17 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: gzDBBxv4l7y5r2A3AiU/kYOs6U16Yib8QLhiSkk+b5c=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c3:75:04:7f:d0:5d:b4:69:0a:9d:4d:f1:8f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Oct 19 07:01:17 2025 GMT
Not After : Oct 20 07:01:17 2025 GMT
Subject: CN=83358be5f344f10826adf6933c85f0ee90166f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:6a:db:0d:16:cf:da:6e:cd:97:c1:28:a8:
f4:98:28:53:e3:b4:44:7e:a6:d9:f5:23:91:51:a4:
5d:6e:ac:98:87:ac:b3:ff:75:c3:cf:82:36:76:be:
35:29:8e:1a:63:85:af:0b:de:5d:84:ad:8f:02:19:
8d:60:9f:98:6e:e5:f1:13:29:ef:87:d8:2c:4d:db:
2e:34:ed:57:9d:a4:01:3f:dc:33:4a:8d:1f:85:37:
06:68:6a:52:5a:8b:4a:34:97:2c:1b:5a:21:b8:de:
8f:ba:97:ed:75:fd:5e:c8:ff:95:2f:7c:19:2a:0c:
6b:3a:fc:bf:3f:5e:94:a8:d8:f6:92:23:c0:9d:ff:
11:dd:f5:b9:3a:1e:6d:ac:85:95:4f:68:88:70:30:
e3:64:04:90:1f:04:6d:c8:de:f7:ce:91:cd:d2:a0:
68:5f:55:e7:cd:6b:52:c7:80:8a:e3:ec:29:60:3c:
c9:92:0a:e8:2d:5b:81:30:c0:97:23:61:5e:e7:df:
c3:ce:af:51:cf:6b:22:9f:fa:07:d0:8b:56:7e:1a:
3e:6a:2d:45:e8:4b:c7:be:ae:e3:45:d6:13:2d:65:
26:f1:5d:13:7d:6c:52:52:2f:7f:4b:37:5d:5c:ab:
f5:09:a4:ac:14:1c:c4:27:9b:91:d9:31:17:35:96:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:35:8B:E5:F3:44:F1:08:26:AD:F6:93:3C:85:F0:EE:90:16:6F:6F
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:77:87:6d:99:1a:3c:71:57:b0:9e:85:05:41:35:fa:55:d3:
c2:a0:d2:89:27:0a:00:43:02:a3:26:0d:f1:0a:a2:dd:a2:da:
54:04:6d:d3:5a:9a:02:a8:5f:43:9d:ac:00:71:2b:95:9f:3d:
4f:2b:88:20:a1:03:6c:1f:b5:7f:5c:8e:35:64:3a:99:b2:4e:
4d:2c:62:2b:66:34:5c:70:ef:e0:43:74:0c:4d:b9:c5:e6:26:
e0:22:f3:b7:64:33:af:e1:1b:63:ec:53:49:b6:c4:05:42:42:
d2:f3:d4:6c:cf:d5:6c:3b:f7:46:4d:36:0c:95:3e:4b:7a:91:
87:30:c2:71:d0:b2:17:4f:d5:c9:14:c6:af:aa:1f:fd:d9:e8:
8d:7a:96:d8:d0:e9:93:f9:f3:8e:df:cd:ca:e6:66:e7:d2:10:
d8:36:c9:d9:90:2b:8e:02:46:2c:b8:8c:e4:0e:d2:f3:8d:44:
24:81:a1:1c:0b:f0:2e:db:26:e4:22:fa:97:8c:47:ce:cb:ae:
3f:8c:42:5b:a0:03:3d:98:48:b9:29:9a:a0:e4:0e:30:d4:bd:
58:62:05:93:44:59:db:18:a6:0e:8e:c9:58:e9:50:01:5c:8e:
cc:da:c8:03:3b:e7:7b:4d:ac:37:ca:c7:7d:a8:86:02:29:41:
98:dd:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:15 2025 by rpki-client