Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
File: PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json)
Hash identifier: fcbqi0/CJNVuMYaBKthb90xOCBcS52sRWthqQkzOaWc=
Subject key identifier: A4:BE:E5:C3:3E:78:9F:6B:59:49:88:23:88:02:B9:01:0A:37:62:A7
Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
Certificate issuer: /CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Certificate serial: 019A4EF5452BC0170F446B3724960BBCFCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
Manifest number: 0B47
Signing time: Tue 04 Nov 2025 13:01:27 +0000
Manifest this update: Tue 04 Nov 2025 13:01:27 +0000
Manifest next update: Wed 05 Nov 2025 13:01:27 +0000
Files and hashes: 1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: EyjGdiPy2b0fNktW4bYUqVsahtNUAur+r0Fl9rqdDlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:45:2b:c0:17:0f:44:6b:37:24:96:0b:bc:fc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Validity
Not Before: Nov 4 13:01:27 2025 GMT
Not After : Nov 5 13:01:27 2025 GMT
Subject: CN=a4bee5c33e789f6b594988238802b9010a3762a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1c:20:f0:31:7e:97:ac:0a:d5:8d:06:09:83:
45:b3:b5:8f:52:2f:88:86:48:1b:2d:f7:8d:9d:58:
dc:3e:ce:6c:37:a7:90:03:e8:ca:15:d3:f9:4a:c1:
30:86:a7:63:b1:e3:49:df:a0:15:fb:fe:59:f7:5c:
93:99:2e:26:83:f2:05:30:fd:64:8f:03:b1:6f:ed:
f0:c4:22:8e:42:e9:8c:97:c9:f2:c6:b3:9f:63:a2:
72:3b:b7:67:80:81:5b:f6:25:bc:6a:13:a5:42:1d:
5f:7a:8a:01:4f:e8:e6:4d:6d:8b:84:cd:f3:8d:c7:
1b:01:5a:51:2f:ea:06:ec:9d:40:4e:1f:90:d1:a7:
3e:47:b7:5e:aa:ca:46:d9:fb:b1:f6:e0:38:dd:c6:
bf:dc:95:be:58:11:e4:6f:66:48:2b:72:73:c4:83:
6c:99:c9:22:65:1b:ef:74:c9:66:7b:ea:20:e6:71:
e3:ad:55:24:cc:67:27:70:27:15:09:d7:26:d7:f4:
b3:9e:1f:26:17:70:60:47:06:02:e1:7d:8d:2e:34:
6d:02:b2:bf:c1:5c:5f:67:d3:4f:e4:1f:6c:83:d9:
ba:70:49:6d:41:ff:bf:0f:8c:a1:15:fe:73:83:ed:
6e:82:6d:62:7a:e9:82:33:7d:9b:0d:a2:8f:55:a2:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BE:E5:C3:3E:78:9F:6B:59:49:88:23:88:02:B9:01:0A:37:62:A7
X509v3 Authority Key Identifier:
keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:71:cc:b2:68:12:5f:a4:ca:e9:4d:28:4c:5e:99:3d:b4:8f:
5b:84:60:2e:74:5f:4f:2c:ed:5c:5b:96:81:82:62:cc:e9:20:
a7:4e:0d:c0:52:fa:69:28:2b:cf:01:24:32:93:eb:07:07:c2:
ad:00:6e:95:74:49:c0:01:ac:78:4e:88:eb:02:77:6c:23:2f:
c0:d9:3e:98:e8:b3:23:49:3d:1a:4e:b2:9e:04:71:47:26:7b:
5d:04:03:67:57:a9:2b:aa:c3:dc:c9:0d:22:a8:f9:92:eb:53:
19:2b:a9:00:d3:e8:62:92:39:b0:4e:b2:f1:30:50:d8:bf:ce:
5d:5e:66:05:3e:21:9f:2f:97:20:c3:43:d0:a5:9d:e4:c9:ad:
29:dc:04:29:89:a1:84:82:41:1b:06:1c:ad:6a:6c:ca:64:3b:
79:f0:9f:eb:38:46:2d:f3:5b:fe:5f:1e:16:7c:10:ea:69:cd:
1d:88:3a:6c:95:b7:1d:07:d4:f4:29:19:0a:2d:37:62:27:43:
69:2d:c1:ca:54:1b:b4:18:ce:03:e8:1c:4f:5d:c4:35:c3:c8:
c7:4c:31:96:6b:06:31:75:fb:3c:b7:da:3e:74:ca:88:42:ff:
8a:6e:95:d8:3b:f9:34:68:9d:b7:bd:b7:63:3d:88:22:7f:0e:
f5:79:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:39 2025 by rpki-client