Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: +rrm00TBfCoM5n82T3ZYj85raf2JO4IlCA5v6ttL6M8=
Subject key identifier: B9:80:1E:01:C1:27:60:C8:D7:1D:F2:24:21:E0:A6:A7:F7:19:0C:D0
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019A4DE20DA07E665218D38908AF9C890248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 09C3
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: PHfk7slvF+TTWsj2khCUoWBoKTxHzPzsRYyuDtTRv10=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0d:a0:7e:66:52:18:d3:89:08:af:9c:89:02:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=b9801e01c12760c8d71df22421e0a6a7f7190cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:d5:ea:ca:a8:f7:b8:59:73:f0:10:68:f8:
50:61:5a:57:fe:ee:9d:3a:45:44:bf:5a:72:27:54:
67:7b:57:96:3c:cd:28:83:57:a1:ee:cb:83:0c:0c:
cb:1f:12:fa:d9:e5:0b:59:41:fb:70:96:55:e7:cd:
49:e7:7e:a3:59:83:cb:3c:b1:43:77:b8:cc:a0:f5:
9f:8a:e9:69:17:63:c6:6d:ca:07:53:bd:d5:cb:75:
5a:f3:b5:ea:45:b1:8d:cf:41:46:a4:06:18:82:29:
74:21:23:4d:43:3e:ab:6a:08:bb:2d:d7:78:e9:3d:
1b:da:ae:25:54:ea:b6:7c:6c:05:02:a9:13:dc:6f:
69:ad:0a:c4:69:a8:9f:6d:ba:49:2d:1d:c5:d3:40:
44:fa:cb:01:42:42:ab:7f:7d:2d:99:36:8f:4e:5d:
05:8c:a3:e1:a0:64:f8:4a:46:8d:ba:aa:be:96:fd:
60:d7:c6:71:e3:cf:e6:50:1c:10:0e:a4:3f:2f:5a:
00:9f:88:81:61:c7:60:99:b4:0e:6d:07:b3:8d:f8:
f7:1c:fa:7e:11:be:ed:a5:91:42:98:a3:fa:77:5a:
29:db:6a:1f:d9:40:69:4c:6c:1b:25:c4:2c:76:b2:
d4:78:e8:60:ac:58:44:9f:43:5b:f9:87:93:9d:e9:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:80:1E:01:C1:27:60:C8:D7:1D:F2:24:21:E0:A6:A7:F7:19:0C:D0
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c3:03:9f:fd:14:a2:39:ca:a3:c9:cd:4d:3d:31:d8:fa:1b:
20:09:9f:f3:94:4a:d1:87:77:da:43:2a:3b:2c:21:1d:ce:d3:
4b:fd:f6:e0:24:36:d9:3c:8e:88:96:c3:be:69:d8:60:e4:f0:
ee:56:14:40:ac:32:1a:68:fe:0c:50:1f:0c:45:89:25:d0:a9:
f7:42:f2:35:18:29:63:6a:ed:6e:01:34:62:15:12:d6:dc:d2:
c4:31:9b:6b:c6:57:8b:c5:78:19:89:ba:ca:09:d3:9b:e0:67:
e2:b9:7f:63:5d:62:38:33:84:87:5c:73:17:4e:0d:96:16:f5:
ce:2d:fe:98:de:0c:c9:e5:de:0d:f7:29:af:17:4f:33:f4:6d:
86:6d:22:85:a1:92:5a:24:ba:98:5e:db:d0:8a:3a:7c:21:04:
34:38:49:5e:96:f8:b7:70:3a:e5:03:a5:23:d3:2b:15:50:ec:
f2:2c:6d:96:c0:43:99:58:eb:98:1e:c9:fc:48:54:19:37:76:
20:36:36:b6:36:b3:05:b5:3f:91:91:c1:da:83:b1:82:d8:b1:
0e:51:f9:6c:ff:b4:3d:cd:c3:47:d4:56:86:7e:e4:5e:b6:7f:
20:a7:53:b4:be:57:f0:44:e5:0e:c4:6e:6b:e9:c2:bc:7c:b4:
da:a5:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:27:31 2025 by rpki-client