Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier: NQaE8SqYck3e1oz5o/Vf8Le0ABEZpBKC2qL8YUKepCU=
Subject key identifier: 3D:9D:E1:B6:4D:5F:CC:68:07:E4:6D:94:B8:23:01:EA:BE:D8:3A:7E
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial: 019A4DE1948A104CB3E0E23454D8A6A1AFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 08:00:20 +0000
Manifest this update: Tue 04 Nov 2025 08:00:20 +0000
Manifest next update: Wed 05 Nov 2025 08:00:20 +0000
Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: rv7ndB5sky0iz5/uSHPPXgEyLN1BfBDgRE/j8Y9qhIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:94:8a:10:4c:b3:e0:e2:34:54:d8:a6:a1:af:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Validity
Not Before: Nov 4 08:00:20 2025 GMT
Not After : Nov 5 08:00:20 2025 GMT
Subject: CN=3d9de1b64d5fcc6807e46d94b82301eabed83a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:9f:fb:cb:32:fa:57:07:0e:b8:17:1c:2f:
82:f3:2e:c0:7a:c1:5e:22:ed:e5:fc:3d:d8:44:d9:
80:75:1b:cf:55:47:14:4d:a1:a2:02:cd:6d:df:4c:
e0:01:34:0b:2e:f3:ce:56:6e:d1:62:01:e2:6c:b5:
c0:e4:42:b0:7d:14:b4:ad:05:37:ce:53:f8:42:74:
12:54:3f:ce:8c:37:2b:e8:85:31:47:9a:a2:d2:ec:
6a:a4:4f:a6:b2:7e:51:2f:dd:42:0f:ce:f0:83:34:
69:61:f1:0a:56:b8:8f:a1:0f:4d:2d:09:84:7d:8b:
24:b1:a6:41:77:7e:d2:e7:b8:7d:7c:a5:aa:41:cc:
18:8d:25:55:52:51:8e:79:42:04:4a:47:c1:3b:ae:
50:6f:74:f4:c1:7d:03:92:6b:2b:01:4c:a8:75:0a:
78:b9:4e:a8:4a:ab:24:c8:3c:13:88:76:21:c9:62:
a4:12:d2:ec:de:a2:75:c2:b0:a5:39:77:30:09:47:
c4:3d:85:71:ab:5e:53:01:83:e9:1b:7f:7e:d7:64:
73:00:e0:df:85:c0:93:8f:24:5d:ea:fb:c1:87:43:
2a:87:e4:b4:6b:7a:ee:b3:ad:ce:e5:f7:c8:31:d6:
57:51:b7:0c:bd:ee:4a:25:08:36:c2:4a:32:31:ee:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9D:E1:B6:4D:5F:CC:68:07:E4:6D:94:B8:23:01:EA:BE:D8:3A:7E
X509v3 Authority Key Identifier:
keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e4:c7:5b:5f:e4:41:f7:77:87:f4:50:ec:72:ee:66:56:f9:
e7:ed:87:e6:6a:6d:7a:ed:44:2c:8a:7a:13:f2:bd:85:fd:bd:
05:24:f0:bd:af:31:3c:59:e0:52:96:50:9d:65:5c:bf:56:70:
b6:cc:a6:66:e3:9d:59:73:b9:8e:78:ed:f4:8f:f9:8b:25:e4:
c7:ef:22:30:b4:a8:84:53:db:70:ed:c8:1f:51:3f:9a:6e:a9:
f6:7f:43:c9:ae:ab:34:27:78:2b:a2:90:4a:dd:50:41:28:9f:
e3:b7:7a:23:dc:94:ac:41:6d:bf:3b:28:2c:18:9c:15:cd:8d:
20:49:e8:37:74:98:aa:cc:68:5f:54:7d:8a:b9:a9:ad:93:b3:
78:19:22:87:24:ce:5a:b0:2f:b3:1a:f8:c3:e9:68:30:17:55:
8e:b1:d4:1f:05:1c:b8:15:b5:c6:f4:f5:89:38:87:c6:08:c9:
22:4a:15:b4:80:d8:da:97:88:8b:6f:91:77:82:83:24:1a:46:
7c:55:93:b2:4a:48:ee:10:13:5d:d4:f7:72:93:8b:40:51:a4:
52:e6:e2:a5:72:e5:12:78:39:ee:65:6e:db:d5:4f:72:ec:b9:
c7:f0:36:88:aa:6c:c2:2e:9e:7d:1f:99:9a:97:32:da:13:8d:
60:16:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:19 2025 by rpki-client